{"report_id":"9a378f24-621d-4348-a2a6-44c7c2d8bfda","version":6,"status":"done","tags":[],"date":"2026-03-29T15:44:30Z","url":{"schema":"https","addr":"bitcoin-ledger-recoveryx.org/","fqdn":"bitcoin-ledger-recoveryx.org","domain":"bitcoin-ledger-recoveryx.org","tld":"org"},"ip":{"addr":"172.67.176.203","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bitcoin-ledger-recoveryx.org/","fqdn":"bitcoin-ledger-recoveryx.org","domain":"bitcoin-ledger-recoveryx.org","tld":"org"},"title":"Ledger Bitcoin Recovery | Emergency Wallet Access","dom":{"size":25949,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (481)","md5":"e3c85f7e3773ab74f1e022a7d0c75a30","sha1":"15cbe7f4e4926f8660396db366e06aae4450e8a6","sha256":"2820c7718f566f69ff7d76e1d23d7782340c4083426e529750fb5767934e09a0","sha512":"18d540147eff3061139a4c8a77b38e932ff3d19980f8486c8d7c0aa470af3cdced9cbe72b8f590f44c3dea0b77804c5774e3f410e4805c68e9c829c2c68f3761","ssdeep":"384:BvgnSgLh4XsY4x2/I17YAP0AfPaWYfspO77ogYiDuyjrev6U7LOEjfmEa:aSgyXmP0QPxYfsFgzdayu7m3","tlshash":"98c2b56175f5a11342c3419bb470a75d7eb5e083c3563117bd8e8aceaf868a0ce076af","dom_hash":"domhash91a71146ded7a4dc6272640b25ff165e","first_seen":"2026-03-29T15:42:39.505527Z","last_seen":"2026-03-29T15:44:30.918806Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bitcoin-ledger-recoveryx.org/","fqdn":"bitcoin-ledger-recoveryx.org","domain":"bitcoin-ledger-recoveryx.org","tld":"org"},"ip":{"addr":"172.67.176.203","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-03T15:44:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"bitcoin-ledger-recoveryx.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-22T22:20:05.651051Z","alert_count":0,"request_count":1,"received_data":4976,"sent_data":546,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-22T22:16:16.728956Z","alert_count":0,"request_count":3,"received_data":159533,"sent_data":1663,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bitcoin-ledger-recoveryx.org","ip":{"addr":"172.67.176.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-17","domain_rank":0,"first_seen":"2026-03-29T15:42:35.248102Z","last_seen":"2026-03-29T15:42:35.248102Z","alert_count":3,"request_count":3,"received_data":35634,"sent_data":1424,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bitcoin-ledger-recoveryx.org/","fqdn":"bitcoin-ledger-recoveryx.org","domain":"bitcoin-ledger-recoveryx.org","tld":"org"},"ip":{"addr":"172.67.176.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f89b1805bd0198512f97090790d61042","sha1":"12f11f292610a0b0ebf82f409d95b94cf2f7ede0","sha256":"8f6da90766a6bc891d6662268a8015d9393cc07c236e0dcafdf990d41a57f3e5","sha512":"2e93862cb858e7a52608247a56ac40901b7fe137cb2c2fdf6eabe2b6bf84b37d750c7cd028903e48edcf25b715fc9c499f09c4ebdb5c6c39e175ab9a08cf9491","ssdeep":"","tlshash":"8af0eb6af892757e08fb35eb05db46a4b120a443e042c8213c7ccb483f475002dbebe8","size":589,"data":"","first_seen":"2026-03-29T15:42:39.511711Z","last_seen":"2026-03-29T15:44:30.936132Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitcoin-ledger-recoveryx.org/","date":"2026-03-29T15:44:09.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bitcoin-ledger-recoveryx.