{"report_id":"a999a52f-a8f0-4c7e-a46a-f4674cf305b9","version":0,"status":"done","tags":[],"date":"2026-06-20T03:56:21Z","url":{"schema":"http","addr":"ledgerlive.claims/","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"ledgerlive.claims/","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"title":"Ledger Live Wallet — The Premium Standard for Crypto Assets","dom":{"size":97966,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"941a8ad3db09bf5c381e7b94beca78f6","sha1":"4b8b653bdacb56dc11ef5be627dc78173a5091e5","sha256":"1559594f1be7683557b20f373114ce650d380b566a87950bea8bbec2ccba3c91","sha512":"2d49e15c4329079c3e13661d82a34f1d0292f68aa2cf632b8f15bba3472b2630df5e533ea6829bca593de3b2dffb8e22b2afc5643cb137237bfaed26a5e47dfe","ssdeep":"1536:acGWebx/c64Jysq7vcVP8CUSzwvE/6QTv6q2lfEdYwGd2UpvGeUSzwvE/6QTv6qZ:acGWeiV0fSGRQTgl8dYDNpvGjSGRQTgK","tlshash":"42a38e3076080a3da5279764f181bb5cd91dea42dd6b622df39c00a7b6c7fe18d67b80","dom_hash":"domhash7bb9e1478323d84d9a3316fe33802dc1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ledgerlive.claims/","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-25T03:56:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"ledgerlive.claims","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ledgerlive.claims","ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-14T11:19:58.439588Z","last_seen":"2026-06-02T11:25:02.479035Z","alert_count":69,"request_count":23,"received_data":1112083,"sent_data":17628,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ledgerlive.claims/assets/circle-check-tjTzafvm.js","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"38d2e70f102a869530bfcba6802cc60f","sha1":"155b54e707da5e9b8a8f55caef9daf27101ed2ae","sha256":"dc812e1c4c53896b7178466583fb221b968c1c5e112d30da3859337a564a570c","sha512":"5a9f7e8caa77f5b3e8c29d7ff35e3ff266a1748fe66e0d5395ad42e3f305ac5c63819650435366fba1d66e8ef471d1a5824d05d8e7de926186230995a29e7d97","ssdeep":"","tlshash":"6bc0803b9f515f570105d4ca0e5a5114d891426117dc4f81f3874a17c351d5730cfd72","size":185,"data":"","first_seen":"2026-06-02T11:25:05.352177Z","last_seen":"2026-06-20T03:56:24.613229Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerlive.claims/assets/index-Bh2Tyt45.js","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"97b6b6c0dd44ed41034be869f3bd4453","sha1":"00cd9aab975992d34ab938ba2edfcf185835ee84","sha256":"a219818318a2afc8c8803b4622f475d0ffc11c119224fce61f9e5eb937e73593","sha512":"dd7dff80b301a45107c51a58320a63c84d68799537a3611613869837d5c0059d10c08e14eaf6337555181567ecdcb50e4f10494f01491678ca9bd59a064f1ad9","ssdeep":"192:sLvnx4KhEgrkxrHomrJpWQkJ0jQkHtZZGF:ax4KhrrkOmLvk+zZ8","tlshash":"82129629e146bf7dfa1307b9f99fa148b10e4fa4cb3e4575f0bd14211a244967a273c8","size":9229,"data":"","first_seen":"2026-06-02T11:25:05.373826Z","last_seen":"2026-06-20T03:56:24.629993Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerlive.claims/~flock.js","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-07-15T09:37:40.663602Z","times_seen":13514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerlive.claims/__l5e/events.js","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4984c751409f378613ce4a697469eb54","sha1":"db702076417754abd5497526bb2d4326d3fc9594","sha256":"48b09309d5c937dcd3d62ffd10b47d9d4ed5926f6b96cdcdefa63099e84818fa","sha512":"32420a4ba8bc56dadddd982b9bb39cd56fc15249f7a6962f0f606a84681be20e5006554354eb317c0b5f44fa495a08a5ccffb42abbd8bdeeb4febb6530d6e393","ssdeep":"768:5+rVEje/DCjA89Huk/sk4S58W45XKxNAOtXVltoaSeSzc4R4jgcFykJ8X/cpCgAd:5buk/sk4S6etgYrXBfOVEkZovhfi7","tlshash":"aa13728878f714a30163917e5b9b810236349587354adfa4beac4d0a2fcd658e6f3fc9","size":44148,"data":"","first_seen":"2026-06-16T13:38:26.366748Z","last_seen":"2026-07-15T08:50:40.276325Z","times_seen":2642,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerlive.claims/assets/button-BxOHUvUX.js","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8b82fded3ff723c2a77b394e1437837","sha1":"efcda299e9a8a2074b7eea496499166aa43c0679","sha256":"c5e509058f8d7bb07fb2e2e7f4e37f777859e27ac8ec900d01a3d126577612d4","sha512":"e81e3471d4cb6808759c424e1cee5d60c20676ff7689c9e7bab1066316fb94a7fed7b8c971c68fc6950d47c87adef360651ebac4f1f5a3b0c9e605672558259e","ssdeep":"768:7HJSIuCD8vnaxabmty5Hcj9vHMWdJK/4YL:TDDgcj9MWdJK/B","tlshash":"5dd2e925b547017e1aef93d7f06caea5d9392b02e0098b48f39b4f358b497e81157b0d","size":30677,"data":"","first_seen":"2026-06-02T11:25:05.358364Z","last_seen":"2026-06-20T03:56:24.624891Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerlive.claims/assets/nzd-DCeCqsXE.js","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e92b07cc12e48a2d7ca1190ed1e965b","sha1":"cc17ee8e01abb85c24bb703b43b15dfa3e1f8aa2","sha256":"d9294d197f90720221ccf31d29e69bf6b199e35bae48c5f78cc429b9736cece2","sha512":"99bbe858ad56a8b09b6dc80f5f43c39a442f347b47dca6ee1284731e6a6d3fca1d082707ce6cf6f9d45a9925cae1acf53b9a1b5eb47efc45dbadc8010d5694ec","ssdeep":"768:uSDdTNXQDuD4mwv6h/6QyM6qbuLBZlqnEdWhrwGd2UpuGXZ:xTxzwvE/6QyM6qGlQEdCwGd2UpuGp","tlshash":"0dc2e07f890e8fe18bb43c8924059f544d0e251f0dfe621b2e5a50afb4fc321e61a7a0","size":26045,"data":"","first_seen":"2026-06-02T11:25:05.349288Z","last_seen":"2026-06-20T03:56:24.628598Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerlive.claims/assets/building-2-fz9C7F1J.js","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"450f72a3714684e1e7f674f3be106bea","sha1":"32fcc9c76ef135e657700a43913ded958e8a9ee5","sha256":"bd293eb19c430ac853da9d4c00b54498bdf95c2775387eeffe0b4a4b274a7ea7","sha512":"10cdb25a2d3a35aba5dceabc9e3ccd499f84a397dd9b08338fb1bd9cce071fdaa08d01dea6d43c05c219745fc470130b6d660c38f4a1f5ac63b375cf7f50e2fb","ssdeep":"","tlshash":"53e0ed5f8f8ca3ae0a0081480f0ff1204bec22be328d49e0b40e4262fa15003cebbb00","size":395,"data":"","first_seen":"2026-06-02T11:25:05.361903Z","last_seen":"2026-06-20T03:56:24.614623Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerlive.claims/assets/ledger-live-wallet-logo-zmEiOuAJ.js","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3dbf3d1f9edece9f3b4e4e6c2889235d","sha1":"5a4e081266b4f78f515f13b1cca4b15097c85310","sha256":"4362c5f87dbc2c87dda870d60b2cd278b4e1e98eec0456577a54961ee8b395fa","sha512":"bd66f08f67552519e027f1214a25e387ca817da5f261fa9e091db2868bc314567c5510bf9ddf968598433627056ac6be867fa68848c4ea1f7dd0737eaee1eea9","ssdeep":"","tlshash":"7d615a782758edd283290ced09e516cffd98841531ea2042df1582b87deb6fe72c8660","size":3281,"data":"","first_seen":"2026-06-02T11:25:05.346113Z","last_seen":"2026-06-20T03:56:24.621727Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerlive.claims/assets/createLucideIcon-BjPl3FwG.js","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