{"report_id":"86409b6c-06a0-4ae7-a713-b2baef9bace6","version":6,"status":"done","tags":[],"date":"2026-04-21T08:00:01Z","url":{"schema":"https","addr":"recoveryledger.live","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":0,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"recoveryledger.live/","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"title":"Ledger Recover - Secure Crypto Recovery Solution","dom":{"size":157265,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43149)","md5":"1dafc5ad6d8ead50c553e0754396fb88","sha1":"aaaa15e31c29897d8aacdf3dc1fb6769de667c6f","sha256":"51ad87d9cbdb0efa2a84179e649122a63d964eab6e45b54099990b0f664c2bc9","sha512":"f015bb6e2b1fc0c88d48f79a21ad2e93549d236ce8a7b825c064443a384c5cf94571af83afcf7754c75b77adf8b2227eb8fe7a0e8f101abfb71d5894722af29c","ssdeep":"1536:EPkmXx/c64Jysq7v6C7IKIh0Gy/1jhzCvWrwCCCCsZCCCCtedCCCCtCCCCKoAlaF:kwCZe47Jl7O","tlshash":"aee3fa3062082e3e961b87e4f6a5f37c717ab289da5bc018f5bc052757cbdc5e823694","dom_hash":"domhash366f0c10e1e4e18e24cb2d95ced1b73b","first_seen":"2026-04-21T08:00:12.777638Z","last_seen":"2026-04-21T08:00:12.777638Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"recoveryledger.live","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":0,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-26T08:00:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"recoveryledger.live","ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-21T08:00:06.385643Z","last_seen":"2026-04-21T08:00:06.385643Z","alert_count":72,"request_count":72,"received_data":3422929,"sent_data":33814,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-19T22:16:46.237507Z","alert_count":0,"request_count":4,"received_data":197468,"sent_data":2236,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-19T22:20:23.925162Z","alert_count":0,"request_count":1,"received_data":18375,"sent_data":490,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"storage.googleapis.com","ip":{"addr":"142.250.178.123","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":880,"first_seen":"2012-08-06T06:33:30Z","last_seen":"2026-04-20T05:31:47.817938Z","alert_count":0,"request_count":1,"received_data":3140,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"recoveryledger.live/assets/FreeTrialSection-ChSRd2rH.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"200d5059a1441ca0b07d71fb73e1e577","sha1":"b7d4729de366ceffbe57fb1852da333b588d7fd6","sha256":"d4cc99b2582013cd5faaed6a80c63d58e6e6cecc4a5803d6e94a850d14262ae9","sha512":"036cacc6d69808ffae869127e30a944524e8a1affeb9b2cb3d5bd74ad46f2e341ccec3f07a99f722254a012e967a962b618cf70450b90de92f61024fb824eb71","ssdeep":"96:/y1zGm1/pOLDoY9CMr2PK7p0Zdug/3IwfTeizvJPrx0851dK075W08MiihGwkQ86:AdOLJVr2PBb/IwfTeizvJPrxFP6WQVM","tlshash":"7bc1fb6c5c6167efd7070ea6bfa6d6c4d3529446e1884b29f391ec111463e01c8437be","size":5694,"data":"","first_seen":"2026-04-21T08:00:12.800563Z","last_seen":"2026-04-21T08:00:12.800563Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/HowItWorksSection-BkR0ZWFQ.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1938f95937e55ae2e0b6583f5493c34d","sha1":"e2c077506a19972abbbee2a140781fb3bca6a77b","sha256":"1d800b9c8a8f9f010bba991d4b76b5fd20e5fc3ce4f72d341a159f64b5593835","sha512":"385793c00def21df547eec8a5816d42652a60c8792d11f3d3a899af4536b50914714766c8724f8510275546a1ea30316dde3f6bad706f5f8b5eec8fcde74077c","ssdeep":"192:y2ksruW0bq4OS+JBIjm5GPFfMxFJMV15IeMLgjEXf4s2MFmwZ0R+0/:y2ksa1EBbG9fMjJi15sgOQss","tlshash":"ea120df19a1057ad720f4fdbbd76c2dce8730acce74588b4f2c1b956acb4644a0626b4","size":9584,"data":"","first_seen":"2026-04-21T08:00:12.785866Z","last_seen":"2026-04-21T08:00:12.785866Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/refresh-cw-DjbEjsgq.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8985743def05f147f7de56613b12ad9c","sha1":"b3228bdaf4eb3dffdada1eaaceb9bcad7c3cf03d","sha256":"3f722ef322efe36c45228c20756bd9b65e85f2b57f4ff87c844965e0b46215f6","sha512":"c545653a4de71943517e9d8f3e8ea759719a14da87ad2460c59be8738a01ff98a0e3866062d9280eba5c5bc2b711dcb2d423faced301cf0bc02de926255a5680","ssdeep":"","tlshash":"8931d17b64c4695d63920ab61d3e16f9d63acc5c1eaa0022919136843fe4c3dc2dbe7a","size":1723,"data":"","first_seen":"2026-04-21T08:00:12.835685Z","last_seen":"2026-04-21T08:00:12.835685Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/shield-B4aVqY00.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"ff84bd77372eb41678ecf88c45a27b4c","sha1":"8ce9a56107c1146353773f1491e1b5a6bad5ebac","sha256":"07322cbb34a1f7e615113bea397e21291cc15bbbd0bedb88a59de733cfe54c4b","sha512":"3ed61d1e2054f9f1c9c2f1114dc4f86c9178a8bbef1ab458829655d3146b568d6c64d2003baafc4b405911f2619546c70039b1c925e0eb7d40df73ff3aecfd6f","ssdeep":"","tlshash":"2b31f12cddc4325c334a46d3eb7f56ecc936cd956b585441903461e52e24d26c1c9f38","size":1571,"data":"","first_seen":"2026-04-21T08:00:12.825007Z","last_seen":"2026-04-21T08:00:12.825007Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ProductBundlesSection-DIVgc2x3.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"50e6cff528709a40472238ccfc47cd37","sha1":"95e47f00fd6ad885729279d204ae3de5fc7d2059","sha256":"d541f5e2964af4a60a409d756901a0e18971da0452485f9042d165db7a152726","sha512":"e8f3f6de867af5c986b93c7efc626fb11edabb2e8c7a5db30b86913812b41eab546a8acd6479633af954368c567320d7fa43f4999c725264cab28785cc700c8a","ssdeep":"192:GX1gRcfObuq/XTVipK/52NFUgVE9qT1QkK:Gl1mbL/XTViM52NFUgVE9qT1QkK","tlshash":"88920fe8db10faad271b5fe73a3bb8fdd0221055ea468846f164f41433f412e994a678","size":21224,"data":"","first_seen":"2026-04-21T08:00:12.805845Z","last_seen":"2026-04-21T08:00:12.805845Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ExpandedFAQSection-CFvJ02nJ.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8db6af2091cbc06f857f6bc8c32478b","sha1":"e28cc0a082d40d956bf30e7f9fb13c53e7e7a8ae","sha256":"e6f9a650de03edbc7312d49fef062a0b19dee90329cfe4972b806a119e502498","sha512":"84d0e6d327dc75d66b6f29cfc83aab1870c7c5e1d8f94fa65b5e3db1329d2907965df667b081557b1ae46efc2c278244b9fbced7d6f9bae3144f55296ef5f2b5","ssdeep":"96:Jhxxa1nj+O9t9SyEJao2B6BBWSUt7Yd/NdOTWuNJazd1nfsgD+vn9VIU+3ogY6:JzxQj+CYyaaotWKO7MRC9Q4m","tlshash":"f8e1de34dc4376ac170f0dea62d7b1dcd13354b6abb18e17a06228223b7d10ea95e3b5","size":7134,"data":"","first_seen":"2026-04-21T08:00:12.832844Z","last_seen":"2026-04-21T08:00:12.832844Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/Footer-BJ9uyc2Y.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a12b8cdd1918bd20d70e7db1c4595ec1","sha1":"19c9d907c03a5bf6abf4fd86fbd98e0e547ea2ac","sha256":"5dd598c8133d8a06683e9bb3c080bb8f68e585b298e8d61f416d53267e0c5a2a","sha512":"58182e9a19e8c0c7497c18e359e3a364dd8dcfd44dc5a689b41eb566702a380e5d2b3f310564e4620740203077889e91a430475ad24a8ed09d40f9a2bdb79b4a","ssdeep":"768:iGQIZfqCYBp7dow3sWcXRy0/JJPKk2N2pXN3fKsFJjr7LqH0+80v6Er+hIVNcL+6:6IW76UeJJPj2N2pXN3fKsFJjr7LqU+PI","tlshash":"16f238e6dc61f3fd7b570be7262af69ce02b044fdd8198a991ac3434d1b52138162af4","size":35221,"data":"","first_seen":"2026-04-21T08:00:12.791413Z","last_seen":"2026-04-21T08:00:12.791413Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/BackupSection-CLUfixWg.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"29e6c8b3edcc26279d09b37240e927d6","sha1":"e2140179a11d96e97cd429cd4614229985a8d250","sha256":"92e7f0574743e68143fcce25faa99d176a359eccedc8492525f1b3933939e350","sha512":"81a61eae402bb571927429b6896587c018c72693507d0190ce7f5a8849aed9a7a021edaf39aa5b784c3ba2ad4e77e68d4eea73d145869ece185b6db981106aba","ssdeep":"768:YXTQOPFAniSH5VnuDalw304Ultqej/tNZRKP7XRLEC+WSkrvqxqU59jOBQaQda5y:YNOiSHfnawwlfXGXtgYQWr8gZmCMWOM","tlshash":"5153d9447e942a6c274b8fb7b363b8e4e51f1c6f3481088bd2047c1a6aa5527faf1671","size":61470,"data":"","first_seen":"2026-04-21T08:00:12.831701Z","last_seen":"2026-04-21T08:00:12.831701Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/input-CNpK8CSN.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"002b262b2ffbf82002c8ab9806fafcad","sha1":"8ef51538eb1c04a85e4ea368f6fecb0823671986","sha256":"acc26e02610213c753a8077afcf687af3afdc527e50eeda54b421678a22c57ab","sha512":"774acaa4bc742c06ba764eb085b2082ec61feef10bf00a28fe57ea6885a5ab7a4637bff237854c87f368d23821771fdc1cff7d5ad68d93bf16dbaca299e4502a","ssdeep":"","tlshash":"9c41f03a15c167ed63aa4bf63b3814c0df2ec54aa4914946f294b0a43c7e5368a92d70","size":1962,"data":"","first_seen":"2026-04-21T08:00:12.842232Z","last_seen":"2026-04-21T08:00:12.842232Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/proxy-CECAQHmp.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"fc5ffbeeb5862e42d12e6f99c15bacca","sha1":"57f21b0b4c8c7d3a4568880f9185f0d9612f9d5b","sha256":"0b0dad38dad97a9b8c76ef57b5675ac42744b20608998c5bb5759cf873832ac0","sha512":"75ff08dc145d708a1fa754380f84243b42b70888e851eacb2e61af3cd93a2045ce27fe9463bf44734a27156cd7767b6093a148c021506e9f4ef96444f7bd2ee0","ssdeep":"6144:9nLfD59LxWr5FaQgA6VKW1Qis1emO42Josm7LEk2BgwY4pPWYRii4F:9LfV9Q5Fa5A6VKKQis1emO42Csm7LEkh","tlshash":"8834955027c0254863474fbbb31ba4f2e52e186e389e4d8ff228bc1529d6617f6fa471","size":232437,"data":"","first_seen":"2026-04-21T08:00:12.830733Z","last_seen":"2026-04-21T08:00:12.830733Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/index-BMakXHYg.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"e808d427f4a3ef749487f2ab5a90e840","sha1":"f152f0b3cb307fda4f9ea7d1e33f0f3f5ef2e575","sha256":"8d6b5a65fa83ef3636af5add0ea072668ee3984377d2211196f9d45fed3c309a","sha512":"fc995c4772b9a07665614e52545dd16a026bbbfa68dd4b7763fc5e545032a0cd51a28da7ab0bc6a475fa1e804296e1feac475234c215ae2c3c76e14e670642af","ssdeep":"96:yjvugANCWGUHiJ9XgV/XASNPNBefVD/XHkavDqmIw6dtJaXALCP9XPxkqbdsNjz/:yjGVNCuCJ9XgV/XASFNBeNHkavGmL60y","tlshash":"b4c175416ac05eda27024fbbf227b4e4ea6f1d2e384858c7d515bc4936e2f1af1e2171","size":5981,"data":"","first_seen":"2026-04-21T08:00:12.844232Z","last_seen":"2026-04-21T08:00:12.844232Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-nano-plus-M4WHOqMS.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"fe8762855c84273864c4791cf5f52725","sha1":"2a421e6e208cb2396b0072adfc21faadc84d290b","sha256":"4383d5e05464b38430ed7b30d8b10c9978b5c92a37f76d16798ea6428cd9eea6","sha512":"05c6b5386166eba474533d2fc6e7715dc90b1844006c2b2e3d2a12a8184439ef6ef743346c960bd00a7899c9737886eea63b49c9c06e1e0de27bc1bb7e2aa430","ssdeep":"","tlshash":"2b21dc5d0f414290135a27a67ab605c8e538ff83ecd1614fe01039cb3c69a1bd3aaef1","size":1366,"data":"","first_seen":"2026-04-21T08:00:12.814467Z","last_seen":"2026-04-21T08:00:12.814467Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/TopBanner-p5Ps9ixC.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"c4fd205c079963f8e69ee1a1e9455316","sha1":"0a86e20cefbfe196da1aff38105cd1e732cf4d5b","sha256":"84064ec7a18c6e66a5f27cf0d7415bd06cdf4bc4c4fc3b128000c2b35391e3f7","sha512":"5388cb70a2ef9309eb207b59a4640ed34ef4e863a6c6b1e88b909f5856cfe5f8d07a7339035831c07ec93977927bd09b2b7c843d49faaa48c6f4cadf5852fc8d","ssdeep":"","tlshash":"e551d2845c0693fd670f4a5a3235d6e9d65b844da88b7457f5403c243c22b1af28feb8","size":3071,"data":"","first_seen":"2026-04-21T08:00:12.828907Z","last_seen":"2026-04-21T08:00:12.828907Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/Header-BH1aEGOB.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"48a705781bab64d26451a0a153c2cb18","sha1":"c8cab9ffdb9ea93a3b1c9752f8ab8ff4af807b5e","sha256":"c84033f0246c9b87136a45f36155b08585af3f2b8a27a8c1c376a0c2025c6a5c","sha512":"a3f44db3e086fa9cd82b463ed31f9f4bb8faca700d95463e87f6d6f66a1046b714ceffda64b0381695f0114f329850f912179f62d7987f54462a7597491873ad","ssdeep":"1536:uwQm9/JNV2HX6vWr7njVHwmfi7kAo2V61A+y61ENA9KAjSnuD0prXYwd8N4fw:pRwQ47jVa7vEMESnuD0Owd8Nx","tlshash":"0bf3b644a980b55c174f5ebab67ef8e8e0af4c7e694c878ed550fc1031a5602dbe36b0","size":167868,"data":"","first_seen":"2026-04-21T08:00:12.807141Z","last_seen":"2026-04-21T08:00:12.807141Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/client-JFkQPo3H.