{"report_id":"a175cca0-768d-4a20-8e97-c53d520743d1","version":6,"status":"done","tags":[],"date":"2026-03-28T01:13:35Z","url":{"schema":"https","addr":"ledger-recovery.support/","fqdn":"ledger-recovery.support","domain":"ledger-recovery.support","tld":"support"},"ip":{"addr":"34.111.179.208","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"ledger-recovery.support/","fqdn":"ledger-recovery.support","domain":"ledger-recovery.support","tld":"support"},"title":"Secure Wallet Management","dom":{"size":9550,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8608)","md5":"4caabb0ee5aed64321e6c6bed1883426","sha1":"8964b7c510961818b8811ff55d0ee9043b0a81cb","sha256":"76dd088c9364cb3bba683ec3f6f1d03061d6e0ac7c776f22acd52f4ec3f263d9","sha512":"8da407e4340fe451515962e70df1d9590d9806aa1c0228b984cd3515258c5c44568a0b719eee5078a1d4a7062bddfd58b793c5925e5815d0f840f977c875398e","ssdeep":"192:amJhA7ulDFLEUIE7NidGDsfwQsb8pq8hfX3a2mq7aGYyFj:1Ja6lDFLEwBdHohPnhBj","tlshash":"1612c6217315597e03874ae9f1d2bf796169c349c71f888cb3b405fa6fc2c9c99523a8","dom_hash":"domhash11d4d35fa351b79ecacacced3b2d2c49","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"ledger-recovery.support/","fqdn":"ledger-recovery.support","domain":"ledger-recovery.support","tld":"support"},"ip":{"addr":"34.111.179.208","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-02T01:13:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"ledger-recovery.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-28","alert":"Phishing Block","trigger":"ledger-recovery.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ledger-recovery.support","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-28T00:30:55.991135Z","last_seen":"2026-03-28T00:30:55.991135Z","alert_count":26,"request_count":13,"received_data":919768,"sent_data":9137,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-22T22:16:16.728956Z","alert_count":0,"request_count":3,"received_data":84207,"sent_data":1716,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-22T22:20:05.651051Z","alert_count":0,"request_count":1,"received_data":15882,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ledger-recovery.support/assets/index-BbrPHKQK.js","fqdn":"ledger-recovery.support","domain":"ledger-recovery.support","tld":"support"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9944dcb3043aa8f131f750a89f7c64f","sha1":"1d7a53b839c1e309dac4b20eb77d44a4fe22d3d7","sha256":"cc3bffcc68a527693ce086c2bf164dfc6ac325c7dbb7ae29ec06d8667c164c3f","sha512":"32d4a8166171e92d2c082b524786b1669806589b4b55f0b495ac7777f9bc11fb3188d263ae3480d150302fa8cac6a25295e5e14ce7a6b22106e6249355466869","ssdeep":"12288:b4+oYNSN36R8QYyM4fAkIsFnFd2IaORhkN:E+oYNSN363AgnFd2f","tlshash":"9fa46cd87199b5365be345e540af0206723a2912700d84a4f22cedef3b7548a61bbffd","size":477673,"data":"","first_seen":"2026-03-28T00:31:00.574787Z","last_seen":"2026-03-28T01:13:36.820706Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ledger-recovery.support/assets/stax_3x_1767896921664-C0MpzPvG.webp","fqdn":"ledger-recovery.support","domain":"ledger-recovery.support","tld":"support"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-recovery.support/","date":"2026-03-28T01:13:14.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-recovery.support","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 00:24:10 GMT","end":"Wed, 24 Jun 2026 00:24:09 GMT"},"fingerprint":{"sha1":"EC:7D:F5:67:34:73:E4:6A:74:0E:B3:11:EB:A7:E2:BA:BB:A5:BF:D5","sha256":"3C:E8:63:64:B5:DF:C7:15:7D:D6:B1:4E:E6:D0:5E:A7:28:07:93:DE:96:61:38:A5:C3:97:DE:1B:33:B7:B8:8D"}}},"request":{"raw":"GET /assets/stax_3x_1767896921664-C0MpzPvG.webp HTTP/1.1\r\nHost: ledger-recovery.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-recovery.support/\r\nCookie: GAESA=CpwBMDA4YzE1ZmYwOGI3NWZkZTc3NzFmZTJiZjE4MjYyNDZmMWFkOTZlMzFkODY5YjEyNDk0NDQ1N2VhNGVjMTJiYmYwMzI2NTdkNTBjYzEwMzk3ODBkYWU1MTAxNTA2YWM4OWZiMThkZTY3NDIxMDM3NDBiYjVhOGU5ZWVhYTdhZmNjMzQ0NDhlNzQxMTc0NzQ2ZTJiNTM4Y2M0YWY3EMG0gpDTMw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T14:17:53.510878Z","times_seen":17214514,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"ledger-recovery.