f29b914520c1440f9f3a90c34e8c6ddd","sha1":"796a48cbdd594e5ee21dec33d432545d8e2442bd","sha256":"3d0930499edcebd7b206e2fdb9317dbc5bf5dec22dfe6d8dd014f14609e6b5bb","sha512":"d99c4576ef02f523e9d776041a84dfec74309aba1dfabdca34f59958c750e666fb489f452532a3412b02bb408a67ca3faffdcce530f7a14eabd367dd132a398d","ssdeep":"","tlshash":"22214108b3d5283ca23584cd97983069ec779a28f9675a58d2fc5d2a7623042a337acc","size":1202,"data":"","first_seen":"2026-06-02T11:25:05.360235Z","last_seen":"2026-06-20T03:56:24.617204Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerlive.claims/assets/shield-CC7tp6NM.js","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e48021dfadbc523ec903fd1de700ce2a","sha1":"440d4b50c97b3f8c9fab60f859b8d7ff2543b6be","sha256":"fb94ba2f42258d203ac457fbf406f090c804a10745d737430439f76374b2772c","sha512":"5d39751fee88bb221b3e656809a89ff71350df74b19bb4c5e8158af316c55518956c25e5c1c945be322b790a2f01ad8a2a6501d74285263a1a7b9732677f2c29","ssdeep":"","tlshash":"cbd0c26aaf4c45fd26c3dac6866721508f58d58933b149e0a10c893b81138d7c08f911","size":279,"data":"","first_seen":"2026-06-02T11:25:05.375153Z","last_seen":"2026-06-20T03:56:24.61395Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerlive.claims/assets/index-CXUPU8ri.js","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"1056d03daacbb1e59d92e02095c2c5bf","sha1":"54b28dc2e4bb2e79f031a8cac64bf086976e874a","sha256":"1dea22351107b7f1c466dccf3b52d7d38fb31593b71f25acafe5bee9af255999","sha512":"cf9a42ad8fc6441731516223a25b3bf1227a5034e0a927bdbb56a5016658582c88be4ab444158b56894ff7ae990d5229dae71f34c9bc7828bda670d2605d58a5","ssdeep":"12288:0LRqhuIHa0/10uW0lymJXUGDPI9OHgtZi2w1wlq:0mhHaY0urlymJXG95w1wU","tlshash":"54d46dd472aaa1220bd345e0907f1103f2382916780c8464f66cddef7ab5949e67bfbd","size":608277,"data":"","first_seen":"2026-06-02T11:25:05.372472Z","last_seen":"2026-06-20T03:56:24.620724Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ledgerlive.claims/~api/analytics","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ledgerlive.claims/","date":"2026-06-20T03:55:58.767Z","timestamp":1781927758767,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerlive.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 22:16:05 GMT","end":"Wed, 26 Aug 2026 23:15:56 GMT"},"fingerprint":{"sha1":"0C:C1:98:9B:90:8D:3F:38:46:8A:AA:BE:E8:2E:2F:32:38:33:54:64","sha256":"42:E3:47:BF:EB:8A:FB:13:3C:3A:AF:01:4E:71:AA:CC:FA:8F:D7:C7:2A:EE:08:0D:AF:0B:0E:3F:D4:A5:F2:FE"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: ledgerlive.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgerlive.claims/\r\nContent-Type: application/json\r\nContent-Length: 338\r\nOrigin: https://ledgerlive.claims\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1; __cf_bm=kmTXkmOqh7m9MiJQL.l34fg9BHeE.0CBY5e7o451boo-1781927757.2893255-1.0.1.1-GiAgwBhfIirvEc0Jsc95UKdGJNTAo.Npw1F50PMxBiYjaSg2oQQV_5co5iMfCX3F8OhuaiGbGE4LmdSloygvVv0oGsFAMD3vhLeLKI.egLenVNYMY3IB8m7.A2YyntXD; session-id=24cfe4b0-5b2d-4f19-8c8d-a28a1e606a4c\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 03:55:58 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 4\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a0e7d74c4802712b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4,"size_decoded":333,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"f92965e2c8a7afb3c1b9a5c09a263636","sha1":"e9b450d14bc2363d292c84f17cfad5cfbd58a458","sha256":"11a6767d5674c7e45f7e00dc525762275b3a48491ad6045427d2609cc496c516","sha512":"25775ba3c567970fc3df3f8107f2a78a67c5619d54bfb37704423acceec253316949eee77b81100a01b91c742e475b4f6157dd2427a9f9fafd87a4078f2d65df","ssdeep":"","tlshash":"54300000000000000000c00c00000000000000000c0000000000000000000000000000","first_seen":"2023-04-09T18:20:08Z","last_seen":"2026-07-07T11:17:12.578135Z","times_seen":12919,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"ledgerlive.claims","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerlive.claims/assets/circle-check-tjTzafvm.js","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgerlive.claims/","date":"2026-06-20T03:55:58.230Z","timestamp":1781927758230,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerlive.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 22:16:05 GMT","end":"Wed, 26 Aug 2026 23:15:56 GMT"},"fingerprint":{"sha1":"0C:C1:98:9B:90:8D:3F:38:46:8A:AA:BE:E8:2E:2F:32:38:33:54:64","sha256":"42:E3:47:BF:EB:8A:FB:13:3C:3A:AF:01:4E:71:AA:CC:FA:8F:D7:C7:2A:EE:08:0D:AF:0B:0E:3F:D4:A5:F2:FE"}}},"request":{"raw":"GET /assets/circle-check-tjTzafvm.js HTTP/1.1\r\nHost: ledgerlive.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgerlive.claims/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1; __cf_bm=kmTXkmOqh7m9MiJQL.l34fg9BHeE.0CBY5e7o451boo-1781927757.2893255-1.0.1.1-GiAgwBhfIirvEc0Jsc95UKdGJNTAo.Npw1F50PMxBiYjaSg2oQQV_5co5iMfCX3F8OhuaiGbGE4LmdSloygvVv0oGsFAMD3vhLeLKI.egLenVNYMY3IB8m7.A2YyntXD\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 03:55:58 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0e7d748feb6712b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":185,"size_decoded":648,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"38d2e70f102a869530bfcba6802cc60f","sha1":"155b54e707da5e9b8a8f55caef9daf27101ed2ae","sha256":"dc812e1c4c53896b7178466583fb221b968c1c5e112d30da3859337a564a570c","sha512":"5a9f7e8caa77f5b3e8c29d7ff35e3ff266a1748fe66e0d5395ad42e3f305ac5c63819650435366fba1d66e8ef471d1a5824d05d8e7de926186230995a29e7d97","ssdeep":"","tlshash":"6bc0803b9f515f570105d4ca0e5a5114d891426117dc4f81f3874a17c351d5730cfd72","first_seen":"2026-06-02T11:25:05.352177Z","last_seen":"2026-06-20T03:56:24.613229Z","times_seen":3,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"ledgerlive.claims","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerlive.claims/assets/shield-CC7tp6NM.js","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgerlive.claims/","date":"2026-06-20T03:55:58.231Z","timestamp":1781927758231,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerlive.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 22:16:05 GMT","end":"Wed, 26 Aug 2026 23:15:56 GMT"},"fingerprint":{"sha1":"0C:C1:98:9B:90:8D:3F:38:46:8A:AA:BE:E8:2E:2F:32:38:33:54:64","sha256":"42:E3:47:BF:EB:8A:FB:13:3C:3A:AF:01:4E:71:AA:CC:FA:8F:D7:C7:2A:EE:08:0D:AF:0B:0E:3F:D4:A5:F2:FE"}}},"request":{"raw":"GET /assets/shield-CC7tp6NM.js HTTP/1.1\r\nHost: ledgerlive.