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"f51942c99dd85a9c5c664f67fb1956f4","sha1":"dfbc9811a1000f5d81522e579114a6ea99a165db","sha256":"a43ac932a7c57cbe99a45bff069eacd8f820a61c43990f59b64ca83baf0b2666","sha512":"5fb9e6858befc7037077d5f364f412fc5ca94c9641bf7352697b9bcb705459af163e6444b72baff1bca3a7b04649ccb5357f44c5db715ba32ad611ae99b4d034","ssdeep":"6144:V9tRXn57a1rfh3qFuk/csIxamN8ibzZnLKSujfj9B:V9tNn57a1rfh3qFuk/csqao8ibzZnLK/","tlshash":"b764c64056d8999c63469ffbb72360e2e00e1c5e384d4c8bf1687d58a9ae607fdf8931","size":319148,"data":"","first_seen":"2026-04-21T08:00:12.803787Z","last_seen":"2026-04-21T08:00:12.803787Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/index-C-9htn-A.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e2990c2ee93abb7bab4757f785cf5d6","sha1":"308129a8cb2e2e65c3276d25ae830260d08eb512","sha256":"4e0e81b3495fbbd6accde6ee765cfde4b811812e26ac03431949461c2eb85e7d","sha512":"3e89a772f085c828dbe6dc602770bc157bfbae7982ab780278d3b7e5dffeb6adaaf3fd39bbb473528fc1be20ba31fb0bb7c1fb2056828bbe30de67219ec26cbd","ssdeep":"12288:GL7ZdyN1bumVTL5eonC/ct/eNp7N+0qRwpDZ2SpIXSDj:s7Zs7YJp7NpvUSV","tlshash":"61d4b54027d0a91c279b4fb7b31bb0d6f81e0d5f3858485fe148fe64a6a5227fae2531","size":650958,"data":"","first_seen":"2026-04-21T08:00:12.827239Z","last_seen":"2026-04-21T08:00:12.827239Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/index-Clda7G-m.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"fc737eb7a1dbec3e0493382bae8ea384","sha1":"2457936b474b74f58c0b32b700d22a86a1fad0ea","sha256":"1e2f35b2430acbbe16c4e283c0a520a5536129cc8df1ebe796c830a5bf8fe2d8","sha512":"0dfee8f1f9494e704a121a4d02eb6a35e9813c9b041e821295e9e925417f5290c35933e175f80a252e3dc98c3da780adba1f02c2235ed76e6fb97b8eeead31b1","ssdeep":"192:942VbX3F19qCzoxWTWTdaRtCBvv6D3hHqOjOFDRxabqmoc0uQQQU8P83OM8S36LB:P39Tlt0vvIRHvjqDRxBZXuQQ4Adhgs1Q","tlshash":"052262142ec0b6dd234b4ad7bb3774e9e15b1e1b76814b4fe01dbc0118aa113e6ea8b5","size":9920,"data":"","first_seen":"2026-04-21T08:00:12.780525Z","last_seen":"2026-04-21T08:00:12.780525Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/Index-DwlH2Ita.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"50e880ee0ded157272d6be59cc934b6c","sha1":"2e262157f8a40bd5e5ef8f5818b013100bc6fecc","sha256":"9b321217f912ddfbb759c14592ea70616fbb454942ab536550d6f198eb6735ad","sha512":"afc881dacd8f3a1a8b87f4106d8166bb384aed403f39383b07a18700524daedf69005c4e336f4af0685aba4628f2290d655714d71a5fc140383006e88131bd36","ssdeep":"384:YmGpsUJQoSiO2rHptsSjtuyUrKj2OPt2B8ZjSKAk7:BGpsnoSiO+sSjbUjaa857","tlshash":"e8a24314dd20dbbd97170ff23a67fca8d552009ad9529e5fe2b0bc282163f12d2623b5","size":22438,"data":"","first_seen":"2026-04-21T08:00:12.818274Z","last_seen":"2026-04-21T08:00:12.818274Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"recoveryledger.live/assets/index-Clda7G-m.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:36.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/index-Clda7G-m.js HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/assets/Index-DwlH2Ita.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:36 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3437\r\ncf-ray: 9efad9ad0fda56a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\ncontent-encoding: br\r\netag: \"fc737eb7a1dbec3e0493382bae8ea384\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 46d97283-f730-495f\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: EXPIRED\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9920,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9920), with no line terminators","md5":"fc737eb7a1dbec3e0493382bae8ea384","sha1":"2457936b474b74f58c0b32b700d22a86a1fad0ea","sha256":"1e2f35b2430acbbe16c4e283c0a520a5536129cc8df1ebe796c830a5bf8fe2d8","sha512":"0dfee8f1f9494e704a121a4d02eb6a35e9813c9b041e821295e9e925417f5290c35933e175f80a252e3dc98c3da780adba1f02c2235ed76e6fb97b8eeead31b1","ssdeep":"192:942VbX3F19qCzoxWTWTdaRtCBvv6D3hHqOjOFDRxabqmoc0uQQQU8P83OM8S36LB:P39Tlt0vvIRHvjqDRxBZXuQQ4Adhgs1Q","tlshash":"052262142ec0b6dd234b4ad7bb3774e9e15b1e1b76814b4fe01dbc0118aa113e6ea8b5","first_seen":"2026-04-21T08:00:12.780525Z","last_seen":"2026-04-21T08:00:12.780525Z","times_seen":1,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-partners-BzGuKBY1.webp","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-partners-BzGuKBY1.webp HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T17:51:58.402791Z","times_seen":17874405,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/HowItWorksSection-BkR0ZWFQ.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/HowItWorksSection-BkR0ZWFQ.js HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/assets/Index-DwlH2Ita.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:37 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3114\r\ncf-ray: 9efad9b27df856a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\netag: \"1938f95937e55ae2e0b6583f5493c34d\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 0a02a26e-f00d-4546\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: EXPIRED\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9584,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9508), with no line terminators","md5":"1938f95937e55ae2e0b6583f5493c34d","sha1":"e2c077506a19972abbbee2a140781fb3bca6a77b","sha256":"1d800b9c8a8f9f010bba991d4b76b5fd20e5fc3ce4f72d341a159f64b5593835","sha512":"385793c00def21df547eec8a5816d42652a60c8792d11f3d3a899af4536b50914714766c8724f8510275546a1ea30316dde3f6bad706f5f8b5eec8fcde74077c","ssdeep":"192:y2ksruW0bq4OS+JBIjm5GPFfMxFJMV15IeMLgjEXf4s2MFmwZ0R+0/:y2ksa1EBbG9fMjJi15sgOQss","tlshash":"ea120df19a1057ad720f4fdbbd76c2dce8730acce74588b4f2c1b956acb4644a0626b4","first_seen":"2026-04-21T08:00:12.785866Z","last_seen":"2026-04-21T08:00:12.785866Z","times_seen":1,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:20:2A:2D:A3:02:EE:53:E4:CE:46:31:49:99:9A:9E:B0:E7:B5:19","sha256":"23:47:72:09:4E:47:52:14:EB:06:36:94:9D:9F:8D:66:FD:E8:20:45:1A:16:A2:2A:C5:F5:B8:7C:2A:41:2B:61"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://recoveryledger.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Apr 2026 01:42:13 GMT\r\nexpires: Fri, 16 Apr 2027 01:42:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 454644\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-13T17:50:39.012315Z","times_seen":258118,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-gen5-CS30cXUV.png","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:38.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-gen5-CS30cXUV.png HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T17:51:58.402791Z","times_seen":17874405,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-stax-NBrqMpIK.png","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:38.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-stax-NBrqMpIK.png HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25664\r\ncf-ray: 9efad9bb3f6956a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=51551\r\ncontent-disposition: inline; filename=\"ledger-stax-NBrqMpIK.webp\"\r\netag: \"e1022edc6c24bd17186a5b4d945efc5f\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 27302681-5ada-45cd\r\nvary: Accept\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25664,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6eb0b8d72fa006ca2a0309342e2ebbf8","sha1":"1a5ce6b351bcaca77cc09a11d09abd49f9742794","sha256":"f978106b92b4b9c7f20853fbb5a498787c4a8b10f2da08ef3351d06ca0818ccc","sha512":"76067feae73e8506cdb93a87e4a102dc1d1c89f3f7d38a66d7e8c7f69c0bc5c6e921c1af2bff1c164416be252f5503e16c3399850a4a43093fa2264df42ab36c","ssdeep":"384:HxtgWDe8VVloTWJfgyNs1uA+GtgGSxLuhaUp9jYtJeoOlRxRfNrrpPmm7VKUF5:HvvfmTGgyS1uRxahaUp9jwJ/KRGm7x5","tlshash":"91b2e16200237e6c563669f188209b92de30301e128a652a6de4b4e7f9e55bcf2c97d7","first_seen":"2026-04-15T05:10:42.941871Z","last_seen":"2026-04-21T08:00:12.789132Z","times_seen":3,"resource_available":false,"data":null}},"time_used":722,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":721,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-nano-x-MHg3desq.png","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:38.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-nano-x-MHg3desq.png HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23596\r\ncf-ray: 9efad9bb4f7256a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=49361\r\ncontent-disposition: inline; filename=\"ledger-nano-x-MHg3desq.webp\"\r\netag: \"a959b23283bf708cf957b20edbd23dc4\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 9fde41a1-b443-4f62\r\nvary: Accept\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23596,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d91a0ae27960c33bc7aa3bab33a6f519","sha1":"30c9dbe705c84c4d6c492f20e417083979e46158","sha256":"6810760a5592068ec1579b576110333daf11141eb64797b14908095b4249d023","sha512":"03710ab63c2cedb4b3c3854d36ae51ad2d310b21c9838472d5ed0e6575b1ae5e2db879f3e4889e628cbaaeac2431b821d5ee2f08694cd0890141c3883d7c846f","ssdeep":"384:BdJoyVQvNtpeJ3lHr1zSDcWmaT+l0JvjGyJXIxTJucwvs5Je1eydk/B2UeEfIzc8:BlOvNtAJ1L1GIWmEnoySxTJucwE5sFdb","tlshash":"62b2e18a0b6a798b2add927f53e4fa5d0b80d32319857ae4368ecc6f52341adf442191","first_seen":"2026-04-15T05:10:42.922809Z","last_seen":"2026-04-21T08:00:12.790273Z","times_seen":3,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-multisig-DeBQsP81.webp","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-multisig-DeBQsP81.webp HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T17:51:58.402791Z","times_seen":17874405,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/Footer-BJ9uyc2Y.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/Footer-BJ9uyc2Y.js HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/assets/Index-DwlH2Ita.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:37 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9efad9b29e1b56a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\ncontent-encoding: br\r\netag: \"a12b8cdd1918bd20d70e7db1c4595ec1\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: ee94a8e5-57a7-41e1\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: EXPIRED\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35221,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24741)","md5":"a12b8cdd1918bd20d70e7db1c4595ec1","sha1":"19c9d907c03a5bf6abf4fd86fbd98e0e547ea2ac","sha256":"5dd598c8133d8a06683e9bb3c080bb8f68e585b298e8d61f416d53267e0c5a2a","sha512":"58182e9a19e8c0c7497c18e359e3a364dd8dcfd44dc5a689b41eb566702a380e5d2b3f310564e4620740203077889e91a430475ad24a8ed09d40f9a2bdb79b4a","ssdeep":"768:iGQIZfqCYBp7dow3sWcXRy0/JJPKk2N2pXN3fKsFJjr7LqH0+80v6Er+hIVNcL+6:6IW76UeJJPj2N2pXN3fKsFJjr7LqU+PI","tlshash":"16f238e6dc61f3fd7b570be7262af69ce02b044fdd8198a991ac3434d1b52138162af4","first_seen":"2026-04-21T08:00:12.791413Z","last_seen":"2026-04-21T08:00:12.791413Z","times_seen":1,"resource_available":true,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-logo-new-uEaKTXOf.png","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-logo-new-uEaKTXOf.png HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:37 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2364\r\ncf-ray: 9efad9b29e2856a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=5514\r\ncontent-disposition: inline; filename=\"ledger-logo-new-uEaKTXOf.webp\"\r\netag: \"03e53b3494cc775475a55baff8c6542f\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 32b5e722-75ac-48ac\r\nvary: Accept\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2364,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ad08e1efa02dcc344428ed1a0b38e0a6","sha1":"ed0dafa32a17f405ba808c75a6277a2935799a5e","sha256":"b403292a7f22dc4e2f34bd18c5d0954da7f07a6ea5327776696f03a8142d3b9e","sha512":"4b972aa4d5d0abdf2cffbc41be3471cc14892b79227d48ede8b1ae8f03f21a7b99d7a1fab27c0139824e26e476e81780d7bd008f9a875e967732072552f97116","ssdeep":"","tlshash":"c5415b29a0b43188971cd71f16a08ce338ce43cf011e8449fb2ab62dd25b708440b5bc","first_seen":"2026-04-15T05:10:42.968867Z","last_seen":"2026-04-21T08:00:12.794809Z","times_seen":3,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-quest-DmhYA42s.webp","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-quest-DmhYA42s.webp HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 49684\r\ncf-ray: 9efad9b2ce5c56a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\netag: \"824a225322111967991af7059d1a0d9a\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: c3a0c764-b1f5-4789\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49684,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"824a225322111967991af7059d1a0d9a","sha1":"0dd9f450dfd1cff3664f7cc94759c4224014b78c","sha256":"53f489c246d628a3750bbcd20e6484024a9ebd8200368045271a1736a52e57e6","sha512":"f3e5f781cde2d4c23f9033da6b3101cca9b835851111217bb23f41d1983412c5c51ca05a411b62c12afde812014abf5a6a35895c61585cdb19a3f537ba68336d","ssdeep":"1536:7dYRDhcQr3PJ/1lqK80dlntJu8Fk/pJO5w9:7dkGGp1MKHln3+Ey","tlshash":"d723f2690d1e7ab0dcd1aec1b30188f5b1cf195b1906a43f56897c33daed902577cc6a","first_seen":"2025-08-13T02:15:20.25841Z","last_seen":"2026-04-21T08:00:12.795879Z","times_seen":12,"resource_available":false,"data":null}},"time_used":737,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":735,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-multisig-DeBQsP81.webp","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-multisig-DeBQsP81.webp HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:37 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28910\r\ncf-ray: 9efad9b2ce5656a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\netag: \"5e69699d8f0d03af739f9777f5a72722\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 561b254a-5f2c-4320\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28910,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5e69699d8f0d03af739f9777f5a72722","sha1":"3f6b7544f641d95fe36cb6071f264af5ff2cdd86","sha256":"a463f036727c06c59ad100b9e3c684b88a79a6daed6ffe5e406e0a7030eee499","sha512":"76ae3e32a663f191fc6d490222470a98c141e2e89f21dc2f60d5cdff2e9bf830157b23cbe936709c5ca23fc6f2a6eed2a26de78c52dc4c9fecef29607f837535","ssdeep":"384:4MtRGMYuwIw6waOtroX4OJrZeMOWJC8+RVbl0+JSJG5Yv7KX5QpNz8xjfSqC1:lnvYgwPFiZ3OWH4VbRY7iuz8df7W","tlshash":"85d2d0b7b6bfaee1f210ecba897edbb1bf024f54244c27656beb4561439281421c4184","first_seen":"2025-11-10T06:00:39.264746Z","last_seen":"2026-04-21T08:00:12.798674Z","times_seen":6,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-nano-plus-xW65VtLs.png","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:38.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-nano-plus-xW65VtLs.png HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23100\r\ncf-ray: 9efad9bb4f7156a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=46819\r\ncontent-disposition: inline; filename=\"ledger-nano-plus-xW65VtLs.webp\"\r\netag: \"6b6c04ee1845b08456402f3d8e8e01ca\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 424e4760-a38f-4359\r\nvary: Accept\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23100,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"334f17de34cefcc705e457c003323b09","sha1":"3b4fa20a237c986e4b657561bdf95c38fc481630","sha256":"4ad07d5f76111d928ce7aef8e982fb2de41358b06e4f284868464cfb604b71bb","sha512":"c3d7aeaded213edc03322265ef1cac9978c0fbabd09ee46f03a7da8d5da8d6d573d59e8958a677556ac05d1168efc983c265190e230fc76548d8901b826d78a9","ssdeep":"384:zeU8W3zlN+3mELJtie5093ti8VeNVpMnJYjDCwonAGO/ZAbty5S6iFRG:z3H3zlWXBg3+2UxonAGA6wtiHG","tlshash":"84a2d006fc646ee73dd00d7ffb906d8a75ad42c1eed11a739901993b528704ee9c43a8","first_seen":"2026-04-15T05:10:42.985516Z","last_seen":"2026-04-21T08:00:12.799716Z","times_seen":3,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-flex-menu-CdbMwiEW.webp","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-flex-menu-CdbMwiEW.webp HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T17:51:58.402791Z","times_seen":17874405,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/FreeTrialSection-ChSRd2rH.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/FreeTrialSection-ChSRd2rH.js HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/assets/Index-DwlH2Ita.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:37 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2071\r\ncf-ray: 9efad9b27dfb56a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\ncontent-encoding: br\r\netag: \"200d5059a1441ca0b07d71fb73e1e577\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 76c32be9-d899-4494\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: EXPIRED\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5694,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5684), with no line terminators","md5":"200d5059a1441ca0b07d71fb73e1e577","sha1":"b7d4729de366ceffbe57fb1852da333b588d7fd6","sha256":"d4cc99b2582013cd5faaed6a80c63d58e6e6cecc4a5803d6e94a850d14262ae9","sha512":"036cacc6d69808ffae869127e30a944524e8a1affeb9b2cb3d5bd74ad46f2e341ccec3f07a99f722254a012e967a962b618cf70450b90de92f61024fb824eb71","ssdeep":"96:/y1zGm1/pOLDoY9CMr2PK7p0Zdug/3IwfTeizvJPrx0851dK075W08MiihGwkQ86:AdOLJVr2PBb/IwfTeizvJPrxFP6WQVM","tlshash":"7bc1fb6c5c6167efd7070ea6bfa6d6c4d3529446e1884b29f391ec111463e01c8437be","first_seen":"2026-04-21T08:00:12.800563Z","last_seen":"2026-04-21T08:00:12.800563Z","times_seen":1,"resource_available":true,"data":null}},"time_used":584,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-stax-menu-De1FmWV4.webp","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-stax-menu-De1FmWV4.webp HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:37 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4832\r\ncf-ray: 9efad9b2ae2c56a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\netag: \"02ddcff2d9e154c20824ff429d4dcba1\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 9c2fe95d-1466-4c64\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4832,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"02ddcff2d9e154c20824ff429d4dcba1","sha1":"b1436fa21a03d468a745863a1bd9cdba5faa940e","sha256":"e14324142d5b29d062aa73cc29eaeb65a94b803db4bb5dfa35e3c9fedadafdcb","sha512":"35dc17751fa3e5f9f834fa78ef18b91ddd000bc940355f323a96b1a81a5220faa7eacfba58143ed45c5f036eac6cd825e3d83d8ad180306edb79e50230c852ab","ssdeep":"96:o6qpEo0VAyL9qUTssv8z7LbJgf3szs2j8EnGTwrREsK8ZQn2XnFeQ:MDVyBTAz7CfcASVGErXK8ZQn2Xnd","tlshash":"3aa18df1155be1d064a5eca4cceec828da2159a1a7557fd25806cfb13bbfcb70b84360","first_seen":"2025-04-15T00:25:17.38395Z","last_seen":"2026-04-21T08:00:12.802195Z","times_seen":13,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/client-JFkQPo3H.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:36.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/client-JFkQPo3H.js HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/assets/Index-DwlH2Ita.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:36 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9efad9acffc156a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\ncontent-encoding: br\r\netag: \"f51942c99dd85a9c5c664f67fb1956f4\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: f64a8a5d-8be3-4b02\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: EXPIRED\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":319148,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f51942c99dd85a9c5c664f67fb1956f4","sha1":"dfbc9811a1000f5d81522e579114a6ea99a165db","sha256":"a43ac932a7c57cbe99a45bff069eacd8f820a61c43990f59b64ca83baf0b2666","sha512":"5fb9e6858befc7037077d5f364f412fc5ca94c9641bf7352697b9bcb705459af163e6444b72baff1bca3a7b04649ccb5357f44c5db715ba32ad611ae99b4d034","ssdeep":"6144:V9tRXn57a1rfh3qFuk/csIxamN8ibzZnLKSujfj9B:V9tNn57a1rfh3qFuk/csqao8ibzZnLK/","tlshash":"b764c64056d8999c63469ffbb72360e2e00e1c5e384d4c8bf1687d58a9ae607fdf8931","first_seen":"2026-04-21T08:00:12.803787Z","last_seen":"2026-04-21T08:00:12.803787Z","times_seen":1,"resource_available":true,"data":null}},"time_used":557,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:20:2A:2D:A3:02:EE:53:E4:CE:46:31:49:99:9A:9E:B0:E7:B5:19","sha256":"23:47:72:09:4E:47:52:14:EB:06:36:94:9D:9F:8D:66:FD:E8:20:45:1A:16:A2:2A:C5:F5:B8:7C:2A:41:2B:61"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://recoveryledger.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Apr 2026 01:42:13 GMT\r\nexpires: Fri, 16 Apr 2027 01:42:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 454644\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-13T17:50:39.012315Z","times_seen":258118,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/hassle-free-recovery-B1NkiTie.png","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:38.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/hassle-free-recovery-B1NkiTie.png HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30988\r\ncf-ray: 9efad9b93d4a56a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=54937\r\ncontent-disposition: inline; filename=\"hassle-free-recovery-B1NkiTie.webp\"\r\netag: \"289c4294a4a931b50d5b6f061937cb36\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: ff16adf7-fe34-44b3\r\nvary: Accept\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30988,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a37afaa4d9010a0a6e545895c03b3f00","sha1":"438bdeacd54567f72162c1a8e4817d5f80bbb379","sha256":"621d06714a0118921d50d56f6bb3c5817b612aea8caee0f3deed8994f1cd0a97","sha512":"a56e6c3d21120d60106ec02a7f5e8b12237aeace27048ae5ba4c5fec382c08e1e4fae8be7871731a37c5dd860463a1397a10519c8ed6c8d95c715c6b703aa851","ssdeep":"768:SwzSuif/v9ixhKms40zu+TPuj5mazigVBlNx:TK3v9ixhlszzHPu/zX","tlshash":"ecd2f111997c5cd60aff207f06ce46ec283e4934724a85e5b12bce27e89fcd67132851","first_seen":"2026-04-15T05:10:42.960767Z","last_seen":"2026-04-21T08:00:12.805189Z","times_seen":3,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ProductBundlesSection-DIVgc2x3.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ProductBundlesSection-DIVgc2x3.js HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/assets/Index-DwlH2Ita.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:37 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9efad9b27dfc56a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\ncontent-encoding: br\r\netag: \"91126f42a57d9952b117f36da76bc752\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 6bf80a1a-0f64-4619\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: EXPIRED\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21228,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15327)","md5":"50e6cff528709a40472238ccfc47cd37","sha1":"95e47f00fd6ad885729279d204ae3de5fc7d2059","sha256":"d541f5e2964af4a60a409d756901a0e18971da0452485f9042d165db7a152726","sha512":"e8f3f6de867af5c986b93c7efc626fb11edabb2e8c7a5db30b86913812b41eab546a8acd6479633af954368c567320d7fa43f4999c725264cab28785cc700c8a","ssdeep":"192:GX1gRcfObuq/XTVipK/52NFUgVE9qT1QkK:Gl1mbL/XTViM52NFUgVE9qT1QkK","tlshash":"88920fe8db10faad271b5fe73a3bb8fdd0221055ea468846f164f41433f412e994a678","first_seen":"2026-04-21T08:00:12.805845Z","last_seen":"2026-04-21T08:00:12.805845Z","times_seen":1,"resource_available":true,"data":null}},"time_used":633,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":633,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/Header-BH1aEGOB.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/Header-BH1aEGOB.js HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://recoveryledger.