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-28","alert":"Phishing Block","trigger":"ledger-recovery.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-recovery.support/assets/ledger_iphone_side_image_1767896677363-123cZENL.webp","fqdn":"ledger-recovery.support","domain":"ledger-recovery.support","tld":"support"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-recovery.support/","date":"2026-03-28T01:13:14.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-recovery.support","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 00:24:10 GMT","end":"Wed, 24 Jun 2026 00:24:09 GMT"},"fingerprint":{"sha1":"EC:7D:F5:67:34:73:E4:6A:74:0E:B3:11:EB:A7:E2:BA:BB:A5:BF:D5","sha256":"3C:E8:63:64:B5:DF:C7:15:7D:D6:B1:4E:E6:D0:5E:A7:28:07:93:DE:96:61:38:A5:C3:97:DE:1B:33:B7:B8:8D"}}},"request":{"raw":"GET /assets/ledger_iphone_side_image_1767896677363-123cZENL.webp HTTP/1.1\r\nHost: ledger-recovery.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-recovery.support/\r\nCookie: GAESA=CpwBMDA4YzE1ZmYwOGI3NWZkZTc3NzFmZTJiZjE4MjYyNDZmMWFkOTZlMzFkODY5YjEyNDk0NDQ1N2VhNGVjMTJiYmYwMzI2NTdkNTBjYzEwMzk3ODBkYWU1MTAxNTA2YWM4OWZiMThkZTY3NDIxMDM3NDBiYjVhOGU5ZWVhYTdhZmNjMzQ0NDhlNzQxMTc0NzQ2ZTJiNTM4Y2M0YWY3EMG0gpDTMw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 43192\r\ncontent-type: image/webp\r\ndate: Sat, 28 Mar 2026 01:13:14 GMT\r\netag: W/\"a8b8-19ba06423e0\"\r\nlast-modified: Fri, 09 Jan 2026 01:34:36 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 30b7fde3249da0552b1e9a8902df9dde\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43192,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"604e216ee99adb4afdf12d3d61be39ed","sha1":"e2ccd64088c8fc099267123fbdeefc1554fd64a0","sha256":"29cb1cfe1725c422c2c4b9130dd02e384ea0c4a7cfcb49975604df497c7d72c1","sha512":"a2f55ea6599111e1e9f1eb9085c6c3292652a82435caa775fbde08a9d71c18de6992c3bdf8a9d6e46681c67174d6dd0f5b36e7b5cd08baddde3c331793eff568","ssdeep":"768:OnTGDLESIwrN7x+xhW0pJ3YEXlPpF/qwzPvO3uwf/0x2FNs+xH:pDLE8JasiJIEtpdQP/0mxH","tlshash":"561302a4794768a5d6173a7631de0d07004eb2527b47cfaf761fb384476e6f200caa07","first_seen":"2025-11-01T07:55:41.904534Z","last_seen":"2026-06-09T09:58:37.869271Z","times_seen":49,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-28","alert":"Phishing Block","trigger":"ledger-recovery.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"ledger-recovery.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-recovery.support/favicon.png","fqdn":"ledger-recovery.support","domain":"ledger-recovery.support","tld":"support"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-recovery.support/","date":"2026-03-28T01:13:15.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-recovery.support","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 00:24:10 GMT","end":"Wed, 24 Jun 2026 00:24:09 GMT"},"fingerprint":{"sha1":"EC:7D:F5:67:34:73:E4:6A:74:0E:B3:11:EB:A7:E2:BA:BB:A5:BF:D5","sha256":"3C:E8:63:64:B5:DF:C7:15:7D:D6:B1:4E:E6:D0:5E:A7:28:07:93:DE:96:61:38:A5:C3:97:DE:1B:33:B7:B8:8D"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: ledger-recovery.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-recovery.support/\r\nCookie: GAESA=CpwBMDA4YzE1ZmYwOGI3NWZkZTc3NzFmZTJiZjE4MjYyNDZmMWFkOTZlMzFkODY5YjEyNDk0NDQ1N2VhNGVjMTJiYmYwMzI2NTdkNTBjYzEwMzk3ODBkYWU1MTAxNTA2YWM4OWZiMThkZTY3NDIxMDM3NDBiYjVhOGU5ZWVhYTdhZmNjMzQ0NDhlNzQxMTc0NzQ2ZTJiNTM4Y2M0YWY3EMG0gpDTMw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 2372\r\ncontent-type: image/png\r\ndate: Sat, 28 Mar 2026 01:13:15 GMT\r\netag: W/\"944-19ba0641ff8\"\r\nlast-modified: Fri, 09 Jan 2026 01:34:35 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: ac108b3832c0661d2b1e9a8902df9e0c\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":2372,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"d2cc487e1baee412d24282cd76326b67","sha1":"42244b4719d17000223f59a778152d5ea374bbd2","sha256":"57a9d250a679e8276c934bb131204745f7fd91169f6df80f4f9f10ae4cb67ae2","sha512":"6d9bc4b09ae468515ac35e35e9da83106685ce18c47d32cd279f781b0f3d7693af89d86032ae533f8a520103a3df1b0e6ec58c77b53ece1787d40fe618954d0a","ssdeep":"","tlshash":"3441f053780cd08ba8482831a89e4171a4594d90c8f2e15ff7858ce61fed36ef5328f3","first_seen":"2023-05-10T22:14:09Z","last_seen":"2026-05-03T14:26:27.903216Z","times_seen":199,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-28","alert":"Phishing Block","trigger":"ledger-recovery.