{"report_id":"a76330a7-9c14-4d1d-becf-78972e46ec4b","version":0,"status":"done","tags":[],"date":"2026-07-02T21:37:46Z","url":{"schema":"https","addr":"ledger.com.ledgerlive.com.es","fqdn":"ledger.com.ledgerlive.com.es","domain":"ledgerlive.com.es","tld":"com.es"},"ip":{"addr":"172.67.69.181","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ledger.com.ledgerlive.com.es/","fqdn":"ledger.com.ledgerlive.com.es","domain":"ledgerlive.com.es","tld":"com.es"},"title":"Ledger Live : Descargar Ledger Live","dom":{"size":7985,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1042)","md5":"5705dfb5ad06b3c9715452193075d695","sha1":"b6437ec4e3315ea203ef3377d90a281fd967e356","sha256":"a790914c97f41a222dc1df02ee8be5ce54e41a648035c3ee45ce41c4bae6dc12","sha512":"1e25d4eaf850c20fec68b04ed8f9c2c9d3745cb22b655bf98c620343e6e0073a6f99980ed3fc16c558e66accb356d01b216055fa7d7a3ddc59e4fc4e061dcf99","ssdeep":"96:NmALXGNdJXzS4XkaXpCWnXxKvKHO6wZQCJWVY847eXCzYaELx3/2VlhCNxC0Kjg6:jmOaZpQKHOjZQC0VY8YYaPDQJVNnx/m","tlshash":"22f10a33260d5c2da139821d7b12f30563bad492d61ed344d2b8aa5f88c2ed2987b79d","dom_hash":"domhash8682bcdefc33d7accafddd65cfa201d0","first_seen":"2026-07-02T21:37:48.284089Z","last_seen":"2026-07-02T21:37:48.284089Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"ledger.com.ledgerlive.com.es","fqdn":"ledger.com.ledgerlive.com.es","domain":"ledgerlive.com.es","tld":"com.es"},"ip":{"addr":"172.67.69.181","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-06T21:37:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0","referer":"www.bing.com","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"ledger.com.ledgerlive.com.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-02","alert":"Phishing Block","trigger":"ledger.com.ledgerlive.com.es","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"ledger.com.ledgerlive.com.es","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"ledger.com.ledgerlive.com.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ledger.com.ledgerlive.com.es","ip":{"addr":"104.26.5.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-06T17:15:45.471071Z","last_seen":"2026-06-15T14:09:04.612683Z","alert_count":28,"request_count":7,"received_data":36427,"sent_data":3964,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ledger.com.ledgerlive.com.es/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"ledger.com.ledgerlive.com.es","domain":"ledgerlive.com.es","tld":"com.es"},"ip":{"addr":"104.26.5.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-06T06:01:56.207819Z","times_seen":415163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c7a71d5be24f54dabcf49d7df7c9459","sha1":"0184d9edd3a46b85477178fbc9fe049789e54c3a","sha256":"d7754b7b5d14cc591069e685bc2ec7d29b7de85f1de8e5a9618c83e3971c8b15","sha512":"d782be1145f40fce30494cc4f8c3e55d44fb0f7c0f29de2da91b49531529fab3b42fcf94681aa19b8da3e184e998ea1417d8e9dba40c858afa4018216d32c26e","ssdeep":"","tlshash":"73d023551eb6843469d8024e507ed7a465703060f711a751c1d8cc2b7e10ed715f155c","size":217,"data":"","first_seen":"2026-07-02T21:37:48.291319Z","last_seen":"2026-07-02T21:37:48.291319Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledger.com.ledgerlive.com.es/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"ledger.com.ledgerlive.com.es","domain":"ledgerlive.com.es","tld":"com.es"},"ip":{"addr":"104.26.5.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bcb325ccd7bfb0d7380601eb1be34894","sha1":"06515a928aaa04756fdd78bfd0b5c3ec9fc6c662","sha256":"7780c0f226f375a8cb684299ea8f2a0420e582cb44e95ce8a5fc9c25de60e6a3","sha512":"ff2f3f6f8b175ebcae5772047a61750844093c57b7898b2153ad9a12f82ae328438c9d9c95472011a8c89f349c5e63d2c869f1ea11246615ba128dad484a7aad","ssdeep":"384:Wvx8HQ5gK5F0Q6vgXAgigCn0s78kMcRa92CEG+J1B/nc4zHwSfM9/q:S6Q1Fc78dcm2NHzQS","tlshash":"7b9292c57ccaf55862d265b2042b30cbf66f7c99980c0535a722caf6fd66b884d27d8c","size":20995,"data":"","first_seen":"2026-07-02T21:37:48.288363Z","last_seen":"2026-07-02T22:15:00.92437Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ledger.com.ledgerlive.com.es/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"ledger.com.ledgerlive.com.es","domain":"ledgerlive.com.es","tld":"com.es"},"ip":{"addr":"104.26.5.