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgerlive.claims/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1; __cf_bm=kmTXkmOqh7m9MiJQL.l34fg9BHeE.0CBY5e7o451boo-1781927757.2893255-1.0.1.1-GiAgwBhfIirvEc0Jsc95UKdGJNTAo.Npw1F50PMxBiYjaSg2oQQV_5co5iMfCX3F8OhuaiGbGE4LmdSloygvVv0oGsFAMD3vhLeLKI.egLenVNYMY3IB8m7.A2YyntXD\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 03:55:58 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0e7d748feb8712b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":279,"size_decoded":709,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"e48021dfadbc523ec903fd1de700ce2a","sha1":"440d4b50c97b3f8c9fab60f859b8d7ff2543b6be","sha256":"fb94ba2f42258d203ac457fbf406f090c804a10745d737430439f76374b2772c","sha512":"5d39751fee88bb221b3e656809a89ff71350df74b19bb4c5e8158af316c55518956c25e5c1c945be322b790a2f01ad8a2a6501d74285263a1a7b9732677f2c29","ssdeep":"","tlshash":"cbd0c26aaf4c45fd26c3dac6866721508f58d58933b149e0a10c893b81138d7c08f911","first_seen":"2026-06-02T11:25:05.375153Z","last_seen":"2026-06-20T03:56:24.61395Z","times_seen":3,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"ledgerlive.claims","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerlive.claims/assets/building-2-fz9C7F1J.js","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgerlive.claims/","date":"2026-06-20T03:55:58.233Z","timestamp":1781927758233,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerlive.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 22:16:05 GMT","end":"Wed, 26 Aug 2026 23:15:56 GMT"},"fingerprint":{"sha1":"0C:C1:98:9B:90:8D:3F:38:46:8A:AA:BE:E8:2E:2F:32:38:33:54:64","sha256":"42:E3:47:BF:EB:8A:FB:13:3C:3A:AF:01:4E:71:AA:CC:FA:8F:D7:C7:2A:EE:08:0D:AF:0B:0E:3F:D4:A5:F2:FE"}}},"request":{"raw":"GET /assets/building-2-fz9C7F1J.js HTTP/1.1\r\nHost: ledgerlive.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgerlive.claims/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1; __cf_bm=kmTXkmOqh7m9MiJQL.l34fg9BHeE.0CBY5e7o451boo-1781927757.2893255-1.0.1.1-GiAgwBhfIirvEc0Jsc95UKdGJNTAo.Npw1F50PMxBiYjaSg2oQQV_5co5iMfCX3F8OhuaiGbGE4LmdSloygvVv0oGsFAMD3vhLeLKI.egLenVNYMY3IB8m7.A2YyntXD\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 03:55:58 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0e7d748feba712b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":395,"size_decoded":725,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (394)","md5":"450f72a3714684e1e7f674f3be106bea","sha1":"32fcc9c76ef135e657700a43913ded958e8a9ee5","sha256":"bd293eb19c430ac853da9d4c00b54498bdf95c2775387eeffe0b4a4b274a7ea7","sha512":"10cdb25a2d3a35aba5dceabc9e3ccd499f84a397dd9b08338fb1bd9cce071fdaa08d01dea6d43c05c219745fc470130b6d660c38f4a1f5ac63b375cf7f50e2fb","ssdeep":"","tlshash":"53e0ed5f8f8ca3ae0a0081480f0ff1204bec22be328d49e0b40e4262fa15003cebbb00","first_seen":"2026-06-02T11:25:05.361903Z","last_seen":"2026-06-20T03:56:24.614623Z","times_seen":3,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"ledgerlive.claims","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerlive.claims/assets/xrp-DMPq0QJL.png","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ledgerlive.claims/","date":"2026-06-20T03:55:58.428Z","timestamp":1781927758428,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerlive.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 22:16:05 GMT","end":"Wed, 26 Aug 2026 23:15:56 GMT"},"fingerprint":{"sha1":"0C:C1:98:9B:90:8D:3F:38:46:8A:AA:BE:E8:2E:2F:32:38:33:54:64","sha256":"42:E3:47:BF:EB:8A:FB:13:3C:3A:AF:01:4E:71:AA:CC:FA:8F:D7:C7:2A:EE:08:0D:AF:0B:0E:3F:D4:A5:F2:FE"}}},"request":{"raw":"GET /assets/xrp-DMPq0QJL.png HTTP/1.1\r\nHost: ledgerlive.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgerlive.claims/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1; __cf_bm=kmTXkmOqh7m9MiJQL.l34fg9BHeE.0CBY5e7o451boo-1781927757.2893255-1.0.1.1-GiAgwBhfIirvEc0Jsc95UKdGJNTAo.Npw1F50PMxBiYjaSg2oQQV_5co5iMfCX3F8OhuaiGbGE4LmdSloygvVv0oGsFAMD3vhLeLKI.egLenVNYMY3IB8m7.A2YyntXD\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 03:55:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 15820\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1\r\nserver: cloudflare\r\ncf-ray: a0e7d74a2f38712b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15820,"size_decoded":16272,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"a8f7fe92f6bbe76324b52dd6e2ff5c3a","sha1":"8e5bd6a9cf9ec9ab7429ffb381e382082c407ba1","sha256":"7510dfa13db54cddc3cbe8ad6ba477fe9fcd7089ae13dca1d210f2ad2c928f96","sha512":"706b6c29080e8ee915d69109709f27bcca4e9f4571edcb0b19fd940805d3503c0676f2124f1de5cd038a0de82f1c6310addd7d17935a9ad07e642188e1bf7018","ssdeep":"384:G0otip3TPw4aFI7ezutrFZNwuqHjJFQzF:GzK3TPYFIHNw5JOp","tlshash":"b3624b13cd489283a12c57fcbc1b0eb82e5e575ce9962bff04721ecb7d11a261c9b51a","first_seen":"2026-06-02T11:25:05.371115Z","last_seen":"2026-06-20T03:56:24.615212Z","times_seen":3,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"ledgerlive.claims","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerlive.claims/assets/styles-CS5R75Kr.css","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledgerlive.claims/","date":"2026-06-20T03:55:58.216Z","timestamp":1781927758216,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerlive.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 22:16:05 GMT","end":"Wed, 26 Aug 2026 23:15:56 GMT"},"fingerprint":{"sha1":"0C:C1:98:9B:90:8D:3F:38:46:8A:AA:BE:E8:2E:2F:32:38:33:54:64","sha256":"42:E3:47:BF:EB:8A:FB:13:3C:3A:AF:01:4E:71:AA:CC:FA:8F:D7:C7:2A:EE:08:0D:AF:0B:0E:3F:D4:A5:F2:FE"}}},"request":{"raw":"GET /assets/styles-CS5R75Kr.css HTTP/1.1\r\nHost: ledgerlive.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgerlive.claims/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1; __cf_bm=kmTXkmOqh7m9MiJQL.l34fg9BHeE.0CBY5e7o451boo-1781927757.2893255-1.0.1.1-GiAgwBhfIirvEc0Jsc95UKdGJNTAo.Npw1F50PMxBiYjaSg2oQQV_5co5iMfCX3F8OhuaiGbGE4LmdSloygvVv0oGsFAMD3vhLeLKI.egLenVNYMY3IB8m7.A2YyntXD\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 03:55:58 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0e7d748deac712b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129661,"size_decoded":19465,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f5cedd2d206cd2c9d5ccfdc9de9b8584","sha1":"e8dc89ac33d7283ec0c091b3eddcc70abf531891","sha256":"f28f8a5404988d40a749b04165ea4e95b33d84c85bc9552ed98d005b0224def0","sha512":"c1940fea56281a001897c40d8357b2403cb8a4f6772e30e26c6f08cef923091185d7f58f97e878f72a441a885715a5b0a5dbb38318494d0215b3b8d87f7daddd","ssdeep":"3072:nKOHWYEhj4h+g5V14p4yfRusqBMSKPsEpNeEWJujMq+WDhhJJ:nKOHWYEhj4h+g5V14p4yfRusqBMSKPsC","tlshash":"6cc3a3a0f178e47f7c23b4fdd38ca89ca509b0d5dd2647e8ba95522213d37f29c66908","first_seen":"2026-06-02T11:25:05.376499Z","last_seen":"2026-06-20T03:56:24.615873Z","times_seen":3,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"ledgerlive.claims","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerlive.claims/assets/createLucideIcon-BjPl3FwG.js","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgerlive.claims/","date":"2026-06-20T03:55:58.226Z","timestamp":1781927758226,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerlive.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 22:16:05 GMT","end":"Wed, 26 Aug 2026 23:15:56 GMT"},"fingerprint":{"sha1":"0C:C1:98:9B:90:8D:3F:38:46:8A:AA:BE:E8:2E:2F:32:38:33:54:64","sha256":"42:E3:47:BF:EB:8A:FB:13:3C:3A:AF:01:4E:71:AA:CC:FA:8F:D7:C7:2A:EE:08:0D:AF:0B:0E:3F:D4:A5:F2:FE"}}},"request":{"raw":"GET /assets/createLucideIcon-BjPl3FwG.js HTTP/1.1\r\nHost: ledgerlive.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgerlive.claims/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1; __cf_bm=kmTXkmOqh7m9MiJQL.l34fg9BHeE.0CBY5e7o451boo-1781927757.2893255-1.0.1.1-GiAgwBhfIirvEc0Jsc95UKdGJNTAo.Npw1F50PMxBiYjaSg2oQQV_5co5iMfCX3F8OhuaiGbGE4LmdSloygvVv0oGsFAMD3vhLeLKI.egLenVNYMY3IB8m7.A2YyntXD\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 03:55:58 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0e7d748eeb4712b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1202,"size_decoded":1165,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1201)","md5":"f29b914520c1440f9f3a90c34e8c6ddd","sha1":"796a48cbdd594e5ee21dec33d432545d8e2442bd","sha256":"3d0930499edcebd7b206e2fdb9317dbc5bf5dec22dfe6d8dd014f14609e6b5bb","sha512":"d99c4576ef02f523e9d776041a84dfec74309aba1dfabdca34f59958c750e666fb489f452532a3412b02bb408a67ca3faffdcce530f7a14eabd367dd132a398d","ssdeep":"","tlshash":"22214108b3d5283ca23584cd97983069ec779a28f9675a58d2fc5d2a7623042a337acc","first_seen":"2026-06-02T11:25:05.360235Z","last_seen":"2026-06-20T03:56:24.617204Z","times_seen":3,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"ledgerlive.claims","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerlive.claims/assets/bnb-D9TcFN3B.png","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ledgerlive.claims/","date":"2026-06-20T03:55:58.425Z","timestamp":1781927758425,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerlive.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 22:16:05 GMT","end":"Wed, 26 Aug 2026 23:15:56 GMT"},"fingerprint":{"sha1":"0C:C1:98:9B:90:8D:3F:38:46:8A:AA:BE:E8:2E:2F:32:38:33:54:64","sha256":"42:E3:47:BF:EB:8A:FB:13:3C:3A:AF:01:4E:71:AA:CC:FA:8F:D7:C7:2A:EE:08:0D:AF:0B:0E:3F:D4:A5:F2:FE"}}},"request":{"raw":"GET /assets/bnb-D9TcFN3B.png HTTP/1.1\r\nHost: ledgerlive.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgerlive.claims/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1; __cf_bm=kmTXkmOqh7m9MiJQL.l34fg9BHeE.0CBY5e7o451boo-1781927757.2893255-1.0.1.1-GiAgwBhfIirvEc0Jsc95UKdGJNTAo.Npw1F50PMxBiYjaSg2oQQV_5co5iMfCX3F8OhuaiGbGE4LmdSloygvVv0oGsFAMD3vhLeLKI.egLenVNYMY3IB8m7.A2YyntXD\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 03:55:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 11382\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1\r\nserver: cloudflare\r\ncf-ray: a0e7d74a2f35712b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11382,"size_decoded":11834,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"e694e228398678464078671742f28c91","sha1":"d3b9127ed55e9d0f3ecfc7325f31509e105f2cd8","sha256":"4963f6b899b9a125ffc3eb9318d8c484ad0a2508e4b053e43f55a8c87b9d11af","sha512":"65b072e1588cf892b5dbf91fbd90145fbbbce754d9d11206e454e88407eb4ed59a95bc391d8b63601bdbd1025908bd5500e8a180aced766853507c4f86cf3cef","ssdeep":"192:LSBZJfrC0DuDELKQb6J/Yc/QPqlUsCmqF0PYU8e9Zkpu5orZ0:GzJfrPqwIJwc/0q+Pe4u5IZ0","tlshash":"cf325e578d088b97f92892d0be071e9d6f062b4ce8967aff01534ecb3920b351d8d06e","first_seen":"2026-06-02T11:25:05.368418Z","last_seen":"2026-06-20T03:56:24.617692Z","times_seen":3,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"ledgerlive.claims","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerlive.claims/assets/solana-C3aMQ0We.png","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ledgerlive.claims/","date":"2026-06-20T03:55:58.430Z","timestamp":1781927758430,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerlive.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 22:16:05 GMT","end":"Wed, 26 Aug 2026 23:15:56 GMT"},"fingerprint":{"sha1":"0C:C1:98:9B:90:8D:3F:38:46:8A:AA:BE:E8:2E:2F:32:38:33:54:64","sha256":"42:E3:47:BF:EB:8A:FB:13:3C:3A:AF:01:4E:71:AA:CC:FA:8F:D7:C7:2A:EE:08:0D:AF:0B:0E:3F:D4:A5:F2:FE"}}},"request":{"raw":"GET /assets/solana-C3aMQ0We.png HTTP/1.1\r\nHost: ledgerlive.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgerlive.claims/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1; __cf_bm=kmTXkmOqh7m9MiJQL.l34fg9BHeE.0CBY5e7o451boo-1781927757.2893255-1.0.1.1-GiAgwBhfIirvEc0Jsc95UKdGJNTAo.Npw1F50PMxBiYjaSg2oQQV_5co5iMfCX3F8OhuaiGbGE4LmdSloygvVv0oGsFAMD3vhLeLKI.egLenVNYMY3IB8m7.A2YyntXD\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 03:55:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 24260\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1\r\nserver: cloudflare\r\ncf-ray: a0e7d74a3f39712b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24260,"size_decoded":24712,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"29344b9899225cf7c452db40cd191e01","sha1":"446321afe3e39b362e78af6e8740b784a4b5ef84","sha256":"c7fe7fcbfde7aa5c9da946d256ecd1ef43a2940d0c6fa23f038c4f5e06116645","sha512":"369b9d5d86909179a812675031fb3568f6b7555e31f9a6f0360fc9115ad0c090a5c9f4d7f56be9f29d71fd955da40c8fb81d03c45a955a00d52f894c06228ea2","ssdeep":"384:GIoFqCP5Am+fdImkCqz7IeuVsCHrhNHVtCICUBGKe/Yf83Eal2/8ll7YXpM2XJPK:GIA9+PkHTFCHr3nDlBGKkYU3EGr7YhJ+","tlshash":"8cb2e1c7cb6467c3e3120f91ec494d186322921c5cb2797d0993ddd76ed09b019ae9be","first_seen":"2026-06-02T11:25:05.370001Z","last_seen":"2026-06-20T03:56:24.61856Z","times_seen":3,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"ledgerlive.claims","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerlive.claims/assets/tron-LtZT9nwY.png","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ledgerlive.claims/","date":"2026-06-20T03:55:58.443Z","timestamp":1781927758443,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerlive.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 22:16:05 GMT","end":"Wed, 26 Aug 2026 23:15:56 GMT"},"fingerprint":{"sha1":"0C:C1:98:9B:90:8D:3F:38:46:8A:AA:BE:E8:2E:2F:32:38:33:54:64","sha256":"42:E3:47:BF:EB:8A:FB:13:3C:3A:AF:01:4E:71:AA:CC:FA:8F:D7:C7:2A:EE:08:0D:AF:0B:0E:3F:D4:A5:F2:FE"}}},"request":{"raw":"GET /assets/tron-LtZT9nwY.png HTTP/1.1\r\nHost: ledgerlive.