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"ledger-recovery.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-recovery.support/assets/recovery_solutions_desktop_1767897054608-nqpHCdf9.png","fqdn":"ledger-recovery.support","domain":"ledger-recovery.support","tld":"support"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-recovery.support/","date":"2026-03-28T01:13:14.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-recovery.support","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 00:24:10 GMT","end":"Wed, 24 Jun 2026 00:24:09 GMT"},"fingerprint":{"sha1":"EC:7D:F5:67:34:73:E4:6A:74:0E:B3:11:EB:A7:E2:BA:BB:A5:BF:D5","sha256":"3C:E8:63:64:B5:DF:C7:15:7D:D6:B1:4E:E6:D0:5E:A7:28:07:93:DE:96:61:38:A5:C3:97:DE:1B:33:B7:B8:8D"}}},"request":{"raw":"GET /assets/recovery_solutions_desktop_1767897054608-nqpHCdf9.png HTTP/1.1\r\nHost: ledger-recovery.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-recovery.support/\r\nCookie: GAESA=CpwBMDA4YzE1ZmYwOGI3NWZkZTc3NzFmZTJiZjE4MjYyNDZmMWFkOTZlMzFkODY5YjEyNDk0NDQ1N2VhNGVjMTJiYmYwMzI2NTdkNTBjYzEwMzk3ODBkYWU1MTAxNTA2YWM4OWZiMThkZTY3NDIxMDM3NDBiYjVhOGU5ZWVhYTdhZmNjMzQ0NDhlNzQxMTc0NzQ2ZTJiNTM4Y2M0YWY3EMG0gpDTMw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T14:17:53.510878Z","times_seen":17214514,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-28","alert":"Phishing Block","trigger":"ledger-recovery.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"ledger-recovery.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-recovery.support/assets/ledger_iphone_side_image_1767896677363-123cZENL.webp","fqdn":"ledger-recovery.support","domain":"ledger-recovery.support","tld":"support"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-recovery.support/","date":"2026-03-28T01:13:14.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-recovery.support","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 00:24:10 GMT","end":"Wed, 24 Jun 2026 00:24:09 GMT"},"fingerprint":{"sha1":"EC:7D:F5:67:34:73:E4:6A:74:0E:B3:11:EB:A7:E2:BA:BB:A5:BF:D5","sha256":"3C:E8:63:64:B5:DF:C7:15:7D:D6:B1:4E:E6:D0:5E:A7:28:07:93:DE:96:61:38:A5:C3:97:DE:1B:33:B7:B8:8D"}}},"request":{"raw":"GET /assets/ledger_iphone_side_image_1767896677363-123cZENL.webp HTTP/1.1\r\nHost: ledger-recovery.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-recovery.support/\r\nCookie: GAESA=CpwBMDA4YzE1ZmYwOGI3NWZkZTc3NzFmZTJiZjE4MjYyNDZmMWFkOTZlMzFkODY5YjEyNDk0NDQ1N2VhNGVjMTJiYmYwMzI2NTdkNTBjYzEwMzk3ODBkYWU1MTAxNTA2YWM4OWZiMThkZTY3NDIxMDM3NDBiYjVhOGU5ZWVhYTdhZmNjMzQ0NDhlNzQxMTc0NzQ2ZTJiNTM4Y2M0YWY3EMG0gpDTMw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T14:17:53.510878Z","times_seen":17214514,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"ledger-recovery.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-28","alert":"Phishing Block","trigger":"ledger-recovery.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-recovery.support/assets/hero_visual_1767893410002-H_ICTFVW.webp","fqdn":"ledger-recovery.support","domain":"ledger-recovery.support","tld":"support"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-recovery.support/","date":"2026-03-28T01:13:14.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-recovery.support","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 00:24:10 GMT","end":"Wed, 24 Jun 2026 00:24:09 GMT"},"fingerprint":{"sha1":"EC:7D:F5:67:34:73:E4:6A:74:0E:B3:11:EB:A7:E2:BA:BB:A5:BF:D5","sha256":"3C:E8:63:64:B5:DF:C7:15:7D:D6:B1:4E:E6:D0:5E:A7:28:07:93:DE:96:61:38:A5:C3:97:DE:1B:33:B7:B8:8D"}}},"request":{"raw":"GET /assets/hero_visual_1767893410002-H_ICTFVW.webp HTTP/1.1\r\nHost: ledger-recovery.