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:37 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9efad9b29e1456a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\ncontent-encoding: br\r\netag: \"48a705781bab64d26451a0a153c2cb18\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 39d9f488-783b-4747\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nage: 0\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167868,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64228)","md5":"48a705781bab64d26451a0a153c2cb18","sha1":"c8cab9ffdb9ea93a3b1c9752f8ab8ff4af807b5e","sha256":"c84033f0246c9b87136a45f36155b08585af3f2b8a27a8c1c376a0c2025c6a5c","sha512":"a3f44db3e086fa9cd82b463ed31f9f4bb8faca700d95463e87f6d6f66a1046b714ceffda64b0381695f0114f329850f912179f62d7987f54462a7597491873ad","ssdeep":"1536:uwQm9/JNV2HX6vWr7njVHwmfi7kAo2V61A+y61ENA9KAjSnuD0prXYwd8N4fw:pRwQ47jVa7vEMESnuD0Owd8Nx","tlshash":"0bf3b644a980b55c174f5ebab67ef8e8e0af4c7e694c878ed550fc1031a5602dbe36b0","first_seen":"2026-04-21T08:00:12.807141Z","last_seen":"2026-04-21T08:00:12.807141Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/recovery-solutions-Be_pJjmx.webp","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/recovery-solutions-Be_pJjmx.webp HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11272\r\ncf-ray: 9efad9b2ce5056a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\netag: \"42176cee537790e942efee05bf339501\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: fb3d8314-42b2-4b3e\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11272,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"42176cee537790e942efee05bf339501","sha1":"7420796c364d969d9c8d99b6cbcb3e80f043d2e4","sha256":"6fc1e09a5124aae993874d0eec8ff25d87bc1092212c487dda3f9837cd7daaad","sha512":"b413c7fee9a82fd2319f3bacd656d38b664c72abf98fd89bd49c26722e37ccd5b289809d32a9b1d85a2781fba0d2dd96418249906f2ea4465de9b44c6fe03dc7","ssdeep":"192:Nyew4/GUn74848TemVzDWv7ONMhMhAerndUHQ8LY8TC/+gHyUYL3irxoJppgQyh:NyeL/t74/RSmDONMhMVndUw4AGgSlmWY","tlshash":"6132a0e395a29176cf17ce2c156d3ffb75844b8df75c7b02b221a112536c8f400aa29b","first_seen":"2025-11-10T06:00:39.229405Z","last_seen":"2026-04-21T08:00:12.808426Z","times_seen":6,"resource_available":false,"data":null}},"time_used":688,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":687,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-blog-Kpy-Vsek.webp","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-blog-Kpy-Vsek.webp HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7244\r\ncf-ray: 9efad9b2ce5f56a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\netag: \"ac6ea72ccae4bf2dece5ecd063dfd603\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 7dbcd0a5-bd92-4cbe\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7244,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ac6ea72ccae4bf2dece5ecd063dfd603","sha1":"20c1e90411ef8899757c36ab74625d5ac67e35fc","sha256":"f3aec6d38c070ce34e3f3ee6785755c6e75f012e54ddd13f35673a6ccb9de1b8","sha512":"59652bc50366b59e4a13064e6b6d30de227cfc51eb419e115be54a5d2d435b9cbb4fa504d4ae9ae7bc2dbe33ded956abb0024f25eddae05bb67a59744d260c3d","ssdeep":"96:du8BFZv8XWQ27F57RWLt0DmTM/Rj0FI1Fjhyqrg5eiAs4jbXqGwwlcSgxMMOmZYv:fHZiE7sQRIegwbXqGwwlcpTt9","tlshash":"10e1afe425de064e96d4d29a4ff67c6aab2846c5bd6c2d0bce2d5413183ca413f108ed","first_seen":"2025-09-24T05:11:53.363472Z","last_seen":"2026-04-21T08:00:12.809216Z","times_seen":7,"resource_available":false,"data":null}},"time_used":637,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":636,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-enterprise-DlNLFrRg.webp","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-enterprise-DlNLFrRg.webp HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:37 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37888\r\ncf-ray: 9efad9b2ce6656a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\netag: \"8a4a6207e58fa0009ee6cc23d797b9de\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: e400615e-0f1a-48c0\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37888,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8a4a6207e58fa0009ee6cc23d797b9de","sha1":"edac43c5b71c09d84cad738f28656d8d415b9e1d","sha256":"8d0fa53a83b4d748a3f4f1f5f85df3f43a3fc95fc6d4a69ac21ee0c39440a28f","sha512":"b97442cee3961d3a20a409bc30c975928f54ccef9b375cb4a008c90ba885b46ef04d354b3f1bd76bde34a1f034e36ce148f570979828f14ab391154686dfba14","ssdeep":"768:mOaQg57b+hzuO+K/zZUPNHrXDZxS3Gqfd4kCf/va88cyW97:zA7kb+K/zi8WAE6m7","tlshash":"b003f29b6a3caab5a50d2952d5ff35c834240c379851943fdebbc64a813720f4e6f06e","first_seen":"2025-11-10T06:00:39.256694Z","last_seen":"2026-04-21T08:00:12.809877Z","times_seen":6,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":349,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/linking-identity-DsLr_qra.png","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:38.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/linking-identity-DsLr_qra.png HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7176\r\ncf-ray: 9efad9b93d4756a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\naccept-ranges: bytes\r\netag: \"04557bcd876f1c55c954d25fe09cf62d\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 1a4c5475-8b89-4919\r\nvary: accept, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-polished: ok, orig_size=89311\r\ncf-bgj: h2pri,imgq:85\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7176,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 350x232, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"142a093c30276eca2833e1b2dbd72b00","sha1":"0d683b0f91e9d7b44538576c4b998351e4c2cfa1","sha256":"85782643a6e0097ca6e15a775d0ccc79264441dd8752d99339f8b302dd3268c3","sha512":"60053bf52aa94eb043c663a369737af688a6df80c0bb91424ae26f59648ba34e20e88382a3351d2e22a9c1744fcd72d34bb29b9d9764ed0f5c4f2470e99bcdb9","ssdeep":"192:KAxDpmNtDTF/Q3pMYWbCELLnEiCSimgUhw:KAZp0txYiReEvnqSiMhw","tlshash":"21e19d9343e810aab1fa423c7de674bee7820c7c5d7685695ec34f982d4aa58e50153c","first_seen":"2026-04-21T08:00:12.810992Z","last_seen":"2026-04-21T08:00:12.810992Z","times_seen":1,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/backup-video-Dv9TrO4o.mp4","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:39.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/backup-video-Dv9TrO4o.mp4 HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=1277952-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Tue, 21 Apr 2026 07:59:39 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 22719\r\ncf-ray: 9efad9be1a1956a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\netag: \"6b5b9a1582c716870399bc71e8feabec\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 0e8dd482-b0d3-45fd\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nage: 1\r\ncontent-range: bytes 1277952-1300670/1300671\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22719,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"ca312ef97b0b2cba30805d36bfacb968","sha1":"879364b24b9b3fdccb893ba20ac6eccb8a98d0c4","sha256":"27056d0e21b8255f8f35985659f9bf321f41d6a187847b7f5f1b155978e90ea8","sha512":"e5757dcdb92eed813f5f0cdf84bf3fa24c5d8d53bd5a0373ac775b9d31d92aacd72dc2a196c19627c0490d78af60812f08135c13073882a9c709c60e6b543d79","ssdeep":"384:Rcx8drXuJ/Nq7bNOZ28lNmpDNpDee0dkAE+LUyGY7Q9QLYZqhKF8:RnluJ/NyhOxwLDee0dkT+Yyw9Q8ZqX","tlshash":"dfa2f2c9a7db7d58c8482e31b990079d7b3ed960cbee0707961762ca7801082adfd9dc","first_seen":"2026-03-06T10:58:48.037031Z","last_seen":"2026-04-21T08:00:12.812852Z","times_seen":3,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":500,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-blog-Kpy-Vsek.webp","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-blog-Kpy-Vsek.webp HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T17:51:58.402791Z","times_seen":17874405,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-nano-gen5-menu-D-1ZiVNs.webp","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-nano-gen5-menu-D-1ZiVNs.webp HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:37 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5706\r\ncf-ray: 9efad9b2be4556a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\netag: \"2eb734ddee90234db2e0eaf0ee24a1aa\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: bb696c9c-a606-4cd1\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5706,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2eb734ddee90234db2e0eaf0ee24a1aa","sha1":"76363f906bbd0c3236b5b2cb18b98b2846011e56","sha256":"de7b7158ba7a9dcfaaed5ff6ce715a590069491cf6a969f7e83f3913dcb82c22","sha512":"23a2a84ad9ee96ad5ec5977633d9a4313bc3bcf03794006c7256d71e24497bcea60f77c8ef41a03bff046e3f4ad169dff0a313815204af071062b311f76577c7","ssdeep":"96:9OmmnBQkZgYwbsxttaf4TLTDaec7jEG66OArzSacjLXC9CdsjLSdwUDbC:xMlmgs4TjmFSDfC9usjO+UDO","tlshash":"24c17d7ee73a150b517a2c433c9afe500a1663f7949a64081aa8d17fab02560fb71eb0","first_seen":"2025-11-10T06:00:39.26746Z","last_seen":"2026-07-12T19:46:52.041975Z","times_seen":10,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:20:2A:2D:A3:02:EE:53:E4:CE:46:31:49:99:9A:9E:B0:E7:B5:19","sha256":"23:47:72:09:4E:47:52:14:EB:06:36:94:9D:9F:8D:66:FD:E8:20:45:1A:16:A2:2A:C5:F5:B8:7C:2A:41:2B:61"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://recoveryledger.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Apr 2026 01:42:13 GMT\r\nexpires: Fri, 16 Apr 2027 01:42:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 454644\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-13T17:50:39.012315Z","times_seen":258118,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-nano-plus-M4WHOqMS.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:38.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-nano-plus-M4WHOqMS.js HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/assets/ProductBundlesSection-DIVgc2x3.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:38 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 617\r\ncf-ray: 9efad9b67a8656a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\ncontent-encoding: br\r\netag: \"fe8762855c84273864c4791cf5f52725\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: cab8cd0a-8878-4f43\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: EXPIRED\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1366,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1366), with no line terminators","md5":"fe8762855c84273864c4791cf5f52725","sha1":"2a421e6e208cb2396b0072adfc21faadc84d290b","sha256":"4383d5e05464b38430ed7b30d8b10c9978b5c92a37f76d16798ea6428cd9eea6","sha512":"05c6b5386166eba474533d2fc6e7715dc90b1844006c2b2e3d2a12a8184439ef6ef743346c960bd00a7899c9737886eea63b49c9c06e1e0de27bc1bb7e2aa430","ssdeep":"","tlshash":"2b21dc5d0f414290135a27a67ab605c8e538ff83ecd1614fe01039cb3c69a1bd3aaef1","first_seen":"2026-04-21T08:00:12.814467Z","last_seen":"2026-04-21T08:00:12.814467Z","times_seen":1,"resource_available":true,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-flex-ByeR6P6L.png","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:38.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-flex-ByeR6P6L.png HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26618\r\ncf-ray: 9efad9bb3f6756a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=49437\r\ncontent-disposition: inline; filename=\"ledger-flex-ByeR6P6L.webp\"\r\netag: \"d08fd80840720918706535bb22d0d696\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 919ca6bf-7379-4083\r\nvary: Accept\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26618,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3e0fda43795aa59637afa45efa2f47bc","sha1":"1af06cfc4cc6ca475acc49e3e1075e2a529ae849","sha256":"1dc5e07807317d07fa07f229bc048385d11976fc81ebc917de88c82c67f642ee","sha512":"0817c505e3d588775f4741bbd5a5017fd58bc21a97d4bbb297911fbb25d804359efaab2eb23abb8c8f8568264eebccca2bcdda3fde3758c98694347c334be7eb","ssdeep":"384:VKFySAQ3DiIynht3g8wadzpM61nGf1VffXV71U0j1E70syTeOYV13g9QqRo8thvc:IdCvtoWdnWbh20FsKeOCBg9QqRo8zvWl","tlshash":"20c2d1b8abfa4b7294703966c6a26fe97543c7d05273ef4093ec84cad26d4c02d110ea","first_seen":"2026-04-15T05:10:42.945588Z","last_seen":"2026-04-21T08:00:12.816676Z","times_seen":3,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/Index-DwlH2Ita.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:36.