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgerlive.claims/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1; __cf_bm=kmTXkmOqh7m9MiJQL.l34fg9BHeE.0CBY5e7o451boo-1781927757.2893255-1.0.1.1-GiAgwBhfIirvEc0Jsc95UKdGJNTAo.Npw1F50PMxBiYjaSg2oQQV_5co5iMfCX3F8OhuaiGbGE4LmdSloygvVv0oGsFAMD3vhLeLKI.egLenVNYMY3IB8m7.A2YyntXD\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 03:55:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 14758\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1\r\nserver: cloudflare\r\ncf-ray: a0e7d74a4f46712b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14758,"size_decoded":15210,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"4c7d0ec30108c32b29a149707f71d101","sha1":"e1b804bc6e3b70cb03a3254c9ddd82ec59dfa747","sha256":"45d732f0a4a199268b5573c4d968089d4861c66cd0451f71d208ef5962aa90d4","sha512":"ba7b52ed4e306657080e8206d800e9837fa4ca3b69c04afbc0a1f8f560ff4af69e94a100c586e8603a5c8faa1ec40792dfa012da835c9c3a6cf5ba9e41c19737","ssdeep":"192:LSIfDAd5osSyQesUBLrUbgQlLgsDmTjgKJhkflUI6qwPP9nzTIXXK2PAL+nw0271:Gbo54BeMVXgnyZIX3wrSJm","tlshash":"a162be0bdf129da2e64a4bf4fd536c897a65b32d7c433bb41026dd8b6e50c628c1d178","first_seen":"2026-06-02T11:25:05.377816Z","last_seen":"2026-06-20T03:56:24.619889Z","times_seen":3,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"ledgerlive.claims","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerlive.claims/assets/index-CXUPU8ri.js","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgerlive.claims/","date":"2026-06-20T03:55:58.218Z","timestamp":1781927758218,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerlive.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 22:16:05 GMT","end":"Wed, 26 Aug 2026 23:15:56 GMT"},"fingerprint":{"sha1":"0C:C1:98:9B:90:8D:3F:38:46:8A:AA:BE:E8:2E:2F:32:38:33:54:64","sha256":"42:E3:47:BF:EB:8A:FB:13:3C:3A:AF:01:4E:71:AA:CC:FA:8F:D7:C7:2A:EE:08:0D:AF:0B:0E:3F:D4:A5:F2:FE"}}},"request":{"raw":"GET /assets/index-CXUPU8ri.js HTTP/1.1\r\nHost: ledgerlive.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgerlive.claims/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1; __cf_bm=kmTXkmOqh7m9MiJQL.l34fg9BHeE.0CBY5e7o451boo-1781927757.2893255-1.0.1.1-GiAgwBhfIirvEc0Jsc95UKdGJNTAo.Npw1F50PMxBiYjaSg2oQQV_5co5iMfCX3F8OhuaiGbGE4LmdSloygvVv0oGsFAMD3vhLeLKI.egLenVNYMY3IB8m7.A2YyntXD\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 03:55:58 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0e7d748deae712b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":608277,"size_decoded":179732,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (40778)","md5":"1056d03daacbb1e59d92e02095c2c5bf","sha1":"54b28dc2e4bb2e79f031a8cac64bf086976e874a","sha256":"1dea22351107b7f1c466dccf3b52d7d38fb31593b71f25acafe5bee9af255999","sha512":"cf9a42ad8fc6441731516223a25b3bf1227a5034e0a927bdbb56a5016658582c88be4ab444158b56894ff7ae990d5229dae71f34c9bc7828bda670d2605d58a5","ssdeep":"12288:0LRqhuIHa0/10uW0lymJXUGDPI9OHgtZi2w1wlq:0mhHaY0urlymJXG95w1wU","tlshash":"54d46dd472aaa1220bd345e0907f1103f2382916780c8464f66cddef7ab5949e67bfbd","first_seen":"2026-06-02T11:25:05.372472Z","last_seen":"2026-06-20T03:56:24.620724Z","times_seen":3,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"ledgerlive.claims","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerlive.claims/assets/ledger-live-wallet-logo-zmEiOuAJ.js","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgerlive.claims/","date":"2026-06-20T03:55:58.222Z","timestamp":1781927758222,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerlive.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 22:16:05 GMT","end":"Wed, 26 Aug 2026 23:15:56 GMT"},"fingerprint":{"sha1":"0C:C1:98:9B:90:8D:3F:38:46:8A:AA:BE:E8:2E:2F:32:38:33:54:64","sha256":"42:E3:47:BF:EB:8A:FB:13:3C:3A:AF:01:4E:71:AA:CC:FA:8F:D7:C7:2A:EE:08:0D:AF:0B:0E:3F:D4:A5:F2:FE"}}},"request":{"raw":"GET /assets/ledger-live-wallet-logo-zmEiOuAJ.js HTTP/1.1\r\nHost: ledgerlive.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgerlive.claims/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1; __cf_bm=kmTXkmOqh7m9MiJQL.l34fg9BHeE.0CBY5e7o451boo-1781927757.2893255-1.0.1.1-GiAgwBhfIirvEc0Jsc95UKdGJNTAo.Npw1F50PMxBiYjaSg2oQQV_5co5iMfCX3F8OhuaiGbGE4LmdSloygvVv0oGsFAMD3vhLeLKI.egLenVNYMY3IB8m7.A2YyntXD\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 03:55:58 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0e7d748eeb2712b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3281,"size_decoded":3003,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3280)","md5":"3dbf3d1f9edece9f3b4e4e6c2889235d","sha1":"5a4e081266b4f78f515f13b1cca4b15097c85310","sha256":"4362c5f87dbc2c87dda870d60b2cd278b4e1e98eec0456577a54961ee8b395fa","sha512":"bd66f08f67552519e027f1214a25e387ca817da5f261fa9e091db2868bc314567c5510bf9ddf968598433627056ac6be867fa68848c4ea1f7dd0737eaee1eea9","ssdeep":"","tlshash":"7d615a782758edd283290ced09e516cffd98841531ea2042df1582b87deb6fe72c8660","first_seen":"2026-06-02T11:25:05.346113Z","last_seen":"2026-06-20T03:56:24.621727Z","times_seen":3,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"ledgerlive.claims","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerlive.claims/assets/cardano-Cw5yxUbU.png","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ledgerlive.claims/","date":"2026-06-20T03:55:58.432Z","timestamp":1781927758432,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerlive.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 22:16:05 GMT","end":"Wed, 26 Aug 2026 23:15:56 GMT"},"fingerprint":{"sha1":"0C:C1:98:9B:90:8D:3F:38:46:8A:AA:BE:E8:2E:2F:32:38:33:54:64","sha256":"42:E3:47:BF:EB:8A:FB:13:3C:3A:AF:01:4E:71:AA:CC:FA:8F:D7:C7:2A:EE:08:0D:AF:0B:0E:3F:D4:A5:F2:FE"}}},"request":{"raw":"GET /assets/cardano-Cw5yxUbU.png HTTP/1.1\r\nHost: ledgerlive.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgerlive.claims/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1; __cf_bm=kmTXkmOqh7m9MiJQL.l34fg9BHeE.0CBY5e7o451boo-1781927757.2893255-1.0.1.1-GiAgwBhfIirvEc0Jsc95UKdGJNTAo.Npw1F50PMxBiYjaSg2oQQV_5co5iMfCX3F8OhuaiGbGE4LmdSloygvVv0oGsFAMD3vhLeLKI.egLenVNYMY3IB8m7.A2YyntXD\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 03:55:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 12296\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1\r\nserver: cloudflare\r\ncf-ray: a0e7d74a3f3a712b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12296,"size_decoded":12748,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"715c49e729ff73f1cae6085de62d71ce","sha1":"96c7f5c98759f313a1685ad372cf89263ddb01ef","sha256":"8001cbe96b2346702d40ff506fb1423993281f7d50fc1e430d1789e917b2be4f","sha512":"aac730cb46179c7954346083e9de938088d9acbee9703ab9531e0b161b35ced25b3fad218ed048f09870601c77c6d360b25f4b594cd79d9a00012d3a5171efa2","ssdeep":"192:LSN4o0rfmqA7DQvmNwtmvzptrS2USda5hf/evIuZAjl9VXo4zaHbj1ePnpnjQsA5:GD0rOVDom5bjrSMyiL7Jcjnhsx","tlshash":"8d428e0b4c144b83e92292fcad269ddf66053b0dfad236fb72a35f573820e358858074","first_seen":"2026-06-02T11:25:05.356005Z","last_seen":"2026-06-20T03:56:24.622225Z","times_seen":3,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"ledgerlive.claims","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerlive.claims/__l5e/trackevents","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://ledgerlive.claims/","date":"2026-06-20T03:55:58.765Z","timestamp":1781927758765,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerlive.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 22:16:05 GMT","end":"Wed, 26 Aug 2026 23:15:56 GMT"},"fingerprint":{"sha1":"0C:C1:98:9B:90:8D:3F:38:46:8A:AA:BE:E8:2E:2F:32:38:33:54:64","sha256":"42:E3:47:BF:EB:8A:FB:13:3C:3A:AF:01:4E:71:AA:CC:FA:8F:D7:C7:2A:EE:08:0D:AF:0B:0E:3F:D4:A5:F2:FE"}}},"request":{"raw":"POST /__l5e/trackevents HTTP/1.1\r\nHost: ledgerlive.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgerlive.claims/\r\nContent-Type: application/json\r\nContent-Length: 2887\r\nOrigin: https://ledgerlive.claims\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1; __cf_bm=kmTXkmOqh7m9MiJQL.l34fg9BHeE.0CBY5e7o451boo-1781927757.2893255-1.0.1.1-GiAgwBhfIirvEc0Jsc95UKdGJNTAo.Npw1F50PMxBiYjaSg2oQQV_5co5iMfCX3F8OhuaiGbGE4LmdSloygvVv0oGsFAMD3vhLeLKI.egLenVNYMY3IB8m7.A2YyntXD; session-id=24cfe4b0-5b2d-4f19-8c8d-a28a1e606a4c\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 202 \r\ndate: Sat, 20 Jun 2026 03:55:58 GMT\r\ncontent-type: application/json\r\ncontent-length: 17\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a0e7d74c4800712b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17,"size_decoded":338,"mime_type":"application/json","magic":"JSON text data","md5":"1125b91815c32790c1b224791b9d70fc","sha1":"becba42c161d72b4b90cfae9c81fc971e6803870","sha256":"11a49f853eb8befe94fef278d487125cd20930b9e41c4c0934394443e7f00878","sha512":"84bd85e5b348d7d910df3525a8d57ec6da3c8afaae5248e5c4bb81644e56c6c4d052046c4be3c069d9d234b52e24a02dc829cd17a179d3f9fc2a76c735c0e46d","ssdeep":"","tlshash":"e56000022a0008a08080008002002ba28000203000203088c00a200000a28000008002","first_seen":"2025-07-06T07:47:53.239897Z","last_seen":"2026-07-15T08:50:40.291378Z","times_seen":3710,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"ledgerlive.claims","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerlive.claims/","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-20T03:55:56.863Z","timestamp":1781927756863,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerlive.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 22:16:05 GMT","end":"Wed, 26 Aug 2026 23:15:56 GMT"},"fingerprint":{"sha1":"0C:C1:98:9B:90:8D:3F:38:46:8A:AA:BE:E8:2E:2F:32:38:33:54:64","sha256":"42:E3:47:BF:EB:8A:FB:13:3C:3A:AF:01:4E:71:AA:CC:FA:8F:D7:C7:2A:EE:08:0D:AF:0B:0E:3F:D4:A5:F2:FE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ledgerlive.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 03:55:57 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, must-revalidate, max-age=0\r\nx-deployment-id: 9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __dpl=9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1; Path=/; Max-Age=86400; SameSite=Lax; Secure\n__cf_bm=kmTXkmOqh7m9MiJQL.l34fg9BHeE.0CBY5e7o451boo-1781927757.2893255-1.0.1.1-GiAgwBhfIirvEc0Jsc95UKdGJNTAo.Npw1F50PMxBiYjaSg2oQQV_5co5iMfCX3F8OhuaiGbGE4LmdSloygvVv0oGsFAMD3vhLeLKI.egLenVNYMY3IB8m7.A2YyntXD; HttpOnly; SameSite=None; Secure; Path=/; Domain=ledgerlive.claims; Expires=Sat, 20 Jun 2026 04:25:57 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0e7d7430c9f712b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84255,"size_decoded":46739,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"b087f8a7afd655d929e3f297a8df6eae","sha1":"a98795291a8d75e031eb48155964bcd4a09d3b7b","sha256":"42585618a1ddeb13a452dd77671c1f764231ddc193183b53f33b21e83c92b100","sha512":"44fb8238c66cd8fa7ecd0f4b600cafeb5297d167ad7c5516715f1736acbfc548a0fcd340e32d650e850e37df2bd51f9a60f631ab75efd108f86a0ec7b64c2a7b","ssdeep":"1536:7d8jOP8fbPzwvE/6QZ06qUlAEd3wGd2UpKGKbPzwvE/6QZ06qUlAEd3wGd2UpKGj:7d8jO0TrGRQZLlXd3DNpKGerGRQZLlXv","tlshash":"9b836c3127450e3aa11386b8b091bb58ee9d9b46d86e732df7ec40b2368be51cd57780","first_seen":"2026-06-20T03:56:24.623986Z","last_seen":"2026-06-20T03:56:24.623986Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1127,"timings":{"blocked":-1,"dns":382,"connect":7,"send":0,"wait":705,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"ledgerlive.claims","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerlive.claims/assets/button-BxOHUvUX.js","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgerlive.claims/","date":"2026-06-20T03:55:58.221Z","timestamp":1781927758221,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerlive.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 22:16:05 GMT","end":"Wed, 26 Aug 2026 23:15:56 GMT"},"fingerprint":{"sha1":"0C:C1:98:9B:90:8D:3F:38:46:8A:AA:BE:E8:2E:2F:32:38:33:54:64","sha256":"42:E3:47:BF:EB:8A:FB:13:3C:3A:AF:01:4E:71:AA:CC:FA:8F:D7:C7:2A:EE:08:0D:AF:0B:0E:3F:D4:A5:F2:FE"}}},"request":{"raw":"GET /assets/button-BxOHUvUX.js HTTP/1.1\r\nHost: ledgerlive.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgerlive.claims/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1; __cf_bm=kmTXkmOqh7m9MiJQL.l34fg9BHeE.0CBY5e7o451boo-1781927757.2893255-1.0.1.1-GiAgwBhfIirvEc0Jsc95UKdGJNTAo.Npw1F50PMxBiYjaSg2oQQV_5co5iMfCX3F8OhuaiGbGE4LmdSloygvVv0oGsFAMD3vhLeLKI.egLenVNYMY3IB8m7.A2YyntXD\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 03:55:58 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0e7d748eeb1712b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30677,"size_decoded":10428,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (30676)","md5":"d8b82fded3ff723c2a77b394e1437837","sha1":"efcda299e9a8a2074b7eea496499166aa43c0679","sha256":"c5e509058f8d7bb07fb2e2e7f4e37f777859e27ac8ec900d01a3d126577612d4","sha512":"e81e3471d4cb6808759c424e1cee5d60c20676ff7689c9e7bab1066316fb94a7fed7b8c971c68fc6950d47c87adef360651ebac4f1f5a3b0c9e605672558259e","ssdeep":"768:7HJSIuCD8vnaxabmty5Hcj9vHMWdJK/4YL:TDDgcj9MWdJK/B","tlshash":"5dd2e925b547017e1aef93d7f06caea5d9392b02e0098b48f39b4f358b497e81157b0d","first_seen":"2026-06-02T11:25:05.358364Z","last_seen":"2026-06-20T03:56:24.624891Z","times_seen":3,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"ledgerlive.claims","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerlive.claims/__l5e/events.js","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgerlive.claims/","date":"2026-06-20T03:55:58.236Z","timestamp":1781927758236,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerlive.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 22:16:05 GMT","end":"Wed, 26 Aug 2026 23:15:56 GMT"},"fingerprint":{"sha1":"0C:C1:98:9B:90:8D:3F:38:46:8A:AA:BE:E8:2E:2F:32:38:33:54:64","sha256":"42:E3:47:BF:EB:8A:FB:13:3C:3A:AF:01:4E:71:AA:CC:FA:8F:D7:C7:2A:EE:08:0D:AF:0B:0E:3F:D4:A5:F2:FE"}}},"request":{"raw":"GET /__l5e/events.js HTTP/1.1\r\nHost: ledgerlive.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgerlive.claims/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1; __cf_bm=kmTXkmOqh7m9MiJQL.l34fg9BHeE.0CBY5e7o451boo-1781927757.2893255-1.0.1.1-GiAgwBhfIirvEc0Jsc95UKdGJNTAo.Npw1F50PMxBiYjaSg2oQQV_5co5iMfCX3F8OhuaiGbGE4LmdSloygvVv0oGsFAMD3vhLeLKI.egLenVNYMY3IB8m7.A2YyntXD\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 03:55:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncache-control: no-store\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0e7d748febd712b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44148,"size_decoded":9969,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (356)","md5":"4984c751409f378613ce4a697469eb54","sha1":"db702076417754abd5497526bb2d4326d3fc9594","sha256":"48b09309d5c937dcd3d62ffd10b47d9d4ed5926f6b96cdcdefa63099e84818fa","sha512":"32420a4ba8bc56dadddd982b9bb39cd56fc15249f7a6962f0f606a84681be20e5006554354eb317c0b5f44fa495a08a5ccffb42abbd8bdeeb4febb6530d6e393","ssdeep":"768:5+rVEje/DCjA89Huk/sk4S58W45XKxNAOtXVltoaSeSzc4R4jgcFykJ8X/cpCgAd:5buk/sk4S6etgYrXBfOVEkZovhfi7","tlshash":"aa13728878f714a30163917e5b9b810236349587354adfa4beac4d0a2fcd658e6f3fc9","first_seen":"2026-06-16T13:38:26.366748Z","last_seen":"2026-07-15T08:50:40.276325Z","times_seen":2642,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"ledgerlive.claims","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerlive.claims/assets/dogecoin-exFJjAnO.png","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ledgerlive.claims/","date":"2026-06-20T03:55:58.433Z","timestamp":1781927758433,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerlive.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 22:16:05 GMT","end":"Wed, 26 Aug 2026 23:15:56 GMT"},"fingerprint":{"sha1":"0C:C1:98:9B:90:8D:3F:38:46:8A:AA:BE:E8:2E:2F:32:38:33:54:64","sha256":"42:E3:47:BF:EB:8A:FB:13:3C:3A:AF:01:4E:71:AA:CC:FA:8F:D7:C7:2A:EE:08:0D:AF:0B:0E:3F:D4:A5:F2:FE"}}},"request":{"raw":"GET /assets/dogecoin-exFJjAnO.png HTTP/1.1\r\nHost: ledgerlive.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgerlive.claims/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1; __cf_bm=kmTXkmOqh7m9MiJQL.l34fg9BHeE.0CBY5e7o451boo-1781927757.2893255-1.0.1.1-GiAgwBhfIirvEc0Jsc95UKdGJNTAo.Npw1F50PMxBiYjaSg2oQQV_5co5iMfCX3F8OhuaiGbGE4LmdSloygvVv0oGsFAMD3vhLeLKI.egLenVNYMY3IB8m7.A2YyntXD\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 03:55:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 18049\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1\r\nserver: cloudflare\r\ncf-ray: a0e7d74a3f3c712b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18049,"size_decoded":18501,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"a28f067b8f001a3116d5058acb69361a","sha1":"e320d11193e9881fa6dc982aaeb470769f0308fe","sha256":"ffc829f73b8f91b588cb109cfc405c786eeac91a950192bfc705b7d2b1028a6d","sha512":"6d691c784f80d40cb36a4d1a4fbba98edfb21b681a71aa9fe8390c4e8919e7be81bdeb76989d7f60b9ab0180a7ef5186f81896f38cc2e3672be6e8adc6bd0c68","ssdeep":"384:GhsY8U/9wP+lu9DDXO0UgGeDxpencXNCGlIT9Lfoq1SMza1sAe:GKYDqWKOLokcXNN6T9kqb1F","tlshash":"a0822a178c084b82e61883f9be931d685f0a4758f5d77eff40670edbaa00b625c8e52d","first_seen":"2026-06-02T11:25:05.365117Z","last_seen":"2026-06-20T03:56:24.626271Z","times_seen":3,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"ledgerlive.claims","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerlive.claims/assets/polygon-DNicJzP8.png","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ledgerlive.claims/","date":"2026-06-20T03:55:58.446Z","timestamp":1781927758446,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerlive.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 22:16:05 GMT","end":"Wed, 26 Aug 2026 23:15:56 GMT"},"fingerprint":{"sha1":"0C:C1:98:9B:90:8D:3F:38:46:8A:AA:BE:E8:2E:2F:32:38:33:54:64","sha256":"42:E3:47:BF:EB:8A:FB:13:3C:3A:AF:01:4E:71:AA:CC:FA:8F:D7:C7:2A:EE:08:0D:AF:0B:0E:3F:D4:A5:F2:FE"}}},"request":{"raw":"GET /assets/polygon-DNicJzP8.png HTTP/1.1\r\nHost: ledgerlive.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgerlive.claims/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1; __cf_bm=kmTXkmOqh7m9MiJQL.l34fg9BHeE.0CBY5e7o451boo-1781927757.2893255-1.0.1.1-GiAgwBhfIirvEc0Jsc95UKdGJNTAo.Npw1F50PMxBiYjaSg2oQQV_5co5iMfCX3F8OhuaiGbGE4LmdSloygvVv0oGsFAMD3vhLeLKI.egLenVNYMY3IB8m7.A2YyntXD\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 03:55:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 7260\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1\r\nserver: cloudflare\r\ncf-ray: a0e7d74a4f49712b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7260,"size_decoded":7711,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"2ddb4da97b927eb3f714c51bf1275783","sha1":"5cb94102ca9870c6c562d6c8263bc9914463bb94","sha256":"277f29d8665c3fb9d9d415ba6c87bf340a5784269a617141bfcac6e713572d05","sha512":"4c0a1ed9cf7553402451cf8a9013c410f03580dccda5d0516d97ad3ede868ae85ebe6a4259202d3244fef4ecb67c4b395cefaa6ba3a718b79b28e598496a001e","ssdeep":"96:RhSEusoB7MVOpzTm7uW8d+TcaHxrddTw1P4lQvAS0OGHmVP698fwQ1HBemtSn:LSPsC7qOSuW8ERR3E1POeVPzFcxn","tlshash":"88e197078d0d4693f61957fcfe030dad6a0a2a4df9933bfe55264ecb3d209664c4a07a","first_seen":"2026-06-02T11:25:05.378972Z","last_seen":"2026-06-20T03:56:24.627243Z","times_seen":3,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"ledgerlive.claims","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerlive.claims/favicon.ico","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgerlive.claims/","date":"2026-06-20T03:55:58.534Z","timestamp":1781927758534,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerlive.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 22:16:05 GMT","end":"Wed, 26 Aug 2026 23:15:56 GMT"},"fingerprint":{"sha1":"0C:C1:98:9B:90:8D:3F:38:46:8A:AA:BE:E8:2E:2F:32:38:33:54:64","sha256":"42:E3:47:BF:EB:8A:FB:13:3C:3A:AF:01:4E:71:AA:CC:FA:8F:D7:C7:2A:EE:08:0D:AF:0B:0E:3F:D4:A5:F2:FE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ledgerlive.