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-recovery.support/\r\nCookie: GAESA=CpwBMDA4YzE1ZmYwOGI3NWZkZTc3NzFmZTJiZjE4MjYyNDZmMWFkOTZlMzFkODY5YjEyNDk0NDQ1N2VhNGVjMTJiYmYwMzI2NTdkNTBjYzEwMzk3ODBkYWU1MTAxNTA2YWM4OWZiMThkZTY3NDIxMDM3NDBiYjVhOGU5ZWVhYTdhZmNjMzQ0NDhlNzQxMTc0NzQ2ZTJiNTM4Y2M0YWY3EMG0gpDTMw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 108418\r\ncontent-type: image/webp\r\ndate: Sat, 28 Mar 2026 01:13:14 GMT\r\netag: W/\"1a782-19ba06423e0\"\r\nlast-modified: Fri, 09 Jan 2026 01:34:36 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 623d94111f2803e32b1e9a8902df9d03\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":108418,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e92b0c130bef0593418fe4e2a3f5a6ce","sha1":"101eb5f9ef88dfa67241419df83ceb4939e9feab","sha256":"89c11103f9d21472ffd0089226bc838b24c3602f411aba67624275df5bdad519","sha512":"84a34e27a043925d1d0dde64df29e3f8c6c110fdcc29b7fe2ae925fd4ed5838098066bc654318dadfc7d27ece26461fe9e9a3b79affce8d0891fe043c59f88c9","ssdeep":"3072:CtO2of4mAVuMOh4YE1oYCsZwJ314WhxDLTuy0De:CrzmagVmoJsZHW3Lz0q","tlshash":"fdb3123d97582390fd0d79bdc6df99277c233b9b89b77021c0744b4a450d13a32e499a","first_seen":"2026-01-03T20:43:02.943053Z","last_seen":"2026-05-30T14:27:12.583272Z","times_seen":30,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":204,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-28","alert":"Phishing Block","trigger":"ledger-recovery.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"ledger-recovery.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledger-recovery.support/","date":"2026-03-28T01:13:14.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ledger-recovery.support\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 23:11:28 GMT\r\nexpires: Sat, 27 Mar 2027 23:11:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 7306\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-07-13T14:22:19.636044Z","times_seen":16745,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":164,"dns":1,"connect":21,"send":0,"wait":8,"receive":2,"ssl":141},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledger-recovery.support/assets/index-CAkot297.css","fqdn":"ledger-recovery.support","domain":"ledger-recovery.support","tld":"support"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledger-recovery.support/","date":"2026-03-28T01:13:13.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-recovery.support","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 00:24:10 GMT","end":"Wed, 24 Jun 2026 00:24:09 GMT"},"fingerprint":{"sha1":"EC:7D:F5:67:34:73:E4:6A:74:0E:B3:11:EB:A7:E2:BA:BB:A5:BF:D5","sha256":"3C:E8:63:64:B5:DF:C7:15:7D:D6:B1:4E:E6:D0:5E:A7:28:07:93:DE:96:61:38:A5:C3:97:DE:1B:33:B7:B8:8D"}}},"request":{"raw":"GET /assets/index-CAkot297.css HTTP/1.1\r\nHost: ledger-recovery.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-recovery.support/\r\nCookie: GAESA=CpwBMDA4YzE1ZmYwOGI3NWZkZTc3NzFmZTJiZjE4MjYyNDZmMWFkOTZlMzFkODY5YjEyNDk0NDQ1N2VhNGVjMTJiYmYwMzI2NTdkNTBjYzEwMzk3ODBkYWU1MTAxNTA2YWM4OWZiMThkZTY3NDIxMDM3NDBiYjVhOGU5ZWVhYTdhZmNjMzQ0NDhlNzQxMTc0NzQ2ZTJiNTM4Y2M0YWY3EMG0gpDTMw\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 105221\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Sat, 28 Mar 2026 01:13:13 GMT\r\netag: W/\"19b05-19ba06423e0\"\r\nlast-modified: Fri, 09 Jan 2026 01:34:36 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: cfdfbe492fb2b1862b1e9a8902df9b83\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":105221,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e8f07bc43da392ff82fe5acab04b574a","sha1":"6dfe3cb1292f8b8276d33ceb4f1712c8b0d556c6","sha256":"64f045bc12c41fcbc9e89841c8e1ac4063aeeec9fa87baa5afb05291096f1e98","sha512":"e44e32dfde11fb3f656bbf40a3296a5be0e8e20d8e3775a2ec37951e3a5e1ac02be5d19fe60c87a6d232def4909535120063f38cea85c7d2d82f9ea64ba8996d","ssdeep":"3072:86AQVh+3E2nA8Zoma9RRW9ODLxoiySKcQi/MBkMno+WxFAFbyukjp5D45YC0PkIk:86AQVh+3E2nA8ZomcRRWUDLxoiySKcQr","tlshash":"4aa3b4a0b229d83fbc7764f9538cf85d910a70c1ed2946e8fe16611286c7bf52e77608","first_seen":"2026-03-28T00:31:00.588501Z","last_seen":"2026-03-28T01:13:36.818069Z","times_seen":2,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":210,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-28","alert":"Phishing Block","trigger":"ledger-recovery.