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 28 Mar 2026 01:54:16 GMT\r\nexpires: Sun, 28 Mar 2027 01:54:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nage: 136193\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-08-19T11:50:29.45508Z","times_seen":29602,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":76,"dns":6,"connect":8,"send":0,"wait":16,"receive":3,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-ledger-recoveryx.org/","fqdn":"bitcoin-ledger-recoveryx.org","domain":"bitcoin-ledger-recoveryx.org","tld":"org"},"ip":{"addr":"172.67.176.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-29T15:44:08.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin-ledger-recoveryx.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 23:27:12 GMT","end":"Thu, 25 Jun 2026 23:27:11 GMT"},"fingerprint":{"sha1":"87:E8:A5:C5:CC:5A:29:8C:39:47:C7:32:0D:C6:82:00:99:9D:9B:B5","sha256":"AB:8D:E2:B3:3A:5A:E6:22:D6:50:AD:AA:5E:B4:4D:FD:37:FC:5E:54:76:EE:17:45:29:3C:1E:27:30:6C:6E:4D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bitcoin-ledger-recoveryx.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 15:44:09 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Feb 2026 10:42:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MHNoo7M1qcnPFsA2LBAdAudZNulTfcGl3r9nu3t%2FTD%2Bl2LsNL%2FXg22UHiR3luQ6NCOzIWYL0F4V0C50yle1ksdaAtkST4tbyNQwFA9pNzF6mkf3LVh9A4%2FwgH26vZep6WRFw0LxCYMdQdLAG7paG\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e3ffe879f5b0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26302,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (481), with CRLF line terminators","md5":"e116ec5c37e04634a6f903a8622660a3","sha1":"e43113dd7132283d66824230dacd90f9bcfd83a5","sha256":"9aba07c9284297fd35c8b8865d26b63e31f44745fd9c901631d4b01025db1e7b","sha512":"fad9e982f462137167073a6ee8363e7c36e8b1599b2d1470476892d8cd9da17c95d95feff1d6c2aba26a60647577f3b087f4b788f1b4f4df13c69fda60686c3d","ssdeep":"384:/f6LpzYYmB5C1mV0+r96D6sn4HhlFf8yk7Jo7TuDYgjbe9yUNLNfTHmXy:/f6BYY86D6s4H7Ff8C7K5KM4pmi","tlshash":"cec2836175c0b51342f3419ab861a659fe74d083c3563117bc9f8a8fafb6860ce075af","first_seen":"2026-03-29T15:42:39.507776Z","last_seen":"2026-03-29T15:44:30.932185Z","times_seen":2,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":10,"dns":1,"connect":1,"send":0,"wait":197,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"bitcoin-ledger-recoveryx.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-ledger-recoveryx.org/css/main.css","fqdn":"bitcoin-ledger-recoveryx.org","domain":"bitcoin-ledger-recoveryx.org","tld":"org"},"ip":{"addr":"172.67.176.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitcoin-ledger-recoveryx.org/","date":"2026-03-29T15:44:09.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin-ledger-recoveryx.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 23:27:12 GMT","end":"Thu, 25 Jun 2026 23:27:11 GMT"},"fingerprint":{"sha1":"87:E8:A5:C5:CC:5A:29:8C:39:47:C7:32:0D:C6:82:00:99:9D:9B:B5","sha256":"AB:8D:E2:B3:3A:5A:E6:22:D6:50:AD:AA:5E:B4:4D:FD:37:FC:5E:54:76:EE:17:45:29:3C:1E:27:30:6C:6E:4D"}}},"request":{"raw":"GET /css/main.css HTTP/1.1\r\nHost: bitcoin-ledger-recoveryx.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin-ledger-recoveryx.