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/Index-DwlH2Ita.js HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/assets/index-C-9htn-A.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:36 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9efad9aabd2656a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\ncontent-encoding: br\r\netag: \"50e880ee0ded157272d6be59cc934b6c\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: c154e8a3-8a53-4f2c\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: EXPIRED\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22438,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15166)","md5":"50e880ee0ded157272d6be59cc934b6c","sha1":"2e262157f8a40bd5e5ef8f5818b013100bc6fecc","sha256":"9b321217f912ddfbb759c14592ea70616fbb454942ab536550d6f198eb6735ad","sha512":"afc881dacd8f3a1a8b87f4106d8166bb384aed403f39383b07a18700524daedf69005c4e336f4af0685aba4628f2290d655714d71a5fc140383006e88131bd36","ssdeep":"384:YmGpsUJQoSiO2rHptsSjtuyUrKj2OPt2B8ZjSKAk7:BGpsnoSiO+sSjbUjaa857","tlshash":"e8a24314dd20dbbd97170ff23a67fca8d552009ad9529e5fe2b0bc282163f12d2623b5","first_seen":"2026-04-21T08:00:12.818274Z","last_seen":"2026-04-21T08:00:12.818274Z","times_seen":1,"resource_available":true,"data":null}},"time_used":304,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-nano-gen5-menu-D-1ZiVNs.webp","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-nano-gen5-menu-D-1ZiVNs.webp HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T17:51:58.402791Z","times_seen":17874405,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-partners-BzGuKBY1.webp","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-partners-BzGuKBY1.webp HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:37 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17664\r\ncf-ray: 9efad9b2ce6756a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\netag: \"8e37a9d885890e2426850338333c110f\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 654e682d-4f2a-47cd\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17664,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8e37a9d885890e2426850338333c110f","sha1":"38890873abcbd517f7adf9aac5a5804bb844c149","sha256":"8a178af6101866a8e783cf778e17e4fa4491cbd9387df5a5395dedc7ff791f63","sha512":"dc2189acfc1bd14e446a0d4ced54f71577a43e2a981c12e933ecce2952ec3d210a008a87c314cf803d0b0e509293b572b5372257a34b6633829b88ae0e0008f9","ssdeep":"384:4O2dr6VUqixP/3s4w1QMFFqXjY5zfJoKmsWA9v5py1J28GIQVaSUg7aXZt:cdsixP/W1QMGjY1flbv3C28wVaSUgWJt","tlshash":"8582e03c3a2d1081f585b8917bfb40d708d40b6548a3b6458ca6b8b28dd687fdc927f7","first_seen":"2025-09-24T05:11:53.33196Z","last_seen":"2026-04-21T08:00:12.821555Z","times_seen":7,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/shield-B4aVqY00.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:38.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/shield-B4aVqY00.js HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/assets/ProductBundlesSection-DIVgc2x3.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:38 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 773\r\ncf-ray: 9efad9b67a8856a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\ncontent-encoding: br\r\netag: \"ff84bd77372eb41678ecf88c45a27b4c\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 01d26cbe-b35f-454b\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: EXPIRED\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1571,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1293)","md5":"ff84bd77372eb41678ecf88c45a27b4c","sha1":"8ce9a56107c1146353773f1491e1b5a6bad5ebac","sha256":"07322cbb34a1f7e615113bea397e21291cc15bbbd0bedb88a59de733cfe54c4b","sha512":"3ed61d1e2054f9f1c9c2f1114dc4f86c9178a8bbef1ab458829655d3146b568d6c64d2003baafc4b405911f2619546c70039b1c925e0eb7d40df73ff3aecfd6f","ssdeep":"","tlshash":"2b31f12cddc4325c334a46d3eb7f56ecc936cd956b585441903461e52e24d26c1c9f38","first_seen":"2026-04-21T08:00:12.825007Z","last_seen":"2026-04-21T08:00:12.825007Z","times_seen":1,"resource_available":true,"data":null}},"time_used":616,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":615,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-gen5-CS30cXUV.png","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:38.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-gen5-CS30cXUV.png HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16292\r\ncf-ray: 9efad9bb3f6c56a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=36939\r\ncontent-disposition: inline; filename=\"ledger-gen5-CS30cXUV.webp\"\r\netag: \"edf53cd99e7168994b3f1faf04e15076\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 9b25a38a-8a09-405a\r\nvary: Accept\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16292,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f418712ea178f61a11e0975f7c4603fd","sha1":"0d867ba806a69567ed6358df4ec2af017d6a5bf9","sha256":"a08ec632e521639d08c20b28496be126318bab82ab89bff73fb38e03ca86da3d","sha512":"7a405d4982c7973f7f4add552fbc9ea4a79d10cbf4f12ce3ea2b3125cb6cc23b6ad445c49e8dc601e2bfae2d3ba49cc8288ad5e5b65afdefe284da8716cd0cdc","ssdeep":"384:Eg4QsH+Bic3lo2ptscKuT2CAOV0z+g023IlDH4DMFJF5JhCi8:Pv/s0jAOS+gcl4oJJhCZ","tlshash":"3572d1b377fc524dd661793d8066473d2bb8a15aa0d63b03e2c3c0083583e14939b6bb","first_seen":"2026-04-15T05:10:42.997656Z","last_seen":"2026-04-21T08:00:12.826622Z","times_seen":3,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-quest-DmhYA42s.webp","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-quest-DmhYA42s.webp HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T17:51:58.402791Z","times_seen":17874405,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-enterprise-DlNLFrRg.webp","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-enterprise-DlNLFrRg.webp HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T17:51:58.402791Z","times_seen":17874405,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/index-C-9htn-A.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:35.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/index-C-9htn-A.js HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:35 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9efad9a68fdb56a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\ncontent-encoding: br\r\netag: \"1e2990c2ee93abb7bab4757f785cf5d6\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 88bb54d6-5be1-496e\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":650958,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46567)","md5":"1e2990c2ee93abb7bab4757f785cf5d6","sha1":"308129a8cb2e2e65c3276d25ae830260d08eb512","sha256":"4e0e81b3495fbbd6accde6ee765cfde4b811812e26ac03431949461c2eb85e7d","sha512":"3e89a772f085c828dbe6dc602770bc157bfbae7982ab780278d3b7e5dffeb6adaaf3fd39bbb473528fc1be20ba31fb0bb7c1fb2056828bbe30de67219ec26cbd","ssdeep":"12288:GL7ZdyN1bumVTL5eonC/ct/eNp7N+0qRwpDZ2SpIXSDj:s7Zs7YJp7NpvUSV","tlshash":"61d4b54027d0a91c279b4fb7b31bb0d6f81e0d5f3858485fe148fe64a6a5227fae2531","first_seen":"2026-04-21T08:00:12.827239Z","last_seen":"2026-04-21T08:00:12.827239Z","times_seen":1,"resource_available":true,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:35.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:20:2A:2D:A3:02:EE:53:E4:CE:46:31:49:99:9A:9E:B0:E7:B5:19","sha256":"23:47:72:09:4E:47:52:14:EB:06:36:94:9D:9F:8D:66:FD:E8:20:45:1A:16:A2:2A:C5:F5:B8:7C:2A:41:2B:61"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://recoveryledger.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Apr 2026 01:42:13 GMT\r\nexpires: Fri, 16 Apr 2027 01:42:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 454642\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-13T17:50:39.012315Z","times_seen":258118,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":116,"dns":4,"connect":27,"send":0,"wait":27,"receive":38,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/TopBanner-p5Ps9ixC.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:36.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/TopBanner-p5Ps9ixC.js HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/assets/Index-DwlH2Ita.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:36 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1310\r\ncf-ray: 9efad9acbf6c56a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\ncontent-encoding: br\r\netag: \"c4fd205c079963f8e69ee1a1e9455316\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 4c019b9f-c2bc-4ff4\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: EXPIRED\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3071,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1511)","md5":"c4fd205c079963f8e69ee1a1e9455316","sha1":"0a86e20cefbfe196da1aff38105cd1e732cf4d5b","sha256":"84064ec7a18c6e66a5f27cf0d7415bd06cdf4bc4c4fc3b128000c2b35391e3f7","sha512":"5388cb70a2ef9309eb207b59a4640ed34ef4e863a6c6b1e88b909f5856cfe5f8d07a7339035831c07ec93977927bd09b2b7c843d49faaa48c6f4cadf5852fc8d","ssdeep":"","tlshash":"e551d2845c0693fd670f4a5a3235d6e9d65b844da88b7457f5403c243c22b1af28feb8","first_seen":"2026-04-21T08:00:12.828907Z","last_seen":"2026-04-21T08:00:12.828907Z","times_seen":1,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/Header-BH1aEGOB.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:36.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/Header-BH1aEGOB.js HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/assets/Index-DwlH2Ita.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:37 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9efad9acbf6e56a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\ncontent-encoding: br\r\netag: \"48a705781bab64d26451a0a153c2cb18\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 39d9f488-783b-4747\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: EXPIRED\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167868,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64228)","md5":"48a705781bab64d26451a0a153c2cb18","sha1":"c8cab9ffdb9ea93a3b1c9752f8ab8ff4af807b5e","sha256":"c84033f0246c9b87136a45f36155b08585af3f2b8a27a8c1c376a0c2025c6a5c","sha512":"a3f44db3e086fa9cd82b463ed31f9f4bb8faca700d95463e87f6d6f66a1046b714ceffda64b0381695f0114f329850f912179f62d7987f54462a7597491873ad","ssdeep":"1536:uwQm9/JNV2HX6vWr7njVHwmfi7kAo2V61A+y61ENA9KAjSnuD0prXYwd8N4fw:pRwQ47jVa7vEMESnuD0Owd8Nx","tlshash":"0bf3b644a980b55c174f5ebab67ef8e8e0af4c7e694c878ed550fc1031a5602dbe36b0","first_seen":"2026-04-21T08:00:12.807141Z","last_seen":"2026-04-21T08:00:12.807141Z","times_seen":1,"resource_available":true,"data":null}},"time_used":752,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":731,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/index-1DTB2XYm.css","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:35.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/index-1DTB2XYm.css HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: 9efad9a68fdf56a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\ncontent-encoding: br\r\netag: \"ad3222520d60391a9873eaeaf514775b\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 59c153d7-51a0-4b9e\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88968,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ad3222520d60391a9873eaeaf514775b","sha1":"26440075916de73306a1cf3ece98e7d235ed1726","sha256":"dbea98792e6434c0e1e207b2fb3aa0038485495dad0310665bb1a41a54c8687b","sha512":"38a5e4d0b0ae2db7c2e453c93499cff312ba2d5001c22984ca1ff9da9865ba8081733810a3fe10703357e8f0fa88de398982c36c8ae7967ee6e68187ecc0afff","ssdeep":"1536:0xh7HwDsJYC1hsn05pk1jcYNksP6vUX+4esG5Cr378VQZkt5FNCo2f:+h7HwDsJYC1hsn05pk1jNks0UresG5Cz","tlshash":"9793832dba19603f3c2791f4c2dcb9eca11af0c0de3a05e5be9641215ad27f61da7618","first_seen":"2026-04-15T05:10:42.975277Z","last_seen":"2026-04-21T08:00:12.829782Z","times_seen":3,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/proxy-CECAQHmp.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:36.