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"ledger-recovery.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-recovery.support/assets/index-BbrPHKQK.js","fqdn":"ledger-recovery.support","domain":"ledger-recovery.support","tld":"support"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledger-recovery.support/","date":"2026-03-28T01:13:13.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-recovery.support","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 00:24:10 GMT","end":"Wed, 24 Jun 2026 00:24:09 GMT"},"fingerprint":{"sha1":"EC:7D:F5:67:34:73:E4:6A:74:0E:B3:11:EB:A7:E2:BA:BB:A5:BF:D5","sha256":"3C:E8:63:64:B5:DF:C7:15:7D:D6:B1:4E:E6:D0:5E:A7:28:07:93:DE:96:61:38:A5:C3:97:DE:1B:33:B7:B8:8D"}}},"request":{"raw":"GET /assets/index-BbrPHKQK.js HTTP/1.1\r\nHost: ledger-recovery.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-recovery.support/\r\nCookie: GAESA=CpwBMDA4YzE1ZmYwOGI3NWZkZTc3NzFmZTJiZjE4MjYyNDZmMWFkOTZlMzFkODY5YjEyNDk0NDQ1N2VhNGVjMTJiYmYwMzI2NTdkNTBjYzEwMzk3ODBkYWU1MTAxNTA2YWM4OWZiMThkZTY3NDIxMDM3NDBiYjVhOGU5ZWVhYTdhZmNjMzQ0NDhlNzQxMTc0NzQ2ZTJiNTM4Y2M0YWY3EMG0gpDTMw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 477673\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sat, 28 Mar 2026 01:13:13 GMT\r\netag: W/\"749e9-19ba06423e0\"\r\nlast-modified: Fri, 09 Jan 2026 01:34:36 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: b5162af9d2b728462b1e9a8902df9b3a\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":477673,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (41148)","md5":"a9944dcb3043aa8f131f750a89f7c64f","sha1":"1d7a53b839c1e309dac4b20eb77d44a4fe22d3d7","sha256":"cc3bffcc68a527693ce086c2bf164dfc6ac325c7dbb7ae29ec06d8667c164c3f","sha512":"32d4a8166171e92d2c082b524786b1669806589b4b55f0b495ac7777f9bc11fb3188d263ae3480d150302fa8cac6a25295e5e14ce7a6b22106e6249355466869","ssdeep":"12288:b4+oYNSN36R8QYyM4fAkIsFnFd2IaORhkN:E+oYNSN363AgnFd2f","tlshash":"9fa46cd87199b5365be345e540af0206723a2912700d84a4f22cedef3b7548a61bbffd","first_seen":"2026-03-28T00:31:00.574787Z","last_seen":"2026-03-28T01:13:36.820706Z","times_seen":2,"resource_available":true,"data":null}},"time_used":708,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":505,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-28","alert":"Phishing Block","trigger":"ledger-recovery.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"ledger-recovery.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-recovery.support/assets/hero_visual_1767893410002-H_ICTFVW.webp","fqdn":"ledger-recovery.support","domain":"ledger-recovery.support","tld":"support"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-recovery.support/","date":"2026-03-28T01:13:14.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-recovery.support","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 00:24:10 GMT","end":"Wed, 24 Jun 2026 00:24:09 GMT"},"fingerprint":{"sha1":"EC:7D:F5:67:34:73:E4:6A:74:0E:B3:11:EB:A7:E2:BA:BB:A5:BF:D5","sha256":"3C:E8:63:64:B5:DF:C7:15:7D:D6:B1:4E:E6:D0:5E:A7:28:07:93:DE:96:61:38:A5:C3:97:DE:1B:33:B7:B8:8D"}}},"request":{"raw":"GET /assets/hero_visual_1767893410002-H_ICTFVW.webp HTTP/1.1\r\nHost: ledger-recovery.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-recovery.support/\r\nCookie: GAESA=CpwBMDA4YzE1ZmYwOGI3NWZkZTc3NzFmZTJiZjE4MjYyNDZmMWFkOTZlMzFkODY5YjEyNDk0NDQ1N2VhNGVjMTJiYmYwMzI2NTdkNTBjYzEwMzk3ODBkYWU1MTAxNTA2YWM4OWZiMThkZTY3NDIxMDM3NDBiYjVhOGU5ZWVhYTdhZmNjMzQ0NDhlNzQxMTc0NzQ2ZTJiNTM4Y2M0YWY3EMG0gpDTMw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T14:17:53.510878Z","times_seen":17214514,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"ledger-recovery.