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledger.com.ledgerlive.com.es/","date":"2026-07-02T21:37:24.554Z","timestamp":1783028244554,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.com.ledgerlive.com.es","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 May 2026 14:41:47 GMT","end":"Wed, 12 Aug 2026 15:41:39 GMT"},"fingerprint":{"sha1":"10:07:7F:FD:19:7C:5E:18:6A:AF:41:D3:68:09:24:52:75:49:53:4B","sha256":"FA:A8:16:44:54:FB:3B:32:BE:0F:2A:B9:89:54:AD:45:3B:5C:BF:72:FD:92:59:94:88:AF:70:41:64:25:3B:12"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: ledger.com.ledgerlive.com.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Thu, 02 Jul 2026 21:37:24 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/80a697ecdece/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: a150caa078cd56aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T06:01:13.311428Z","times_seen":17737942,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"ledger.com.ledgerlive.com.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-02","alert":"Phishing Block","trigger":"ledger.com.ledgerlive.com.es","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"ledger.com.ledgerlive.com.es","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"ledger.com.ledgerlive.com.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.com.ledgerlive.com.es/apple.webp","fqdn":"ledger.com.ledgerlive.com.es","domain":"ledgerlive.com.es","tld":"com.es"},"ip":{"addr":"104.26.5.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger.com.ledgerlive.com.es/","date":"2026-07-02T21:37:24.557Z","timestamp":1783028244557,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.com.ledgerlive.com.es","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 May 2026 14:41:47 GMT","end":"Wed, 12 Aug 2026 15:41:39 GMT"},"fingerprint":{"sha1":"10:07:7F:FD:19:7C:5E:18:6A:AF:41:D3:68:09:24:52:75:49:53:4B","sha256":"FA:A8:16:44:54:FB:3B:32:BE:0F:2A:B9:89:54:AD:45:3B:5C:BF:72:FD:92:59:94:88:AF:70:41:64:25:3B:12"}}},"request":{"raw":"GET /apple.webp HTTP/1.1\r\nHost: ledger.com.ledgerlive.com.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledger.com.ledgerlive.com.es/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 02 Jul 2026 21:37:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 832\r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\netag: W/\"340-19e645ca307\"\r\nlast-modified: Tue, 26 May 2026 12:57:33 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=njuOxfQI48DsJbkFirnhS3O4h9grreKt3JBOJq5YZZzTN5ktk3%2FVEJc8AeLWSerg56tLHWVRn1BE%2BZ6Kc68%2BgBcteDP2%2B%2Frel06rAjTW1p7QRyvmDkIplzWo3m3X06AMF3xtdd790f1Nh0%2F%2Bqmo%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a150caa078d656aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":832,"size_decoded":1505,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d2e80e889a12fbc384e8d4b536a1242d","sha1":"2a1ef7564673bc830fa378594b44ada51c1d1a08","sha256":"2b0f72870f8602ff83604f485eb1c122d20404992d8d2d371d3f01fa683c8de5","sha512":"f21935ff331c37ee4e04b86836b7823df4739a024b150c08ed6169196ead43e751834e632895dfc7fa3e67d46600a36328ab7c6ba081ab8b5f3a9fc319b2b802","ssdeep":"","tlshash":"600181c068cbf1ebc050ae64eadb4710b22b0e743cbf390719a6e44482392012a33a82","first_seen":"2026-05-16T06:09:14.488834Z","last_seen":"2026-07-15T03:22:19.639023Z","times_seen":31,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"ledger.com.ledgerlive.com.es","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-02","alert":"Phishing Block","trigger":"ledger.com.ledgerlive.com.es","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"ledger.com.ledgerlive.com.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"ledger.com.ledgerlive.com.