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/proxy-CECAQHmp.js HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/assets/Index-DwlH2Ita.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:36 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9efad9ad0fdd56a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\ncontent-encoding: br\r\netag: \"fc5ffbeeb5862e42d12e6f99c15bacca\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 6101c43b-0b03-4bb8\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: EXPIRED\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232437,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fc5ffbeeb5862e42d12e6f99c15bacca","sha1":"57f21b0b4c8c7d3a4568880f9185f0d9612f9d5b","sha256":"0b0dad38dad97a9b8c76ef57b5675ac42744b20608998c5bb5759cf873832ac0","sha512":"75ff08dc145d708a1fa754380f84243b42b70888e851eacb2e61af3cd93a2045ce27fe9463bf44734a27156cd7767b6093a148c021506e9f4ef96444f7bd2ee0","ssdeep":"6144:9nLfD59LxWr5FaQgA6VKW1Qis1emO42Josm7LEk2BgwY4pPWYRii4F:9LfV9Q5Fa5A6VKKQis1emO42Csm7LEkh","tlshash":"8834955027c0254863474fbbb31ba4f2e52e186e389e4d8ff228bc1529d6617f6fa471","first_seen":"2026-04-21T08:00:12.830733Z","last_seen":"2026-04-21T08:00:12.830733Z","times_seen":1,"resource_available":true,"data":null}},"time_used":395,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-stax-menu-De1FmWV4.webp","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-stax-menu-De1FmWV4.webp HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T17:51:58.402791Z","times_seen":17874405,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-nano-classic-menu-Ckqm-5Sh.webp","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-nano-classic-menu-Ckqm-5Sh.webp HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T17:51:58.402791Z","times_seen":17874405,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-cobranded-CxAHW7ad.webp","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-cobranded-CxAHW7ad.webp HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T17:51:58.402791Z","times_seen":17874405,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/BackupSection-CLUfixWg.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/BackupSection-CLUfixWg.js HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/assets/Index-DwlH2Ita.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:37 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9efad9b27df256a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\ncontent-encoding: br\r\netag: \"29e6c8b3edcc26279d09b37240e927d6\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 0016575a-71d6-41b8\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: EXPIRED\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61470,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (61470), with no line terminators","md5":"29e6c8b3edcc26279d09b37240e927d6","sha1":"e2140179a11d96e97cd429cd4614229985a8d250","sha256":"92e7f0574743e68143fcce25faa99d176a359eccedc8492525f1b3933939e350","sha512":"81a61eae402bb571927429b6896587c018c72693507d0190ce7f5a8849aed9a7a021edaf39aa5b784c3ba2ad4e77e68d4eea73d145869ece185b6db981106aba","ssdeep":"768:YXTQOPFAniSH5VnuDalw304Ultqej/tNZRKP7XRLEC+WSkrvqxqU59jOBQaQda5y:YNOiSHfnawwlfXGXtgYQWr8gZmCMWOM","tlshash":"5153d9447e942a6c274b8fb7b363b8e4e51f1c6f3481088bd2047c1a6aa5527faf1671","first_seen":"2026-04-21T08:00:12.831701Z","last_seen":"2026-04-21T08:00:12.831701Z","times_seen":1,"resource_available":true,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ExpandedFAQSection-CFvJ02nJ.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ExpandedFAQSection-CFvJ02nJ.js HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://recoveryledger.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:37 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2047\r\ncf-ray: 9efad9b28e0756a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\ncontent-encoding: br\r\netag: \"c8db6af2091cbc06f857f6bc8c32478b\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 2bb75fab-5168-47ff\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: EXPIRED\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7134,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7134), with no line terminators","md5":"c8db6af2091cbc06f857f6bc8c32478b","sha1":"e28cc0a082d40d956bf30e7f9fb13c53e7e7a8ae","sha256":"e6f9a650de03edbc7312d49fef062a0b19dee90329cfe4972b806a119e502498","sha512":"84d0e6d327dc75d66b6f29cfc83aab1870c7c5e1d8f94fa65b5e3db1329d2907965df667b081557b1ae46efc2c278244b9fbced7d6f9bae3144f55296ef5f2b5","ssdeep":"96:Jhxxa1nj+O9t9SyEJao2B6BBWSUt7Yd/NdOTWuNJazd1nfsgD+vn9VIU+3ogY6:JzxQj+CYyaaotWKO7MRC9Q4m","tlshash":"f8e1de34dc4376ac170f0dea62d7b1dcd13354b6abb18e17a06228223b7d10ea95e3b5","first_seen":"2026-04-21T08:00:12.832844Z","last_seen":"2026-04-21T08:00:12.832844Z","times_seen":1,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-flex-menu-CdbMwiEW.webp","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-flex-menu-CdbMwiEW.webp HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5300\r\ncf-ray: 9efad9b2be4356a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\netag: \"296bd36a867d96a905dff65885424985\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 3288c92b-3c8e-4d7e\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5300,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"296bd36a867d96a905dff65885424985","sha1":"39a3e0c7abf07aef535eef315a15257b99ccd65c","sha256":"2c65003289595990bc3f8a115f741dec472af74aafd84d4ef6d77004cbea89dd","sha512":"4ab4f5c0f05903a8e17616048080570e8ce882b7d73dca3209cf2fd42fc11928fa9341d62055aff5a1b22aedc2f1e378439695e0872c9ee78c3c6d2534539fee","ssdeep":"96:e6z2rfILJgaXCsirkyoobStO013uijgftG010Qzo8Y+6Sgn1ire0ZUhWpbMvuvZs:e6zsK6sDykTN8ftG1QzK+Wn1meOUwbMf","tlshash":"f3b19e17d06146b3d52b009435e8db2b04436afe9a3777e327e2c62e1547ad4c03a3dc","first_seen":"2025-11-10T06:00:39.245949Z","last_seen":"2026-07-12T19:46:52.010547Z","times_seen":10,"resource_available":false,"data":null}},"time_used":765,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":765,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-live-app-DBA2g0NP.webp","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-live-app-DBA2g0NP.webp HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T17:51:58.402791Z","times_seen":17874405,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/hero-devices-D6SO7lkH.png","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/hero-devices-D6SO7lkH.png HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:37 GMT\r\ncontent-type: image/webp\r\ncontent-length: 51198\r\ncf-ray: 9efad9b2ee7e56a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=121224\r\ncontent-disposition: inline; filename=\"hero-devices-D6SO7lkH.webp\"\r\netag: \"8340fe242510899933530df161ebcb4b\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: c4358720-cf7e-4dc3\r\nvary: Accept\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51198,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"900defad47e44a5f066821f5549ad7c8","sha1":"d5f5a7cd2661df8f4ff4b66d7fa734db14ba1b25","sha256":"acf6aadd879485e142f7176b6f3171b29b5167e8d5e793e4cf9e026335fdb0bf","sha512":"b696e5d34fad0987b2ab933964f3a39935cc0b112c81e19f08a91a26874350dad06f97f528136cf6aa090919b2edabcab8d7dcbaf986e522741b54304e2bed03","ssdeep":"1536:4n47IsqfWRn8vcxPhfAgafD2av/yUab3Foxki:4n/swkkcxP+gafD2crQ3yb","tlshash":"3c3302cde4da6e324aff0fdc81836d22c9b1911d23bfb945029fc94f7aad510821462b","first_seen":"2026-04-15T05:10:42.957835Z","last_seen":"2026-04-21T08:00:12.835092Z","times_seen":3,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/refresh-cw-DjbEjsgq.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:38.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/refresh-cw-DjbEjsgq.js HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/assets/ProductBundlesSection-DIVgc2x3.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:38 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 808\r\ncf-ray: 9efad9b68a8c56a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\ncontent-encoding: br\r\netag: \"8985743def05f147f7de56613b12ad9c\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: c7990704-470d-4b86\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: EXPIRED\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1723,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1190)","md5":"8985743def05f147f7de56613b12ad9c","sha1":"b3228bdaf4eb3dffdada1eaaceb9bcad7c3cf03d","sha256":"3f722ef322efe36c45228c20756bd9b65e85f2b57f4ff87c844965e0b46215f6","sha512":"c545653a4de71943517e9d8f3e8ea759719a14da87ad2460c59be8738a01ff98a0e3866062d9280eba5c5bc2b711dcb2d423faced301cf0bc02de926255a5680","ssdeep":"","tlshash":"8931d17b64c4695d63920ab61d3e16f9d63acc5c1eaa0022919136843fe4c3dc2dbe7a","first_seen":"2026-04-21T08:00:12.835685Z","last_seen":"2026-04-21T08:00:12.835685Z","times_seen":1,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-nano-plus-xW65VtLs.png","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:38.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-nano-plus-xW65VtLs.png HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T17:51:58.402791Z","times_seen":17874405,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-academy-B1UpkbMx.webp","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-academy-B1UpkbMx.webp HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:37 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5630\r\ncf-ray: 9efad9b2ce5756a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\netag: \"1317465302686f5abafef3499e1ec442\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: a4e35f29-5bd3-4061\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5630,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 504x480, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1317465302686f5abafef3499e1ec442","sha1":"2236556e377459a0615702cc5d1fb6b1de601ed8","sha256":"8d809fff4d17b384ec723dca0afeb3afeb91ad377d04fb95ee6465f684c2a4d9","sha512":"3eae1d35080e9838ec2e47b9b6feb037e47e97d236d9e17167e206f5bc63b054b65788281bbe9626a53b4bb1dbe19736789a0d0ff3319ac36b418c50e20f10ff","ssdeep":"96:gs81rZCCajhx1qqRIP/K8orWDWeAvfaIh1+iJTgulHQCQTYKKg9:ghZsPqqKKfOW1naIh1+ipgulHLc9","tlshash":"41c17cc90ac095a0bfc6b591591af2723879763b11c7c0edf4c19694daaf0fe1353a0b","first_seen":"2025-04-15T00:25:17.370095Z","last_seen":"2026-04-21T08:00:12.837435Z","times_seen":16,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/try-ledger-recover-kzfb3WrU.png","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/try-ledger-recover-kzfb3WrU.png HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2940\r\ncf-ray: 9efad9b63a2d56a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=6480\r\ncontent-disposition: inline; filename=\"try-ledger-recover-kzfb3WrU.webp\"\r\netag: \"84e7f388a7b74a8504ba55fb3409a1ae\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 167e3738-f6d5-4de2\r\nvary: Accept\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2940,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4c306367e1b254dafe05f829de806e1f","sha1":"91b9e7f28dc325fb1fd856925a5c9c64b8f49333","sha256":"1c098473d36593da6f161cc9c189e39e17027cd9802543ce74f09bf699f5c4c6","sha512":"0dffda45a8f9b28e87574287b4828c6e361100a5ea1afb42c1731654de6f8e1f0f3b77d05c3205b9728bbb1351a7eb9b30379f506e8126c1746c2fa6c625a829","ssdeep":"","tlshash":"47514c3068547521b829f75186b01d98dcdb3acd23dc5259a6c70290ccb3b63a7221dc","first_seen":"2026-04-15T05:10:42.984171Z","last_seen":"2026-04-21T08:00:12.838318Z","times_seen":3,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/creating-spare-key-D6Rw1Sn8.png","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:38.