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-28","alert":"Phishing Block","trigger":"ledger-recovery.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-recovery.support/assets/recovery_solutions_desktop_1767897054608-nqpHCdf9.png","fqdn":"ledger-recovery.support","domain":"ledger-recovery.support","tld":"support"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-recovery.support/","date":"2026-03-28T01:13:14.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-recovery.support","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 00:24:10 GMT","end":"Wed, 24 Jun 2026 00:24:09 GMT"},"fingerprint":{"sha1":"EC:7D:F5:67:34:73:E4:6A:74:0E:B3:11:EB:A7:E2:BA:BB:A5:BF:D5","sha256":"3C:E8:63:64:B5:DF:C7:15:7D:D6:B1:4E:E6:D0:5E:A7:28:07:93:DE:96:61:38:A5:C3:97:DE:1B:33:B7:B8:8D"}}},"request":{"raw":"GET /assets/recovery_solutions_desktop_1767897054608-nqpHCdf9.png HTTP/1.1\r\nHost: ledger-recovery.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-recovery.support/\r\nCookie: GAESA=CpwBMDA4YzE1ZmYwOGI3NWZkZTc3NzFmZTJiZjE4MjYyNDZmMWFkOTZlMzFkODY5YjEyNDk0NDQ1N2VhNGVjMTJiYmYwMzI2NTdkNTBjYzEwMzk3ODBkYWU1MTAxNTA2YWM4OWZiMThkZTY3NDIxMDM3NDBiYjVhOGU5ZWVhYTdhZmNjMzQ0NDhlNzQxMTc0NzQ2ZTJiNTM4Y2M0YWY3EMG0gpDTMw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 75595\r\ncontent-type: image/png\r\ndate: Sat, 28 Mar 2026 01:13:14 GMT\r\netag: W/\"1274b-19ba06423e0\"\r\nlast-modified: Fri, 09 Jan 2026 01:34:36 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: e58d59016d773c2f2b1e9a8902df9d4c\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75595,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 504 x 480, 8-bit/color RGBA, non-interlaced","md5":"d529d2c208eb01d7c5cfa3da7fa19d06","sha1":"864976078e4e85739fc1c79d4d39679169c62d7e","sha256":"47732df91f6058577dcf4e69be80a029e6f3d030a75c6aa79bcaa6934f937b30","sha512":"65453a2ca799d308265aa5da76e210cab5881bef9ee2be9e5f7a3699ebe04b8a414b0d9c154c87c7eabab17c90be492fe0019a55eddbb0df5f67166469978fe8","ssdeep":"1536:9nLzfrfzLE3JX2WQ9cEVOWdaJQEBZE/EHDHDhHHzeCz5mUnBGmV6xW/wiq:5jrffEVQ9tCDmE7DhnSC1RnBGmUs/k","tlshash":"1e731219b14e90863c280e2171d5e29885fb1328f40eef73d84cfa7cae49b65861d6d7","first_seen":"2025-11-10T05:54:15.925054Z","last_seen":"2026-07-12T19:46:52.066325Z","times_seen":20,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"ledger-recovery.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-28","alert":"Phishing Block","trigger":"ledger-recovery.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-recovery.support/assets/stax_3x_1767896921664-C0MpzPvG.webp","fqdn":"ledger-recovery.support","domain":"ledger-recovery.support","tld":"support"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-recovery.support/","date":"2026-03-28T01:13:14.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-recovery.support","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 00:24:10 GMT","end":"Wed, 24 Jun 2026 00:24:09 GMT"},"fingerprint":{"sha1":"EC:7D:F5:67:34:73:E4:6A:74:0E:B3:11:EB:A7:E2:BA:BB:A5:BF:D5","sha256":"3C:E8:63:64:B5:DF:C7:15:7D:D6:B1:4E:E6:D0:5E:A7:28:07:93:DE:96:61:38:A5:C3:97:DE:1B:33:B7:B8:8D"}}},"request":{"raw":"GET /assets/stax_3x_1767896921664-C0MpzPvG.webp HTTP/1.1\r\nHost: ledger-recovery.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-recovery.support/\r\nCookie: GAESA=CpwBMDA4YzE1ZmYwOGI3NWZkZTc3NzFmZTJiZjE4MjYyNDZmMWFkOTZlMzFkODY5YjEyNDk0NDQ1N2VhNGVjMTJiYmYwMzI2NTdkNTBjYzEwMzk3ODBkYWU1MTAxNTA2YWM4OWZiMThkZTY3NDIxMDM3NDBiYjVhOGU5ZWVhYTdhZmNjMzQ0NDhlNzQxMTc0NzQ2ZTJiNTM4Y2M0YWY3EMG0gpDTMw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 88668\r\ncontent-type: image/webp\r\ndate: Sat, 28 Mar 2026 01:13:14 GMT\r\netag: W/\"15a5c-19ba06423e0\"\r\nlast-modified: Fri, 09 Jan 2026 01:34:36 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 