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.com.ledgerlive.com.es/f16.webp","fqdn":"ledger.com.ledgerlive.com.es","domain":"ledgerlive.com.es","tld":"com.es"},"ip":{"addr":"104.26.5.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger.com.ledgerlive.com.es/","date":"2026-07-02T21:37:24.565Z","timestamp":1783028244565,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.com.ledgerlive.com.es","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 May 2026 14:41:47 GMT","end":"Wed, 12 Aug 2026 15:41:39 GMT"},"fingerprint":{"sha1":"10:07:7F:FD:19:7C:5E:18:6A:AF:41:D3:68:09:24:52:75:49:53:4B","sha256":"FA:A8:16:44:54:FB:3B:32:BE:0F:2A:B9:89:54:AD:45:3B:5C:BF:72:FD:92:59:94:88:AF:70:41:64:25:3B:12"}}},"request":{"raw":"GET /f16.webp HTTP/1.1\r\nHost: ledger.com.ledgerlive.com.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledger.com.ledgerlive.com.es/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 02 Jul 2026 21:37:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 232\r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\netag: W/\"e8-19e645ca2ff\"\r\nlast-modified: Tue, 26 May 2026 12:57:33 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ObKARP%2BFEWIW4EhiCkymdA1EVdtKnFFQvNa92WGjdw0GA8XZ3q%2BW%2FdxOHY%2B6odnAFDNz76U1oBiqh6UCcqWNKnFSdsfvbXW6%2B%2Fyi3zvz1PvW8XKfFdHWnheK9zBR0Zzl2fAxT2%2BIAMtwrvdE5Tg%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a150caa088e856aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232,"size_decoded":904,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"03746126397fc1abafda3e7bf5b4dcaf","sha1":"35f16389d9fc339ad20b2cdcd7d01b136ddab49c","sha256":"54fd2f23aa8df0d054e5218a42427183779eeb2a4d883d06bc618437255b56aa","sha512":"ccb1cd9d374e925f9f6d2725456b358f85362111402087f95c7cc8abaff1f920f24bdd538ee30d504ec27aafd1f0e128db59f310ace8f3d13df9a6ad66ed510c","ssdeep":"","tlshash":"cad097e0829380f1cd8034b4e2482240ac1200600511df9ba30b21b0f011295b8133d0","first_seen":"2026-05-16T06:09:14.491296Z","last_seen":"2026-07-15T03:22:19.627093Z","times_seen":30,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"ledger.com.ledgerlive.com.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"ledger.com.ledgerlive.com.es","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-02","alert":"Phishing Block","trigger":"ledger.com.ledgerlive.com.es","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"ledger.com.ledgerlive.com.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.com.ledgerlive.com.es/cdn-cgi/challenge-platform/h/b/scripts/jsd/80a697ecdece/main.js?","fqdn":"ledger.com.ledgerlive.com.es","domain":"ledgerlive.com.es","tld":"com.es"},"ip":{"addr":"104.26.5.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledger.com.ledgerlive.com.es/","date":"2026-07-02T21:37:24.598Z","timestamp":1783028244598,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.com.ledgerlive.com.es","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 May 2026 14:41:47 GMT","end":"Wed, 12 Aug 2026 15:41:39 GMT"},"fingerprint":{"sha1":"10:07:7F:FD:19:7C:5E:18:6A:AF:41:D3:68:09:24:52:75:49:53:4B","sha256":"FA:A8:16:44:54:FB:3B:32:BE:0F:2A:B9:89:54:AD:45:3B:5C:BF:72:FD:92:59:94:88:AF:70:41:64:25:3B:12"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/80a697ecdece/main.js? HTTP/1.1\r\nHost: ledger.com.ledgerlive.com.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 02 Jul 2026 21:37:24 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a150caa0b93b56aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20995,"size_decoded":9920,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (20995), with no line terminators","md5":"bcb325ccd7bfb0d7380601eb1be34894","sha1":"06515a928aaa04756fdd78bfd0b5c3ec9fc6c662","sha256":"7780c0f226f375a8cb684299ea8f2a0420e582cb44e95ce8a5fc9c25de60e6a3","sha512":"ff2f3f6f8b175ebcae5772047a61750844093c57b7898b2153ad9a12f82ae328438c9d9c95472011a8c89f349c5e63d2c869f1ea11246615ba128dad484a7aad","ssdeep":"384:Wvx8HQ5gK5F0Q6vgXAgigCn0s78kMcRa92CEG+J1B/nc4zHwSfM9/q:S6Q1Fc78dcm2NHzQS","tlshash":"7b9292c57ccaf55862d265b2042b30cbf66f7c99980c0535a722caf6fd66b884d27d8c","first_seen":"2026-07-02T21:37:48.288363Z","last_seen":"2026-07-02T22:15:00.92437Z","times_seen":3,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"ledger.com.ledgerlive.com.