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgerlive.claims/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1; __cf_bm=kmTXkmOqh7m9MiJQL.l34fg9BHeE.0CBY5e7o451boo-1781927757.2893255-1.0.1.1-GiAgwBhfIirvEc0Jsc95UKdGJNTAo.Npw1F50PMxBiYjaSg2oQQV_5co5iMfCX3F8OhuaiGbGE4LmdSloygvVv0oGsFAMD3vhLeLKI.egLenVNYMY3IB8m7.A2YyntXD\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 03:55:58 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0e7d74adf84712b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38694,"size_decoded":39148,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"f6a8ef1e23a937d883cb4c65133f3684","sha1":"44de816a6d84df2a07c4964d252bbc4c0a9c606d","sha256":"23efe16325e5bd408141b6853f284c52ec6ec4d60f47d0e4ac4012a2d7af694b","sha512":"fd9bd2dea34b2b71503464d9fd4d4877a801e8415e77c12480c2c26455129832b2b4e9544f185f2beaef408cae5b5020cdb025109693272e3bdfd676a55baab7","ssdeep":"768:X2e+8thBI7QcU8XPxES9AD/I/QpC586s3jA0cIwJX16SH:znBsECxES9ArI+o8/zcTOSH","tlshash":"7803e1b386b5a8a8a034c3badf120916a8d3f0d7bc4d678754315af67438dc75e072e2","first_seen":"2026-06-02T11:25:05.366613Z","last_seen":"2026-06-20T03:56:24.627827Z","times_seen":3,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"ledgerlive.claims","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerlive.claims/assets/nzd-DCeCqsXE.js","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgerlive.claims/","date":"2026-06-20T03:55:58.223Z","timestamp":1781927758223,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerlive.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 22:16:05 GMT","end":"Wed, 26 Aug 2026 23:15:56 GMT"},"fingerprint":{"sha1":"0C:C1:98:9B:90:8D:3F:38:46:8A:AA:BE:E8:2E:2F:32:38:33:54:64","sha256":"42:E3:47:BF:EB:8A:FB:13:3C:3A:AF:01:4E:71:AA:CC:FA:8F:D7:C7:2A:EE:08:0D:AF:0B:0E:3F:D4:A5:F2:FE"}}},"request":{"raw":"GET /assets/nzd-DCeCqsXE.js HTTP/1.1\r\nHost: ledgerlive.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgerlive.claims/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1; __cf_bm=kmTXkmOqh7m9MiJQL.l34fg9BHeE.0CBY5e7o451boo-1781927757.2893255-1.0.1.1-GiAgwBhfIirvEc0Jsc95UKdGJNTAo.Npw1F50PMxBiYjaSg2oQQV_5co5iMfCX3F8OhuaiGbGE4LmdSloygvVv0oGsFAMD3vhLeLKI.egLenVNYMY3IB8m7.A2YyntXD\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 03:55:58 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0e7d748eeb3712b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26045,"size_decoded":19363,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (26044)","md5":"4e92b07cc12e48a2d7ca1190ed1e965b","sha1":"cc17ee8e01abb85c24bb703b43b15dfa3e1f8aa2","sha256":"d9294d197f90720221ccf31d29e69bf6b199e35bae48c5f78cc429b9736cece2","sha512":"99bbe858ad56a8b09b6dc80f5f43c39a442f347b47dca6ee1284731e6a6d3fca1d082707ce6cf6f9d45a9925cae1acf53b9a1b5eb47efc45dbadc8010d5694ec","ssdeep":"768:uSDdTNXQDuD4mwv6h/6QyM6qbuLBZlqnEdWhrwGd2UpuGXZ:xTxzwvE/6QyM6qGlQEdCwGd2UpuGp","tlshash":"0dc2e07f890e8fe18bb43c8924059f544d0e251f0dfe621b2e5a50afb4fc321e61a7a0","first_seen":"2026-06-02T11:25:05.349288Z","last_seen":"2026-06-20T03:56:24.628598Z","times_seen":3,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"ledgerlive.claims","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerlive.claims/~flock.js","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgerlive.claims/","date":"2026-06-20T03:55:58.234Z","timestamp":1781927758234,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerlive.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 22:16:05 GMT","end":"Wed, 26 Aug 2026 23:15:56 GMT"},"fingerprint":{"sha1":"0C:C1:98:9B:90:8D:3F:38:46:8A:AA:BE:E8:2E:2F:32:38:33:54:64","sha256":"42:E3:47:BF:EB:8A:FB:13:3C:3A:AF:01:4E:71:AA:CC:FA:8F:D7:C7:2A:EE:08:0D:AF:0B:0E:3F:D4:A5:F2:FE"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: ledgerlive.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgerlive.claims/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1; __cf_bm=kmTXkmOqh7m9MiJQL.l34fg9BHeE.0CBY5e7o451boo-1781927757.2893255-1.0.1.1-GiAgwBhfIirvEc0Jsc95UKdGJNTAo.Npw1F50PMxBiYjaSg2oQQV_5co5iMfCX3F8OhuaiGbGE4LmdSloygvVv0oGsFAMD3vhLeLKI.egLenVNYMY3IB8m7.A2YyntXD\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 03:55:58 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0e7d748febc712b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21296,"size_decoded":8697,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-07-15T09:37:40.663602Z","times_seen":13514,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"ledgerlive.claims","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerlive.claims/assets/index-Bh2Tyt45.js","fqdn":"ledgerlive.claims","domain":"ledgerlive.claims","tld":"claims"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgerlive.claims/","date":"2026-06-20T03:55:58.219Z","timestamp":1781927758219,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerlive.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 22:16:05 GMT","end":"Wed, 26 Aug 2026 23:15:56 GMT"},"fingerprint":{"sha1":"0C:C1:98:9B:90:8D:3F:38:46:8A:AA:BE:E8:2E:2F:32:38:33:54:64","sha256":"42:E3:47:BF:EB:8A:FB:13:3C:3A:AF:01:4E:71:AA:CC:FA:8F:D7:C7:2A:EE:08:0D:AF:0B:0E:3F:D4:A5:F2:FE"}}},"request":{"raw":"GET /assets/index-Bh2Tyt45.js HTTP/1.1\r\nHost: ledgerlive.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgerlive.claims/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1; __cf_bm=kmTXkmOqh7m9MiJQL.l34fg9BHeE.0CBY5e7o451boo-1781927757.2893255-1.0.1.1-GiAgwBhfIirvEc0Jsc95UKdGJNTAo.Npw1F50PMxBiYjaSg2oQQV_5co5iMfCX3F8OhuaiGbGE4LmdSloygvVv0oGsFAMD3vhLeLKI.egLenVNYMY3IB8m7.A2YyntXD\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 03:55:58 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 9ec4993913e31a007501dc19efc291b69a3d813cdc6921bbc15f77eb5c0c96c1\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0e7d748eeaf712b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9229,"size_decoded":3537,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (9220)","md5":"97b6b6c0dd44ed41034be869f3bd4453","sha1":"00cd9aab975992d34ab938ba2edfcf185835ee84","sha256":"a219818318a2afc8c8803b4622f475d0ffc11c119224fce61f9e5eb937e73593","sha512":"dd7dff80b301a45107c51a58320a63c84d68799537a3611613869837d5c0059d10c08e14eaf6337555181567ecdcb50e4f10494f01491678ca9bd59a064f1ad9","ssdeep":"192:sLvnx4KhEgrkxrHomrJpWQkJ0jQkHtZZGF:ax4KhrrkOmLvk+zZ8","tlshash":"82129629e146bf7dfa1307b9f99fa148b10e4fa4cb3e4575f0bd14211a244967a273c8","first_seen":"2026-06-02T11:25:05.373826Z","last_seen":"2026-06-20T03:56:24.629993Z","times_seen":3,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"ledgerlive.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"ledgerlive.claims","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}