1f5b7ff623967bac2b1e9a8902df9d95\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}],"data":{"size":88668,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9e3a688d1c239e7cd6592c2a2a57d6dc","sha1":"7e0dff11bdb451235bc680950e676df1f3579793","sha256":"4f5fa6a48ca99b5a9a776d3dc1381879f255745c8d8118a1caac2b5f257e9087","sha512":"8cab991484f4569842e377c4274407c6a74e775fffe040d86b67db49d137721f423661f5a018b6cfee85b90e82fcb3cc2f3e8da799ca5f6bc12fb131f79c5053","ssdeep":"1536:SFVTtSReWFJVRUO9UtwFyAY9EbvFnO1118GvI8zAkLUXEosi8D:AWfVRJS6FBCKvFnO11+2c8D","tlshash":"048301f664e16241d013a370992b6c25737850dfa9e37b2eac5706f1f80e4ac6db42db","first_seen":"2024-12-10T16:50:02.864008Z","last_seen":"2026-07-13T07:23:42.06561Z","times_seen":342,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":178,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-28","alert":"Phishing Block","trigger":"ledger-recovery.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"ledger-recovery.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-recovery.support/","fqdn":"ledger-recovery.support","domain":"ledger-recovery.support","tld":"support"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T01:13:13.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-recovery.support","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 00:24:10 GMT","end":"Wed, 24 Jun 2026 00:24:09 GMT"},"fingerprint":{"sha1":"EC:7D:F5:67:34:73:E4:6A:74:0E:B3:11:EB:A7:E2:BA:BB:A5:BF:D5","sha256":"3C:E8:63:64:B5:DF:C7:15:7D:D6:B1:4E:E6:D0:5E:A7:28:07:93:DE:96:61:38:A5:C3:97:DE:1B:33:B7:B8:8D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ledger-recovery.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: private, max-age=0\r\ncontent-length: 980\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 28 Mar 2026 01:13:13 GMT\r\netag: W/\"3d4-19ba06423e0\"\r\nexpires: Sat, 28 Mar 2026 01:13:13 GMT\r\nlast-modified: Fri, 09 Jan 2026 01:34:36 GMT\r\nserver: Google Frontend\r\nset-cookie: GAESA=CpwBMDA4YzE1ZmYwOGI3NWZkZTc3NzFmZTJiZjE4MjYyNDZmMWFkOTZlMzFkODY5YjEyNDk0NDQ1N2VhNGVjMTJiYmYwMzI2NTdkNTBjYzEwMzk3ODBkYWU1MTAxNTA2YWM4OWZiMThkZTY3NDIxMDM3NDBiYjVhOGU5ZWVhYTdhZmNjMzQ0NDhlNzQxMTc0NzQ2ZTJiNTM4Y2M0YWY3EMG0gpDTMw; expires=Mon, 27-Apr-2026 01:13:13 GMT; path=/\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 68463e81006b7eea8a1b9c2555b887b5;o=1\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":980,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"ac63c004c04c85790329dbaf992b7287","sha1":"7f9ea11322b4ddab39d2f13fa3ead669ee9374f6","sha256":"5b20740b6b8ad1b9fdd0d03df167a4625c20b5860eba9c5eab01c238448cc2a3","sha512":"74bb68574a1602ddff1561771c5f51c734a99a4de5ebdc5f8ed39daa641a29e12489757dd073aefea9698e79824613131df043f10dd26f59133895f62a55427e","ssdeep":"","tlshash":"28111056b294c8191320438628e0f468dd17874b8388a958b6b640fdcfd5bd6c7e75a9","first_seen":"2026-03-28T00:31:00.580815Z","last_seen":"2026-03-28T01:13:36.826851Z","times_seen":2,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":114,"dns":68,"connect":13,"send":0,"wait":216,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-28","alert":"Phishing Block","trigger":"ledger-recovery.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"ledger-recovery.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:wght@300;400;500;600;700;800\u0026family=JetBrains+Mono:wght@400;500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledger-recovery.support/","date":"2026-03-28T01:13:13.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"GET /css2?family=Plus+Jakarta+Sans:wght@300;400;500;600;700;800\u0026family=JetBrains+Mono:wght@400;500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-recovery.support/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 28 Mar 2026 01:13:13 GMT\r\ndate: Sat, 28 Mar 2026 01:13:13 