{"report_id":"a36fe642-d5a4-4bf1-b9a7-0549a55c6706","version":6,"status":"done","tags":[],"date":"2026-04-16T18:09:13Z","url":{"schema":"https","addr":"home-leger-live-lo-sso.pages.dev","fqdn":"home-leger-live-lo-sso.pages.dev","domain":"home-leger-live-lo-sso.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.29","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"home-leger-live-lo-sso.pages.dev/","fqdn":"home-leger-live-lo-sso.pages.dev","domain":"home-leger-live-lo-sso.pages.dev","tld":"pages.dev"},"title":"Ledger Live Login® | Starting Up Your Device - Ledger®","dom":{"size":6448,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (396)","md5":"f3681984c47d1d9fe7ddc8191d4497b6","sha1":"df683b230555246f50af6590ae7e6035cc8a7b2c","sha256":"f3bc2b915c7201e1739da4ee1b0634cefd27801220abb763cf089790aa393c8b","sha512":"4ed59b8450dc0f5d6ed4fa50a148c1bba3c13702bdb4b49970943386b6e644c5e2712c4ddf25eed46a27b2d424fbd2f88df07322c12608a87644ba4099b79902","ssdeep":"96:nMYTjRB5Oi2d2HsBFJHexv86wg3DgQMFGLP6YiRs8bq5FNGl999PJVDMYKcLc+ED:xTjRBRHssxk8gQM0mRbmFs9luVmii3I","tlshash":"56d1760f96e33165190301397a9b43dabb25d08fc24eeae63a7d115dbf805c988b76cd","dom_hash":"domhashb97e027b35a84a2e977ab5962ca9f089","first_seen":"2026-04-16T18:09:16.037692Z","last_seen":"2026-04-16T18:09:16.037692Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"home-leger-live-lo-sso.pages.dev","fqdn":"home-leger-live-lo-sso.pages.dev","domain":"home-leger-live-lo-sso.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.29","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-21T18:09:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"home-leger-live-lo-sso.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"home-leger-live-lo-sso.pages.dev","ip":{"addr":"172.66.45.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-04-16T18:09:13.977634Z","last_seen":"2026-04-16T18:09:13.977634Z","alert_count":2,"request_count":2,"received_data":14777,"sent_data":972,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"home-leger-live-lo-sso.pages.dev/","fqdn":"home-leger-live-lo-sso.pages.dev","domain":"home-leger-live-lo-sso.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-16T18:08:52.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"home-leger-live-lo-sso.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 11:08:43 GMT","end":"Tue, 23 Jun 2026 12:07:23 GMT"},"fingerprint":{"sha1":"45:D7:F8:76:26:AF:55:D4:7A:89:B7:AC:C1:42:A3:35:B9:A0:42:E0","sha256":"5A:99:3D:FD:4B:0D:05:A1:3E:09:6D:C2:48:2F:64:01:45:86:D7:73:FD:04:38:77:F6:C1:A1:52:36:00:C3:B4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: home-leger-live-lo-sso.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Apr 2026 18:08:52 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5irC2OmCitBc78%2BQUdb4K3KfGdl%2FaQvn4ZPAcEP58OJoFUdv9jIg%2F15sAlB1L5RvJOuVduRTw29Zd%2BP7Ilv1tB9DIpxReFRW8mO0ipmr%2Fz2N7zKhtcJno7U84fqkEbiI1%2BTmYfgtzTukFj3860s5LgXlsQ%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ed52349088f49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6642,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (396), with CRLF line terminators","md5":"7a409313918dbc9eed529be5c1c2fec3","sha1":"4636f6725709a86d84bd9474488175753537ea08","sha256":"a58f7c59aa4fa5a6340664f3f1294c8d074b13b10cc160674dbb8fa5a0fc1e89","sha512":"a0cc6d542d9e9ffe078465e20d202b7cc6f4ff93b3b7187c17836e454ff7625050b93f6b880edf72f90b8ee90ca94ee956614045846a8e5b0c41d42693f7a3c4","ssdeep":"96:T5c3tPBd2GsBBiiex5XtxI3pgQMMdLI6YVRsMbqXFN0v9WQbSVXMTic8cmEwE3g:TAUGs2xl6gQMqMRLYFE9gyun2t3g","tlshash":"dcd1640a92c235251933033dbb5743aafb25c09b834666e63a7e125f7fb0588857bdc8","first_seen":"2026-04-16T18:09:16.039659Z","last_seen":"2026-04-16T18:09:16.039659Z","times_seen":1,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":26,"dns":7,"connect":1,"send":0,"wait":235,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"home-leger-live-lo-sso.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"home-leger-live-lo-sso.pages.dev/favicon.ico","fqdn":"home-leger-live-lo-sso.pages.dev","domain":"home-leger-live-lo-sso.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://home-leger-live-lo-sso.pages.dev/","date":"2026-04-16T18:08:53.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"home-leger-live-lo-sso.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 11:08:43 GMT","end":"Tue, 23 Jun 2026 12:07:23 GMT"},"fingerprint":{"sha1":"45:D7:F8:76:26:AF:55:D4:7A:89:B7:AC:C1:42:A3:35:B9:A0:42:E0","sha256":"5A:99:3D:FD:4B:0D:05:A1:3E:09:6D:C2:48:2F:64:01:45:86:D7:73:FD:04:38:77:F6:C1:A1:52:36:00:C3:B4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: home-leger-live-lo-sso.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://home-leger-live-lo-sso.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 16 Apr 2026 18:08:53 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W%2FLXKwzVXjOnbEwiJHSkSOmkIdwwBomswsawlZDFn%2B0UNh3%2B8GdcLuAXYuOMg1WSVTyIvbFPhLRDlqAzSiffefW1jS4UUqx4Cg5qcK12JNKsHnchqSC9Qy3hgAhVrcyJoaLe78fjtdTSqU02o7IMU7ULmg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ed5234c498e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6642,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (396), with CRLF line terminators","md5":"7a409313918dbc9eed529be5c1c2fec3","sha1":"4636f6725709a86d84bd9474488175753537ea08","sha256":"a58f7c59aa4fa5a6340664f3f1294c8d074b13b10cc160674dbb8fa5a0fc1e89","sha512":"a0cc6d542d9e9ffe078465e20d202b7cc6f4ff93b3b7187c17836e454ff7625050b93f6b880edf72f90b8ee90ca94ee956614045846a8e5b0c41d42693f7a3c4","ssdeep":"96:T5c3tPBd2GsBBiiex5XtxI3pgQMMdLI6YVRsMbqXFN0v9WQbSVXMTic8cmEwE3g:TAUGs2xl6gQMqMRLYFE9gyun2t3g","tlshash":"dcd1640a92c235251933033dbb5743aafb25c09b834666e63a7e125f7fb0588857bdc8","first_seen":"2026-04-16T18:09:16.039659Z","last_seen":"2026-04-16T18:09:16.039659Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"home-leger-live-lo-sso.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}