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/creating-spare-key-D6Rw1Sn8.png HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6246\r\ncf-ray: 9efad9b93d4156a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\naccept-ranges: bytes\r\netag: \"f1d629f7b234afa646dbcce593905f7e\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: ca81760f-a755-4dc4\r\nvary: accept, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-bgj: h2pri,imgq:85\r\npriority: u=4,i=?0\r\ncf-polished: ok, orig_size=80879\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6246,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 350x237, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b4e0dd4bce9fcdd86c29e6cbc5c944f9","sha1":"885853ea71363c423e0150d70551895b209ffe25","sha256":"83e08bc6e5c7d6672464a1f58a0a2195f78f5127d1aa3d483792c3f0d5a862dc","sha512":"17056ad7d2f8487c494f16f06eddee4ad93d00d77cdc380a0bf0dd217aea8b41fb73f669f6f99bc29aa6f69cb527c2ae6f8e495a22e1c306e9df1133ccc82d9d","ssdeep":"192:izhMNC0rQTWqQisSH/8A91ZLa46GSrVs6I6k:iFMj3qQisSHl1ZLqlRs6vk","tlshash":"62d19e594f1525356716a420713f7ed30972782d2efd8d63e75228128bbe9c25a5130f","first_seen":"2026-04-21T08:00:12.839064Z","last_seen":"2026-04-21T08:00:12.839064Z","times_seen":1,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/backup-video-Dv9TrO4o.mp4","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:38.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/backup-video-Dv9TrO4o.mp4 HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Tue, 21 Apr 2026 07:59:39 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1300671\r\ncf-ray: 9efad9b93d4556a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\netag: \"6b5b9a1582c716870399bc71e8feabec\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 0e8dd482-b0d3-45fd\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\ncontent-range: bytes 0-1300670/1300671\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79586,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"46e8920d17740d0bbf808843e8b555ce","sha1":"f528fc171388bbbdc9bdc1696e78b8781757f733","sha256":"061d68a9fe31f029d838e50e8851858fc0fe93fde654f3d293b0f1bca1204cec","sha512":"9f7f6e1604b0c066cfdd8b0000e7f25d5f9e2def11cd77997837d4e35f16eae44efc036bebee3292ff22a78d7eb5e4079b841a831957ebc742269bbddb86fd19","ssdeep":"1536:bTzJ0VwsWCw0tFegGqmVYPYF/FOuiN26SPnX4dAb84s9wjZcS5k:dIws1zgYPwYuzBv4dOvs9wjZY","tlshash":"437302f797581364a9523e9bc4f2c19c148c896a18a13e4f540286f3dfd6bd333683ba","first_seen":"2026-04-21T08:00:12.840436Z","last_seen":"2026-04-21T08:00:12.840436Z","times_seen":1,"resource_available":false,"data":null}},"time_used":925,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":764,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/input-CNpK8CSN.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:36.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/input-CNpK8CSN.js HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/assets/Index-DwlH2Ita.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:36 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 905\r\ncf-ray: 9efad9ad0fce56a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\ncontent-encoding: br\r\netag: \"002b262b2ffbf82002c8ab9806fafcad\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: c6c6363d-d84f-4215\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: EXPIRED\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1962,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1962), with no line terminators","md5":"002b262b2ffbf82002c8ab9806fafcad","sha1":"8ef51538eb1c04a85e4ea368f6fecb0823671986","sha256":"acc26e02610213c753a8077afcf687af3afdc527e50eeda54b421678a22c57ab","sha512":"774acaa4bc742c06ba764eb085b2082ec61feef10bf00a28fe57ea6885a5ab7a4637bff237854c87f368d23821771fdc1cff7d5ad68d93bf16dbaca299e4502a","ssdeep":"","tlshash":"9c41f03a15c167ed63aa4bf63b3814c0df2ec54aa4914946f294b0a43c7e5368a92d70","first_seen":"2026-04-21T08:00:12.842232Z","last_seen":"2026-04-21T08:00:12.842232Z","times_seen":1,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-logo-new-uEaKTXOf.png","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-logo-new-uEaKTXOf.png HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T17:51:58.402791Z","times_seen":17874405,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/recovery-solutions-Be_pJjmx.webp","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/recovery-solutions-Be_pJjmx.webp HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T17:51:58.402791Z","times_seen":17874405,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ExpandedFAQSection-CFvJ02nJ.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ExpandedFAQSection-CFvJ02nJ.js HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/assets/Index-DwlH2Ita.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:37 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2047\r\ncf-ray: 9efad9b29e1f56a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\ncontent-encoding: br\r\netag: \"c8db6af2091cbc06f857f6bc8c32478b\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 2bb75fab-5168-47ff\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nage: 0\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7134,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7134), with no line terminators","md5":"c8db6af2091cbc06f857f6bc8c32478b","sha1":"e28cc0a082d40d956bf30e7f9fb13c53e7e7a8ae","sha256":"e6f9a650de03edbc7312d49fef062a0b19dee90329cfe4972b806a119e502498","sha512":"84d0e6d327dc75d66b6f29cfc83aab1870c7c5e1d8f94fa65b5e3db1329d2907965df667b081557b1ae46efc2c278244b9fbced7d6f9bae3144f55296ef5f2b5","ssdeep":"96:Jhxxa1nj+O9t9SyEJao2B6BBWSUt7Yd/NdOTWuNJazd1nfsgD+vn9VIU+3ogY6:JzxQj+CYyaaotWKO7MRC9Q4m","tlshash":"f8e1de34dc4376ac170f0dea62d7b1dcd13354b6abb18e17a06228223b7d10ea95e3b5","first_seen":"2026-04-21T08:00:12.832844Z","last_seen":"2026-04-21T08:00:12.832844Z","times_seen":1,"resource_available":true,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:35.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:9D:A0:A4:A4:3B:62:A3:D0:B3:63:4B:5B:C3:1D:9B:09:43:3C:91","sha256":"DB:10:40:08:19:EF:D7:9C:5F:11:BC:78:DC:9F:81:F3:9E:A7:30:2F:1F:06:C8:C4:A4:DD:BC:C3:27:6F:2A:AA"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 21 Apr 2026 07:59:35 GMT\r\ndate: Tue, 21 Apr 2026 07:59:35 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17689,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"30e76aaeae29f594433bc728a08b4d8f","sha1":"ac1b677b4d702295e7802802376ddd8c84acbc13","sha256":"395e51e3dc84faf99710da8cf316e573703addd6eb598e1b334eff76653e820d","sha512":"93b1661d34210abbdb2c6cca46bb229254b615ba07c05dbcadb65199b9d1e61e18dbb4302236e89188ddc34be20528f503f6140358f82385b1f0e621f93ec4d8","ssdeep":"192:wNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kV:8KYXuM0p2+g7GQK","tlshash":"b1828892002ba400ab971dc233cf7f3aaece10896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T05:09:40.151737Z","last_seen":"2026-08-13T16:26:41.924607Z","times_seen":5467,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":138,"dns":1,"connect":28,"send":0,"wait":48,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/index-BMakXHYg.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/index-BMakXHYg.js HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/assets/HowItWorksSection-BkR0ZWFQ.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:38 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2182\r\ncf-ray: 9efad9b4684c56a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\ncontent-encoding: br\r\netag: \"e808d427f4a3ef749487f2ab5a90e840\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: fc97f86a-5834-4d3c\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: EXPIRED\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5981,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5981), with no line terminators","md5":"e808d427f4a3ef749487f2ab5a90e840","sha1":"f152f0b3cb307fda4f9ea7d1e33f0f3f5ef2e575","sha256":"8d6b5a65fa83ef3636af5add0ea072668ee3984377d2211196f9d45fed3c309a","sha512":"fc995c4772b9a07665614e52545dd16a026bbbfa68dd4b7763fc5e545032a0cd51a28da7ab0bc6a475fa1e804296e1feac475234c215ae2c3c76e14e670642af","ssdeep":"96:yjvugANCWGUHiJ9XgV/XASNPNBefVD/XHkavDqmIw6dtJaXALCP9XPxkqbdsNjz/:yjGVNCuCJ9XgV/XASFNBeNHkavGmL60y","tlshash":"b4c175416ac05eda27024fbbf227b4e4ea6f1d2e384858c7d515bc4936e2f1af1e2171","first_seen":"2026-04-21T08:00:12.844232Z","last_seen":"2026-04-21T08:00:12.844232Z","times_seen":1,"resource_available":true,"data":null}},"time_used":696,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":696,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/gpt-engineer-file-uploads/gbYUxy3Z7xfKkDoGsm44EsYmetV2/uploads/1764188115276-nouveau%20favicon.png","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.123","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:36.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:39:58 GMT","end":"Mon, 22 Jun 2026 08:39:57 GMT"},"fingerprint":{"sha1":"D6:C6:D2:8A:7F:65:39:6F:60:5D:B5:91:12:03:AD:B2:60:56:74:2E","sha256":"CE:FC:6D:81:62:7B:AD:3B:28:79:19:92:45:7E:AD:8A:31:B7:7D:E4:A2:82:44:AF:B4:F3:A1:B4:F3:C1:C3:5C"}}},"request":{"raw":"GET /gpt-engineer-file-uploads/gbYUxy3Z7xfKkDoGsm44EsYmetV2/uploads/1764188115276-nouveau%20favicon.png HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nx-guploader-uploadid: AMNfjG2oZUNACEGiOphZnkOPgoKRni65vhEfU2zwcmjZzfxhqAUy-DI86Hs6fSKhhd7HHeH5L8Ptdw\r\nexpires: Tue, 21 Apr 2026 08:59:36 GMT\r\ndate: Tue, 21 Apr 2026 07:59:36 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Wed, 26 Nov 2025 20:15:18 GMT\r\netag: \"ec51a25f1362fb31be85896ca683d0ec\"\r\nx-goog-generation: 1764188118908447\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 2404\r\nx-goog-hash: crc32c=ud68dg==, md5=7FGiXxNi+zG+hYlspoPQ7A==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 2404\r\nvary: Origin\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":2404,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 891, 4-bit colormap, non-interlaced","md5":"ec51a25f1362fb31be85896ca683d0ec","sha1":"4e893e43803d20335dc8ec73ac86499b87dffd0a","sha256":"b0cfabce7bcb155a41163f6764590c0367cece8ebc2755871699790a0864e1a7","sha512":"1b537c2cb17374e06442fadc54994d5ddf67448f0a57e07fef4c9c12f30956969f19331889e68ea570c5e442eb2c7040edf80b385a2585e0dda5d086ee9c6e71","ssdeep":"","tlshash":"b441a248bd09a4238eff41724967d56785b2a8d6ab988b5ff2506021c8f7fe8cdcc042","first_seen":"2026-02-11T15:34:12.772949Z","last_seen":"2026-04-21T08:00:12.845781Z","times_seen":5,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":4,"connect":14,"send":0,"wait":113,"receive":1,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-nano-classic-menu-Ckqm-5Sh.webp","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-nano-classic-menu-Ckqm-5Sh.webp HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:37 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11102\r\ncf-ray: 9efad9b2be4756a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\netag: \"ef8c61202ce69c4d5f94865af3a53032\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: f5e9cf37-7c01-4c23\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11102,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ef8c61202ce69c4d5f94865af3a53032","sha1":"a77807306c19f0e70def31d8472e882e63c5ecfb","sha256":"9ec9b3ccff82bcecbb6187161226845c8ad02b64c654394c0b07f03e08cd6020","sha512":"8d68257a182b9e0425812abef9412139b77c116d7968a837b86b59360ca38829fe3a6b77fa8f5adca6a3973483532a9a71868fabafcc21e1e982f7de621f2bbd","ssdeep":"192:VBU++NS5Xl5SEWL4USSkYW2/WK27vvTol0opRGQd7iAYCwSJj/fQ:7+NKXlQEWLSb2eK27vTO0opRzd7BbT4","tlshash":"d132af114be2ba0bd20af4b201833137ab275b855adbcb94064dbbf4aa353c93d51c4f","first_seen":"2025-11-10T06:00:39.240916Z","last_seen":"2026-07-12T19:46:52.031632Z","times_seen":10,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-cobranded-CxAHW7ad.webp","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-cobranded-CxAHW7ad.webp HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:37 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10508\r\ncf-ray: 9efad9b2de6e56a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\netag: \"537e9cb1b46990760fe8a635d5400deb\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 687f4d40-70c2-4b4d\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nage: 0\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10508,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"537e9cb1b46990760fe8a635d5400deb","sha1":"7a6c5b0e1399043596eb9b7c43f2130409dc093b","sha256":"021e067f1cee80fab64d28840bceeee2d27469749b56a6ee2e61a9597b500633","sha512":"d65747a4b64f60f12f301e79b7c64129ece09d5fabea5f1c72970f958d677f5be3d7f3335209f21983b95f696150bd1a081a0474ea96bf7b61056ad95ffaa890","ssdeep":"192:oJh2AOBCLI0NSUXDEp+qU+us3ca7za4HRXuTvxc:sg5UQ0qUba724gTpc","tlshash":"6022c0c884ad5478e574577774223c91b9c042eecbe6cee0a976b5dbe4d40ca71ea033","first_seen":"2025-11-10T06:00:39.235148Z","last_seen":"2026-04-21T08:00:12.847091Z","times_seen":6,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/backup-video-Dv9TrO4o.mp4","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:38.