{"report_id":"a4ee0b7b-fd7d-41a5-a1b5-db5bf98a2870","version":0,"status":"done","tags":[],"date":"2026-09-10T11:12:12Z","url":{"schema":"https","addr":"ledg-app.org/","fqdn":"ledg-app.org","domain":"ledg-app.org","tld":"org"},"ip":{"addr":"193.17.95.117","port":0,"asn":57043,"as":"Hostkey B.v.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"ledg-app.org/","fqdn":"ledg-app.org","domain":"ledg-app.org","tld":"org"},"title":"Download and install Ledger Wallet™ (formerly Ledger Live™)","dom":{"size":18341,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4238)","md5":"e0f298523c62df378b2ea681d82bcbdc","sha1":"5e243675db12ce38cd034bae748fb842101f918d","sha256":"e7843027914b3c73638419fcd0a5d412b4b6084296240f975a2991ed58296149","sha512":"c9e4d3eb692dd7932be9dc27c3ba801a757f003816f7471c2dd605a2c850315d78c0b7bcb8bce517b3119b0346d5d2980d28320e2edd5207e29c08f168a11d24","ssdeep":"192:/T/nwwTeZenNn9kcutgf/NTP0Cod1nwDpKdAMfIEf4Ke0gq+R8erUD4qk1/7RXkD:1HSgnlPsDmYIP3zRwD4J/XXzI","tlshash":"4182b677b2d0463306536299bb9a23baaa134447c119b506b5fd025f6fc2ee1893368f","dom_hash":"domhash84761cc088f17138bab00c61b761affb","first_seen":"2026-09-10T11:12:16.670806Z","last_seen":"2026-09-10T11:12:16.670806Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"ledg-app.org/","fqdn":"ledg-app.org","domain":"ledg-app.org","tld":"org"},"ip":{"addr":"193.17.95.117","port":0,"asn":0,"as":"","country":"France","country_code":"FR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-15T11:12:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ledg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ledg-app.org","ip":{"addr":"193.17.95.117","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"domain_registered":"2026-09-02","domain_rank":0,"first_seen":"2026-09-10T11:12:12.598845Z","last_seen":"2026-09-10T11:12:12.598845Z","alert_count":5,"request_count":5,"received_data":36021,"sent_data":2374,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ledg-app.org/assets/js/main.js","fqdn":"ledg-app.org","domain":"ledg-app.org","tld":"org"},"ip":{"addr":"193.17.95.117","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"00c9d7b8f09965c67208a39b40c5c7d2","sha1":"d2c1a48b35191394a67bb3c01c64eb473971fecc","sha256":"096c317d1044aa0c4de73c7d5e26c2832dafaa2c0647354e711e08ad604630a6","sha512":"e5d2eab5a1768b9530f92c4a6f919bb2dc5828aa6113a7fa9da6bdf147ab215c636348f4439fc5e96c6096f6aa9ca23c58ac6089db863da1c98a40eb1dc6a704","ssdeep":"","tlshash":"ed11c01a709c10be0133b1d7c80aba0c7a6604fe2d5b9627299c6f796ee1414853da6e","size":1055,"data":"","first_seen":"2026-09-10T11:12:16.674831Z","last_seen":"2026-09-10T11:12:16.674831Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ledg-app.org/assets/css/style.css","fqdn":"ledg-app.org","domain":"ledg-app.org","tld":"org"},"ip":{"addr":"193.17.95.117","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledg-app.org/","date":"2026-09-10T11:11:44.220Z","timestamp":1789038704220,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledg-app.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 10:10:28 GMT","end":"Wed, 09 Dec 2026 10:10:27 GMT"},"fingerprint":{"sha1":"1E:FC:64:4D:0B:0A:5E:86:F2:1C:55:4B:46:B5:7B:C3:A9:A9:40:25","sha256":"D8:85:7D:4E:4E:45:55:92:6C:B7:55:15:D1:56:4D:C9:88:40:E4:54:4E:73:FD:03:2B:34:F8:AF:74:C0:39:9B"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: ledg-app.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledg-app.