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 15:44:09 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SQGOBla02X4BzSf7JLv%2BursXwlxAOgLqgFKiPe84Pq2I%2BYZnBKOyGC5hVT9wMEVedqGjmdytgmaL5qXrok%2F98x1FF8CRgS%2BlsNIGnM4Daru6R0CMJ4SOLKBdHliNqN3fYG2XAivNbHehgfYAAmcR\"}]}\r\nlast-modified: Sat, 21 Feb 2026 09:56:52 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 118\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69998164-1bdc\"\r\ncf-ray: 9e3ffe89ccae56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7132,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"2e4002050e59a24d513061e9e2cf74a4","sha1":"f89127412bae5843f69e30eba2a1e9e4d0847957","sha256":"826a37f57094fca1a6260a1178b757a16d95f2936da076dd870a078a77fecb17","sha512":"f627ec59d48d810411e21ea1cc3f5f7ba13999a8f4486c96c8cfecad85f2ac9cec63bf11a5547d6f77496dff53efb40a967b0109cd9df510ca41eb07abbc3ce4","ssdeep":"96:/HlLX50lh0Pn+H/5+elN6Wwp0uDGiWKN7fTcAFwoMNgyxcyfFKEqMCx6Dz1M2RY7:PY0/+R+K3Dsl5MjDFeG1M2Rk5","tlshash":"50e12f8c5715b0a59e779ba47b66cb5ef7d19020890613bdbff61048bac83b450e1f8c","first_seen":"2026-03-29T15:42:39.509797Z","last_seen":"2026-03-29T15:44:30.932957Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"bitcoin-ledger-recoveryx.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitcoin-ledger-recoveryx.org/","date":"2026-03-29T15:44:09.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bitcoin-ledger-recoveryx.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 62460\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 28 Mar 2026 02:00:56 GMT\r\nexpires: Sun, 28 Mar 2027 02:00:56 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:30:17 GMT\r\ncontent-type: font/woff2\r\nage: 135793\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62460,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62460, version 1.0","md5":"4c04ee82dc1deb4f32b244195d258e9b","sha1":"9bd2bc9c6f54075acd20589f87c17a73e3ab07b3","sha256":"ab72fd10c9ac5633c1f9ae4267864b674596062e023458e02973080bd1098904","sha512":"43bd417c75382fbcad7a44c73db7ec8e883bb505b63215ec67488eb205b61acd94031d5740bdf70cf413fcb126ac6a567b4c71831eeb063e5643fa0adc704895","ssdeep":"1536:Hjv9lkTtdw0aS3yPvWdfDSFdW6KK8zPJ86DQMBXQX:Hz9ceS3y2FDSFdRKNzPJj5gX","tlshash":"8753028264d3489c8c8b69d354847f1c707ef88fc1b88995a8e33ca14d4b1e6e85ad7f","first_seen":"2025-09-11T19:26:36.805532Z","last_seen":"2026-08-19T11:51:06.027168Z","times_seen":24764,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":138,"dns":0,"connect":21,"send":0,"wait":9,"receive":4,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitcoin-ledger-recoveryx.org/","date":"2026-03-29T15:44:09.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bitcoin-ledger-recoveryx.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 62460\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 28 Mar 2026 02:00:56 GMT\r\nexpires: Sun, 28 Mar 2027 02:00:56 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:30:17 GMT\r\ncontent-type: font/woff2\r\nage: 135793\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62460,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62460, version 1.0","md5":"4c04ee82dc1deb4f32b244195d258e9b","sha1":"9bd2bc9c6f54075acd20589f87c17a73e3ab07b3","sha256":"ab72fd10c9ac5633c1f9ae4267864b674596062e023458e02973080bd1098904","sha512":"43bd417c75382fbcad7a44c73db7ec8e883bb505b63215ec67488eb205b61acd94031d5740bdf70cf413fcb126ac6a567b4c71831eeb063e5643fa0adc704895","ssdeep":"1536:Hjv9lkTtdw0aS3yPvWdfDSFdW6KK8zPJ86DQMBXQX:Hz9ceS3y2FDSFdRKNzPJj5gX","tlshash":"8753028264d3489c8c8b69d354847f1c707ef88fc1b88995a8e33ca14d4b1e6e85ad7f","first_seen":"2025-09-11T19:26:36.805532Z","last_seen":"2026-08-19T11:51:06.027168Z","times_seen":24764,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":61,"dns":1,"connect":7,"send":0,"wait":9,"receive":13,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-ledger-recoveryx.org/images/favicon.png","fqdn":"bitcoin-ledger-recoveryx.org","domain":"bitcoin-ledger-recoveryx.org","tld":"org"},"ip":{"addr":"172.67.176.