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"ledger.com.ledgerlive.com.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-02","alert":"Phishing Block","trigger":"ledger.com.ledgerlive.com.es","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"ledger.com.ledgerlive.com.es","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.com.ledgerlive.com.es/cdn-cgi/challenge-platform/h/b/jsd/oneshot/80a697ecdece/0.9808195434336551:1783026032:Oeawd9aM802C2yEht09Ilp9iLfWBD4DmhzpVfsbwqE0/a150ca9abb3156aa","fqdn":"ledger.com.ledgerlive.com.es","domain":"ledgerlive.com.es","tld":"com.es"},"ip":{"addr":"104.26.5.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ledger.com.ledgerlive.com.es/","date":"2026-07-02T21:37:24.729Z","timestamp":1783028244729,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.com.ledgerlive.com.es","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 May 2026 14:41:47 GMT","end":"Wed, 12 Aug 2026 15:41:39 GMT"},"fingerprint":{"sha1":"10:07:7F:FD:19:7C:5E:18:6A:AF:41:D3:68:09:24:52:75:49:53:4B","sha256":"FA:A8:16:44:54:FB:3B:32:BE:0F:2A:B9:89:54:AD:45:3B:5C:BF:72:FD:92:59:94:88:AF:70:41:64:25:3B:12"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/80a697ecdece/0.9808195434336551:1783026032:Oeawd9aM802C2yEht09Ilp9iLfWBD4DmhzpVfsbwqE0/a150ca9abb3156aa HTTP/1.1\r\nHost: ledger.com.ledgerlive.com.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 13880\r\nOrigin: https://ledger.com.ledgerlive.com.es\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledger.com.ledgerlive.com.es/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 02 Jul 2026 21:37:24 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-chl-out-s: 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$4AMEnasSmUjfyn6GMO6IPw==\r\nset-cookie: cf_clearance=q_NsWZO8e7I13nv.wE1ZxLSz7wmOwxz_Nsorwf2kcNU-1783028244-1.2.1.1-5FFyPSFQjPaa.ZnwW14nJsPiyC27YVWIpdRMlRR9E5.tXuOz8KRAR.NyHC.hl8FDfYDjUh29zmGraoUKPbzVrdXRQYFXm4jTnAn0BvwoUV8jQ9datXmXiFjbqzojwZAozw10jX6Imak0wXW2gstVEmvI.BEctV9LANpLDVvkiWmo1QDciI9aZ.fhQlQKiFxsZZhRWID7B5xPvmR989TAm0rKiFynmg16KZCe8EJdkA5I6mmXeUXBGsahoXZJfAoLgQzoYK8ZEembyQKiHKEr6IfXUeNkED3CWKb2Y90zdKqTKLkkXFZ2XqjALGwTEMAr7P9xLeGDwjT0J2_nI2Na0Q; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=ledgerlive.com.es; Expires=Fri, 02 Jul 2027 21:37:24 GMT\r\ntiming-allow-origin: https://ledger.com.ledgerlive.com.es\r\nserver: cloudflare\r\ncf-ray: a150caa19a4356aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":16243,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T06:01:13.311428Z","times_seen":17737942,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"ledger.com.ledgerlive.com.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"ledger.com.ledgerlive.com.es","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-02","alert":"Phishing Block","trigger":"ledger.com.ledgerlive.com.es","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"ledger.com.ledgerlive.com.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.com.ledgerlive.com.es/","fqdn":"ledger.com.ledgerlive.com.es","domain":"ledgerlive.com.es","tld":"com.es"},"ip":{"addr":"104.26.5.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-02T21:37:23.262Z","timestamp":1783028243262,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.com.ledgerlive.com.es","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 May 2026 14:41:47 GMT","end":"Wed, 12 Aug 2026 15:41:39 GMT"},"fingerprint":{"sha1":"10:07:7F:FD:19:7C:5E:18:6A:AF:41:D3:68:09:24:52:75:49:53:4B","sha256":"FA:A8:16:44:54:FB:3B:32:BE:0F:2A:B9:89:54:AD:45:3B:5C:BF:72:FD:92:59:94:88:AF:70:41:64:25:3B:12"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ledger.com.ledgerlive.com.