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 10 Sep 2026 11:11:44 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 02 Sep 2026 06:31:36 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a97c2c8-25ef\"\r\nExpires: Fri, 11 Sep 2026 11:11:44 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9711,"size_decoded":3297,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"b8d8dad69d2e92cf0259f914e6199b4e","sha1":"b2b020f6df8d1f21dd1b95a583380142019dbaaf","sha256":"2501cb18fb0473e7d5a51e3ae4980450690c17f4829d04bcfa64c3061210dcda","sha512":"c0ab38374264db128d28f2253e6c5d2796700454fbe63161ac6cfdade1f55d02eef4d6363ab18e5dfa70e93913cb82afb12a5233894279858020e97260b87c1c","ssdeep":"192:9AhequX0pW0cflKaEFvbhvE71df4vp8sV:KeqLWbgAg","tlshash":"671253533f207269b16be67677c7e39ef218a203592965bc6cdc4004c28e3b951aeb4d","first_seen":"2026-09-10T11:12:16.672782Z","last_seen":"2026-09-10T11:12:16.672782Z","times_seen":1,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ledg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledg-app.org/assets/js/main.js","fqdn":"ledg-app.org","domain":"ledg-app.org","tld":"org"},"ip":{"addr":"193.17.95.117","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledg-app.org/","date":"2026-09-10T11:11:44.221Z","timestamp":1789038704221,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledg-app.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 10:10:28 GMT","end":"Wed, 09 Dec 2026 10:10:27 GMT"},"fingerprint":{"sha1":"1E:FC:64:4D:0B:0A:5E:86:F2:1C:55:4B:46:B5:7B:C3:A9:A9:40:25","sha256":"D8:85:7D:4E:4E:45:55:92:6C:B7:55:15:D1:56:4D:C9:88:40:E4:54:4E:73:FD:03:2B:34:F8:AF:74:C0:39:9B"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: ledg-app.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledg-app.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 10 Sep 2026 11:11:44 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Wed, 02 Sep 2026 06:31:36 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a97c2c8-41f\"\r\nExpires: Fri, 11 Sep 2026 11:11:44 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1055,"size_decoded":969,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"00c9d7b8f09965c67208a39b40c5c7d2","sha1":"d2c1a48b35191394a67bb3c01c64eb473971fecc","sha256":"096c317d1044aa0c4de73c7d5e26c2832dafaa2c0647354e711e08ad604630a6","sha512":"e5d2eab5a1768b9530f92c4a6f919bb2dc5828aa6113a7fa9da6bdf147ab215c636348f4439fc5e96c6096f6aa9ca23c58ac6089db863da1c98a40eb1dc6a704","ssdeep":"","tlshash":"ed11c01a709c10be0133b1d7c80aba0c7a6604fe2d5b9627299c6f796ee1414853da6e","first_seen":"2026-09-10T11:12:16.674831Z","last_seen":"2026-09-10T11:12:16.674831Z","times_seen":1,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":26,"send":0,"wait":62,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ledg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledg-app.org/apple-touch-icon.png","fqdn":"ledg-app.org","domain":"ledg-app.org","tld":"org"},"ip":{"addr":"193.17.95.117","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledg-app.org/","date":"2026-09-10T11:11:44.416Z","timestamp":1789038704416,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledg-app.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 10:10:28 GMT","end":"Wed, 09 Dec 2026 10:10:27 GMT"},"fingerprint":{"sha1":"1E:FC:64:4D:0B:0A:5E:86:F2:1C:55:4B:46:B5:7B:C3:A9:A9:40:25","sha256":"D8:85:7D:4E:4E:45:55:92:6C:B7:55:15:D1:56:4D:C9:88:40:E4:54:4E:73:FD:03:2B:34:F8:AF:74:C0:39:9B"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: ledg-app.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledg-app.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 10 Sep 2026 11:11:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 1538\r\nLast-Modified: Thu, 10 Sep 2026 11:06:27 GMT\r\nConnection: keep-alive\r\nETag: \"6aa28f33-602\"\r\nExpires: Fri, 11 Sep 2026 11:11:44 