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitcoin-ledger-recoveryx.org/","date":"2026-03-29T15:44:09.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin-ledger-recoveryx.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 23:27:12 GMT","end":"Thu, 25 Jun 2026 23:27:11 GMT"},"fingerprint":{"sha1":"87:E8:A5:C5:CC:5A:29:8C:39:47:C7:32:0D:C6:82:00:99:9D:9B:B5","sha256":"AB:8D:E2:B3:3A:5A:E6:22:D6:50:AD:AA:5E:B4:4D:FD:37:FC:5E:54:76:EE:17:45:29:3C:1E:27:30:6C:6E:4D"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: bitcoin-ledger-recoveryx.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin-ledger-recoveryx.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 15:44:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 138\r\nlast-modified: Wed, 10 Dec 2025 19:52:38 GMT\r\npriority: u=6,i=?0\r\netag: \"6939cf86-8a\"\r\naccept-ranges: bytes\r\nage: 118\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dnHOX87Xk9LELlg6QNJqS4u8Kknxp%2BpUvbY5CQs8JF1GEJAww9mnBVLQu0ZMfdwBpLmb38I10Jt3%2BbiiE1T8I26%2BvXFrmVMWaBht0ksuBFtctnShFGjldTTyn57eCWhLA8XOMJop4T%2FKPnvuVC5T\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3ffe8cbccd56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"072fc284b66358792c16a5f6d9eb5d5f","sha1":"1291835625b510f1b91e462718b87cb91021460b","sha256":"4b73011a43bb1b67affd1572ef04a7c39b2fd2d0cfe7c222f8e729354c7f8d97","sha512":"cba45f05dffdfe9bd983831fbd0d6a88d41b9c0a0d243ae95fa7924e2382f81864b714f0b1525b29f9dc20d6e5a93ac0d02205bc52c0ce953569ab543c80a6fb","ssdeep":"","tlshash":"cbc02bc026042c32c65417334d22d493fc30c5244e7202c3348180503c2540ce068f02","first_seen":"2026-01-12T14:07:20.228502Z","last_seen":"2026-07-07T20:11:55.758228Z","times_seen":102,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"bitcoin-ledger-recoveryx.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Sans:ital,opsz,wght@0,9..40,400;0,9..40,600;1,9..40,400\u0026family=Outfit:wght@600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitcoin-ledger-recoveryx.org/","date":"2026-03-29T15:44:09.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"GET /css2?family=DM+Sans:ital,opsz,wght@0,9..40,400;0,9..40,600;1,9..40,400\u0026family=Outfit:wght@600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin-ledger-recoveryx.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 29 Mar 2026 15:44:09 GMT\r\ndate: Sun, 29 Mar 2026 15:44:09 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4290,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a149f0f10de357d933450e150e3c2994","sha1":"e9c2f426380e32153ce1ac0338f61980d125d6f2","sha256":"6ac36cda9228e643920660cc6d0b060a2f0c1a8f4fcaaef30525b296e2ef16f6","sha512":"563dc6bbd46f1d9e4f4cbaed467bb50496dd15b54c327bce928d7cada23fb064c4bb7dbd192c087d3b8acfaee29835765cae02e947937e355b4d86c77cc633ae","ssdeep":"96:jYgEaJJc+ufYgEa/NkOEaepJc+ufOEawNkOxMaepJc+ufOxMawNNOxMaRJc+uwOE:MOpVOpcDyclxhwEhXV","tlshash":"4e91f091046ba114db971dc122ce7e32ef1f629064449934affe1888fcabd6e5362b4d","first_seen":"2026-03-29T15:42:39.508758Z","last_seen":"2026-03-29T15:44:30.935125Z","times_seen":2,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":63,"dns":1,"connect":7,"send":0,"wait":21,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}