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15196,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9e9094087bd06238d2e95816dd8254a7","sha1":"3cd44a1d11edfbb95efa929958361fb4af0eaa00","sha256":"942d735e50c450a7bb706e561485679130e2a421327bd57c8596931f2fae97e1","sha512":"1963c83303f3deb84c285a2104475cd56efdcbd4be6a188fd355067435ae9cb1c5f9dcc9518146839f5ae54dcb0f2c370185809e12f5db2a25af69d8ac96aeeb","ssdeep":"192:uG+7p3ZAXYjG9Up3qnXf/CYURzeCFJRSdCmaRBUCj3Ro7CcQRvSC5VRed:fOGC3fdrF/0","tlshash":"a162f1a0081f9540eb431cc663cf7e3aad9e61962045d4f99bfe1858dcaec3a2371b5d","first_seen":"2026-02-04T03:43:03.782519Z","last_seen":"2026-07-11T21:07:37.839381Z","times_seen":33,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":137,"dns":1,"connect":21,"send":0,"wait":34,"receive":0,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledger-recovery.support/assets/ledger_dmc__1767659758869-BVqiv87e.png","fqdn":"ledger-recovery.support","domain":"ledger-recovery.support","tld":"support"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-recovery.support/","date":"2026-03-28T01:13:14.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-recovery.support","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 00:24:10 GMT","end":"Wed, 24 Jun 2026 00:24:09 GMT"},"fingerprint":{"sha1":"EC:7D:F5:67:34:73:E4:6A:74:0E:B3:11:EB:A7:E2:BA:BB:A5:BF:D5","sha256":"3C:E8:63:64:B5:DF:C7:15:7D:D6:B1:4E:E6:D0:5E:A7:28:07:93:DE:96:61:38:A5:C3:97:DE:1B:33:B7:B8:8D"}}},"request":{"raw":"GET /assets/ledger_dmc__1767659758869-BVqiv87e.png HTTP/1.1\r\nHost: ledger-recovery.support\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-recovery.support/\r\nCookie: GAESA=CpwBMDA4YzE1ZmYwOGI3NWZkZTc3NzFmZTJiZjE4MjYyNDZmMWFkOTZlMzFkODY5YjEyNDk0NDQ1N2VhNGVjMTJiYmYwMzI2NTdkNTBjYzEwMzk3ODBkYWU1MTAxNTA2YWM4OWZiMThkZTY3NDIxMDM3NDBiYjVhOGU5ZWVhYTdhZmNjMzQ0NDhlNzQxMTc0NzQ2ZTJiNTM4Y2M0YWY3EMG0gpDTMw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 12957\r\ncontent-type: image/png\r\ndate: Sat, 28 Mar 2026 01:13:14 GMT\r\netag: W/\"329d-19ba06423e0\"\r\nlast-modified: Fri, 09 Jan 2026 01:34:36 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: fe27fa2c091eb0cb2b1e9a8902df9b96\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":12957,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 860 x 288, 8-bit/color RGBA, non-interlaced","md5":"30bf58e5ff957043b224e0a36a5764a8","sha1":"4c390920037d2f524fcb1043d41a5777f26319ae","sha256":"eb7ba5566701510b4824c19a4559123413e24b77700b9107626737013a107f88","sha512":"689ca73d50899a4e281c84c85806f94a2be6d280c10c8d45f65c8ca04cb0dbeebed16dd6cfcdcb84b46fe2c62593d0e814920da31c19212afe1544a1a7267573","ssdeep":"192:ES8hxk4Ju2UtiznE24aAeUZTNFJvDuwDejSqt9mOda7iV8dtUimUq2apAL8UrW:D8nP3UtiLE249tFJvsSqt9R+zyBHXUy","tlshash":"7c426b0d0eaa57b4c59a54b22136cf5f31ba675b7083ca20c3859b6cae6c363c656ec0","first_seen":"2026-03-28T00:31:00.57749Z","last_seen":"2026-03-28T01:13:36.830723Z","times_seen":2,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-28","alert":"Phishing Block","trigger":"ledger-recovery.support","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"ledger-recovery.support","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledger-recovery.support/","date":"2026-03-28T01:13:14.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ledger-recovery.support\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 23:11:28 GMT\r\nexpires: Sat, 27 Mar 2027 23:11:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 7306\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-07-13T14:22:19.636044Z","times_seen":16745,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":93,"dns":1,"connect":7,"send":0,"wait":8,"receive":12,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledger-recovery.support/","date":"2026-03-28T01:13:14.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ledger-recovery.support\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 23:11:28 GMT\r\nexpires: Sat, 27 Mar 2027 23:11:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 7306\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-07-13T14:22:19.636044Z","times_seen":16745,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":126,"dns":3,"connect":21,"send":0,"wait":8,"receive":3,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}