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1538,"size_decoded":1840,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"29a2c525e79d8d10fc42443c3ccf658b","sha1":"fb702bbe7f8da6ae6342975fa91dd262f1f8b980","sha256":"9b30af8172beaf839bc513e160c53be537b8fba1c332f26b13f084fd365f667f","sha512":"01adc1585ef42774e7114d680e0c8a70c667c2163c42ff53050abaa38fb92da9381f310a308789e6e187eeb481b3e0cc4dbe650a9a26470a19163c5a534856c5","ssdeep":"","tlshash":"1331e377c205eb694550c1b28c7472bced7e93448b2633e21187a876ebc1f2aa985f90","first_seen":"2026-09-10T11:12:16.677285Z","last_seen":"2026-09-10T11:12:16.677285Z","times_seen":1,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ledg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledg-app.org/favicon.svg","fqdn":"ledg-app.org","domain":"ledg-app.org","tld":"org"},"ip":{"addr":"193.17.95.117","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledg-app.org/","date":"2026-09-10T11:11:44.417Z","timestamp":1789038704417,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledg-app.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 10:10:28 GMT","end":"Wed, 09 Dec 2026 10:10:27 GMT"},"fingerprint":{"sha1":"1E:FC:64:4D:0B:0A:5E:86:F2:1C:55:4B:46:B5:7B:C3:A9:A9:40:25","sha256":"D8:85:7D:4E:4E:45:55:92:6C:B7:55:15:D1:56:4D:C9:88:40:E4:54:4E:73:FD:03:2B:34:F8:AF:74:C0:39:9B"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: ledg-app.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledg-app.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 10 Sep 2026 11:11:44 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Thu, 10 Sep 2026 11:06:27 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6aa28f33-f39\"\r\nExpires: Fri, 11 Sep 2026 11:11:44 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3897,"size_decoded":1294,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0b67bd8e92730623912df78ceb8cb6b9","sha1":"a20650b85fddf9688ec1865fa710860d26578250","sha256":"55b6045f8d7b556bb9f24801e7cf02c02857e40536d3399db3820ca78e47a341","sha512":"e4082e67c9db502af696b55ad4511625d367ff7eecb515aa8931729bad1ce457129657acaa4f73934a4feac9ff0e43f6cdaa5b423b11ea5fbb644c48ae52c158","ssdeep":"","tlshash":"8f81d07f6513fdbe6b729d08e5031101bce66e3f63899088ba401bf0d3f25614665afa","first_seen":"2026-09-10T11:12:16.67967Z","last_seen":"2026-09-10T11:12:16.67967Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ledg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledg-app.org/","fqdn":"ledg-app.org","domain":"ledg-app.org","tld":"org"},"ip":{"addr":"193.17.95.117","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-10T11:11:43.241Z","timestamp":1789038703241,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledg-app.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 10:10:28 GMT","end":"Wed, 09 Dec 2026 10:10:27 GMT"},"fingerprint":{"sha1":"1E:FC:64:4D:0B:0A:5E:86:F2:1C:55:4B:46:B5:7B:C3:A9:A9:40:25","sha256":"D8:85:7D:4E:4E:45:55:92:6C:B7:55:15:D1:56:4D:C9:88:40:E4:54:4E:73:FD:03:2B:34:F8:AF:74:C0:39:9B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ledg-app.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 10 Sep 2026 11:11:43 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 5847\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18361,"size_decoded":6051,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4238)","md5":"5a789750d8038ca455961146bcba52c8","sha1":"c6ad981682e958b9199ddf6fd6679760ef5c5088","sha256":"f1a61fd2334b293f3aa68e7a1cda2a6770b03f0a84cfafd6cc524019a7fe0904","sha512":"a343190fb795486a88f06d411313661b477eb2102a743862e8ac390eec1c499b055a7d6bf2dc6889ab773e7181a774b2d7bb3c8e1db0a57866d564b400f5c39d","ssdeep":"192:dTcnwwTeZV3Nn9ksutgf/NTP0Cod1nwDp1dAMfIEf4Kg0KQ+R8erUDGqk2/7RXk5:6EOgnlPsgmYIx3hRwDGC/XXz8","tlshash":"a582c777b2d046330743629d7b9a23baaa134443d219b506b5fe025f6fc2ee1493368f","first_seen":"2026-09-10T11:12:16.682785Z","last_seen":"2026-09-10T11:12:16.682785Z","times_seen":1,"resource_available":false,"data":null}},"time_used":733,"timings":{"blocked":-1,"dns":521,"connect":23,"send":0,"wait":76,"receive":0,"ssl":113},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"ledg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}