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 02 Jul 2026 21:37:24 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: private, no-store, no-cache, must-revalidate, max-age=0\r\ncdn-cache-control: no-store\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F%2FUb%2F3nNWLl21xIEupoag274f9O%2BHvnWW30afAXBFPL1ST2oWvd3%2BCXqtZvzJxKAje8U0Eflp6FuPhahLAZhTMXeJyl%2FQ1hX2QQNQdVeRjYYL3dimxLEF9awTpEHWGwzzTrjI0epCQBJACU8vOc%3D\"}]}\r\ncontent-language: es\r\nexpires: 0\r\npragma: no-cache\r\nsurrogate-control: no-store\r\nvary: User-Agent, Accept-Encoding, Cookie\r\nx-request-id: 598d5531dc05f24a\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a150ca9abb3156aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8016,"size_decoded":3808,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1034)","md5":"67ece670493119f86f1bddade5ca1499","sha1":"0500f9acf3491e95b33637d079118c0b333290b4","sha256":"bf6b5f4209a69998285c3fa0595cb1500bdd49bc9b6fa9778404e722d5828768","sha512":"65f98dc9f6cea78341da6dcc1cb4edf6cb9b734fc0f9e12211870b6d4876693f6aed33a800cdb05d046f298f2287eb405a9903231606b5c267e164258a686c41","ssdeep":"96:JmALXGNdJXzS4XkaXpCWnXxKvKHO6wZQCJWVY847eXoMEquhCNhC0KjDlSLIgNnu:XmOaZpQKHOjZQC0VY8bEqKQZKqbNnx/k","tlshash":"78f1f93326099c2d9139c11d7762f30913b5d491d61ed340e2b8ae5f49c2ee2a86b3dd","first_seen":"2026-07-02T21:37:48.289715Z","last_seen":"2026-07-02T21:37:48.289715Z","times_seen":1,"resource_available":true,"data":null}},"time_used":947,"timings":{"blocked":-1,"dns":355,"connect":1,"send":0,"wait":575,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"ledger.com.ledgerlive.com.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"ledger.com.ledgerlive.com.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-02","alert":"Phishing Block","trigger":"ledger.com.ledgerlive.com.es","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"ledger.com.ledgerlive.com.es","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.com.ledgerlive.com.es/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"ledger.com.ledgerlive.com.es","domain":"ledgerlive.com.es","tld":"com.es"},"ip":{"addr":"104.26.5.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledger.com.ledgerlive.com.es/","date":"2026-07-02T21:37:24.483Z","timestamp":1783028244483,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.com.ledgerlive.com.es","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 May 2026 14:41:47 GMT","end":"Wed, 12 Aug 2026 15:41:39 GMT"},"fingerprint":{"sha1":"10:07:7F:FD:19:7C:5E:18:6A:AF:41:D3:68:09:24:52:75:49:53:4B","sha256":"FA:A8:16:44:54:FB:3B:32:BE:0F:2A:B9:89:54:AD:45:3B:5C:BF:72:FD:92:59:94:88:AF:70:41:64:25:3B:12"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: ledger.com.ledgerlive.com.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledger.com.ledgerlive.com.es/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 02 Jul 2026 21:37:24 GMT\r\ncontent-type: application/javascript\r\nexpires: Sat, 04 Jul 2026 21:37:24 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YwqBdQHFYLTs5jQLzogvBJ1CVlMtKVaj%2FA%2BPAKkTOb6WQIJ%2BNJz%2B6Ev%2BLJId2r37FKrznuTMwWYdihaaba%2FWujiK%2Fs3AQZ1WjE3q7RT0iUUVRHPOM8GIbQN%2FjoP3c2Ns2xpz2DI2yY%2BSTk9HWy4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a150caa0188056aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1286,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-06T06:01:56.207819Z","times_seen":415163,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":9,"connect":2,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"ledger.com.ledgerlive.com.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"ledger.com.ledgerlive.com.es","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"ledger.com.ledgerlive.com.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-02","alert":"Phishing Block","trigger":"ledger.com.ledgerlive.com.es","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}