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/backup-video-Dv9TrO4o.mp4 HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Tue, 21 Apr 2026 07:59:39 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1300671\r\ncf-ray: 9efad9ba8ece56a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\netag: \"6b5b9a1582c716870399bc71e8feabec\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 0e8dd482-b0d3-45fd\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nage: 1\r\ncontent-range: bytes 0-1300670/1300671\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129415,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"89f4e63a91943248987800b2cf4e6ac4","sha1":"6d433a6c101ad31f53ead78d235d4d0ad6f540aa","sha256":"ca3d2f934c4c410be17f24c2474e718af16e04e8a36dde0bf5a6e9cd4fd508b0","sha512":"b3e7b9f030b79e4b775ce7edf18bf0e4853c5d623aae127d8c020c7f134b37e9a563066a370cc23d827fec3b2cefc0823bcae134d4816831e378733a8594d6e6","ssdeep":"3072:dIws1zgYPwYuzBv4dOvs9wjZg3YDTHaRZYcPv4QW8RiUUDW:dts10Yu14YvWwjZgIDTUyc3/iLW","tlshash":"13c312f344a403a0a6233d67c8f2909d244d982816b27b8f646991f3dfd2dd1277c7ba","first_seen":"2026-04-21T08:00:12.847714Z","last_seen":"2026-04-21T08:00:12.847714Z","times_seen":1,"resource_available":false,"data":null}},"time_used":568,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/backup-video-Dv9TrO4o.mp4","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:39.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/backup-video-Dv9TrO4o.mp4 HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=1277952-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Tue, 21 Apr 2026 07:59:39 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 22719\r\ncf-ray: 9efad9bf0b1f56a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\netag: \"6b5b9a1582c716870399bc71e8feabec\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 0e8dd482-b0d3-45fd\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nage: 1\r\ncontent-range: bytes 1277952-1300670/1300671\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22719,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"ca312ef97b0b2cba30805d36bfacb968","sha1":"879364b24b9b3fdccb893ba20ac6eccb8a98d0c4","sha256":"27056d0e21b8255f8f35985659f9bf321f41d6a187847b7f5f1b155978e90ea8","sha512":"e5757dcdb92eed813f5f0cdf84bf3fa24c5d8d53bd5a0373ac775b9d31d92aacd72dc2a196c19627c0490d78af60812f08135c13073882a9c709c60e6b543d79","ssdeep":"384:Rcx8drXuJ/Nq7bNOZ28lNmpDNpDee0dkAE+LUyGY7Q9QLYZqhKF8:RnluJ/NyhOxwLDee0dkT+Yyw9Q8ZqX","tlshash":"dfa2f2c9a7db7d58c8482e31b990079d7b3ed960cbee0707961762ca7801082adfd9dc","first_seen":"2026-03-06T10:58:48.037031Z","last_seen":"2026-04-21T08:00:12.812852Z","times_seen":3,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":363,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-21T07:59:34.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:35 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 767\r\ncf-ray: 9efad9a19f105697-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\ncontent-encoding: br\r\netag: \"08c3a9f5beb64e525a40f2c2cea276e2\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 5ad0c115-8242-4460\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2593,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"08c3a9f5beb64e525a40f2c2cea276e2","sha1":"8716bbe115c241139be94695fb13f4feefafd57c","sha256":"190a163837351a150342a23d0fd4923f11cffceea4086fa15c7d1e8b8dd64e6f","sha512":"f402ac457dab5a56fac8d9a4a6adf7997a4676a6de7df258e69fa6834e9d0f541e91b6b0e437f67d7c4130cb72916221e9d2639ea07e1580b1e025adf8bf447b","ssdeep":"","tlshash":"095112b37058d9141390c3126cd6f109aa229007c74cee617a6a80dfebe0bd185e32aa","first_seen":"2026-04-21T08:00:12.848874Z","last_seen":"2026-04-21T08:00:12.848874Z","times_seen":1,"resource_available":false,"data":null}},"time_used":724,"timings":{"blocked":103,"dns":83,"connect":1,"send":0,"wait":510,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-live-app-DBA2g0NP.webp","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-live-app-DBA2g0NP.webp HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:37 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9562\r\ncf-ray: 9efad9b2be4856a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\netag: \"c909feebf803ef75db12fdc2c45dc781\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: a54d8afe-a47e-4185\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9562,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c909feebf803ef75db12fdc2c45dc781","sha1":"ca749bd64e4aca5acc91c3279ea940110b55d5f2","sha256":"7da4fd0db336574fd36ed36b9763133f66eb431d94ebece7f9c492a84ef6e601","sha512":"e3271241ccf6971dcd238eaa5de866a9fdcaa6eef84cad2667bb5b1c7309493be6e15655ad0b06af755d68b5fac4594f3e19dea5f2b0d4f861c44811a3d7869a","ssdeep":"192:hZVtRl92CEDR3uJeZuKq/bSGGcei+hvJ6rUuN/UgZbLsa0H0:hVRl9n8weZ/q/uGGcei+hh6ppzZEa40","tlshash":"af12d07aed09ba934dec7d1bece28d51a260c20c5bccdebd7c00c6058a6bd904807e76","first_seen":"2025-04-15T00:25:17.290453Z","last_seen":"2026-04-21T08:00:12.849949Z","times_seen":16,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-flex-ByeR6P6L.png","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:38.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-flex-ByeR6P6L.png HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T17:51:58.402791Z","times_seen":17874405,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-nano-x-MHg3desq.png","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:38.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-nano-x-MHg3desq.png HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T17:51:58.402791Z","times_seen":17874405,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-academy-B1UpkbMx.webp","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-academy-B1UpkbMx.webp HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T17:51:58.402791Z","times_seen":17874405,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/index-C-9htn-A.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/index-C-9htn-A.js HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://recoveryledger.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:37 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9efad9b28e1156a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\ncontent-encoding: br\r\netag: \"1e2990c2ee93abb7bab4757f785cf5d6\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 88bb54d6-5be1-496e\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nage: 2\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":650958,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46567)","md5":"1e2990c2ee93abb7bab4757f785cf5d6","sha1":"308129a8cb2e2e65c3276d25ae830260d08eb512","sha256":"4e0e81b3495fbbd6accde6ee765cfde4b811812e26ac03431949461c2eb85e7d","sha512":"3e89a772f085c828dbe6dc602770bc157bfbae7982ab780278d3b7e5dffeb6adaaf3fd39bbb473528fc1be20ba31fb0bb7c1fb2056828bbe30de67219ec26cbd","ssdeep":"12288:GL7ZdyN1bumVTL5eonC/ct/eNp7N+0qRwpDZ2SpIXSDj:s7Zs7YJp7NpvUSV","tlshash":"61d4b54027d0a91c279b4fb7b31bb0d6f81e0d5f3858485fe148fe64a6a5227fae2531","first_seen":"2026-04-21T08:00:12.827239Z","last_seen":"2026-04-21T08:00:12.827239Z","times_seen":1,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/proxy-CECAQHmp.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/proxy-CECAQHmp.js HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://recoveryledger.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:37 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9efad9b29e1556a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\ncontent-encoding: br\r\netag: \"fc5ffbeeb5862e42d12e6f99c15bacca\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 6101c43b-0b03-4bb8\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nage: 1\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232437,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fc5ffbeeb5862e42d12e6f99c15bacca","sha1":"57f21b0b4c8c7d3a4568880f9185f0d9612f9d5b","sha256":"0b0dad38dad97a9b8c76ef57b5675ac42744b20608998c5bb5759cf873832ac0","sha512":"75ff08dc145d708a1fa754380f84243b42b70888e851eacb2e61af3cd93a2045ce27fe9463bf44734a27156cd7767b6093a148c021506e9f4ef96444f7bd2ee0","ssdeep":"6144:9nLfD59LxWr5FaQgA6VKW1Qis1emO42Josm7LEk2BgwY4pPWYRii4F:9LfV9Q5Fa5A6VKKQis1emO42Csm7LEkh","tlshash":"8834955027c0254863474fbbb31ba4f2e52e186e389e4d8ff228bc1529d6617f6fa471","first_seen":"2026-04-21T08:00:12.830733Z","last_seen":"2026-04-21T08:00:12.830733Z","times_seen":1,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/index-Clda7G-m.js","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:37.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/index-Clda7G-m.js HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://recoveryledger.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 07:59:37 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3437\r\ncf-ray: 9efad9b29e1756a8-OSL\r\ncache-control: public, max-age=0, s-maxage=300\r\ncontent-encoding: br\r\netag: \"fc737eb7a1dbec3e0493382bae8ea384\"\r\nlast-modified: Mon, 20 Apr 2026 12:18:12 UTC\r\nrndr-id: 46d97283-f730-495f\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nage: 1\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9920,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9920), with no line terminators","md5":"fc737eb7a1dbec3e0493382bae8ea384","sha1":"2457936b474b74f58c0b32b700d22a86a1fad0ea","sha256":"1e2f35b2430acbbe16c4e283c0a520a5536129cc8df1ebe796c830a5bf8fe2d8","sha512":"0dfee8f1f9494e704a121a4d02eb6a35e9813c9b041e821295e9e925417f5290c35933e175f80a252e3dc98c3da780adba1f02c2235ed76e6fb97b8eeead31b1","ssdeep":"192:942VbX3F19qCzoxWTWTdaRtCBvv6D3hHqOjOFDRxabqmoc0uQQQU8P83OM8S36LB:P39Tlt0vvIRHvjqDRxBZXuQQ4Adhgs1Q","tlshash":"052262142ec0b6dd234b4ad7bb3774e9e15b1e1b76814b4fe01dbc0118aa113e6ea8b5","first_seen":"2026-04-21T08:00:12.780525Z","last_seen":"2026-04-21T08:00:12.780525Z","times_seen":1,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recoveryledger.live/assets/ledger-stax-NBrqMpIK.png","fqdn":"recoveryledger.live","domain":"recoveryledger.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recoveryledger.live/","date":"2026-04-21T07:59:38.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recoveryledger.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 10:24:15 GMT","end":"Wed, 15 Jul 2026 11:24:07 GMT"},"fingerprint":{"sha1":"DB:69:12:39:A2:FD:79:F6:35:C9:BF:08:E5:6A:80:70:71:75:97:A7","sha256":"CB:0C:8E:79:11:9F:69:B6:31:2C:8B:E9:9C:6B:F7:C5:08:AB:72:0B:23:0D:2F:B6:6E:9B:C4:0F:F7:BF:26:89"}}},"request":{"raw":"GET /assets/ledger-stax-NBrqMpIK.png HTTP/1.1\r\nHost: recoveryledger.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recoveryledger.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T17:51:58.402791Z","times_seen":17874405,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"recoveryledger.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}