{"report_id":"ac059518-8a9a-412e-8a9d-8b494d6ff9f2","version":0,"status":"done","tags":[],"date":"2026-10-09T17:11:55Z","url":{"schema":"http","addr":"keepers-ledger.com/","fqdn":"keepers-ledger.com","domain":"keepers-ledger.com","tld":"com"},"ip":{"addr":"51.158.144.104","port":0,"asn":12876,"as":"Scaleway SAS","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"keepers-ledger.com/","fqdn":"keepers-ledger.com","domain":"keepers-ledger.com","tld":"com"},"title":"Graveyard Keeper 2 Wiki: Verified Recipes, Guides \u0026 Tools","dom":{"size":49742,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (41058)","md5":"24391e10e169de7c933f34ec4af3d5c6","sha1":"e051747d987dfc1e2ee23780e19e54484b0414a9","sha256":"3706ba9764b40cf9daa35e99089ef76ddde80695888a9d825f140d1da6f3fd3f","sha512":"e0280f52b931e2f0306e98f4ae84e377c4170323aa549339ca4b6cc316c25f833423ad747f7b05785283e2e4b2b0f4e64723e3053d2696996269a053ff9bae3a","ssdeep":"768:goDFQPoxopo/h+lxukzFm8VuuUNVu9dJFL:phQA2eJgukLUNkXl","tlshash":"90236360b3521d3201a742dbe7d60a3ab1d1a30bc76145c96bee4ef17ba6e71773204e","dom_hash":"domhash63b8765742d593347451721e63b02cb9","first_seen":"2026-10-09T15:54:43.412166Z","last_seen":"2026-10-09T17:11:57.266901Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"keepers-ledger.com/","fqdn":"keepers-ledger.com","domain":"keepers-ledger.com","tld":"com"},"ip":{"addr":"51.158.144.104","port":0,"asn":12876,"as":"Scaleway SAS","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-13T17:11:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"keepers-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"keepers-ledger.com","ip":{"addr":"51.158.144.104","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"domain_registered":"2026-10-06","domain_rank":0,"first_seen":"2026-10-09T15:54:38.334808Z","last_seen":"2026-10-09T15:54:38.334808Z","alert_count":27,"request_count":27,"received_data":250560,"sent_data":14231,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Astro:7.3.5","description":"Astro is a new JavaScript-based static site builder.","website":"https://astro.build","common_platform_enumeration":"","icon":"Astro.svg","categories":["Static site generator","JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"keepers-ledger.com/","fqdn":"keepers-ledger.com","domain":"keepers-ledger.com","tld":"com"},"ip":{"addr":"51.158.144.104","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"be53d1e63f12fb7fc10d3641958b9ea0","sha1":"f0395f5e834ab4223a82f815ecfdce7c3d82f52c","sha256":"695f66ede650305cfbe26c4e176384107e08f75b7a3640c0e88711fb7cae84bf","sha512":"8822562985d9ae0a156df2cf4fe00da09b392fb86f04ac39156eebe8e9427361104f37003099ac6a1bb1bec91711440c47efe0b320d1184b217c74021d2ed4d6","ssdeep":"","tlshash":"2cc08cb812874034808a10beaa9aa2a43a3270227199a045ba2c04251fa1ee64322f4a","size":158,"data":"","first_seen":"2026-10-09T15:54:43.681412Z","last_seen":"2026-10-09T17:11:57.293066Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keepers-ledger.com/","fqdn":"keepers-ledger.com","domain":"keepers-ledger.com","tld":"com"},"ip":{"addr":"51.158.144.104","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"66f0817ad0a55b5b0c5f11615ce28e11","sha1":"ac2f309f1051bffb9b7be53a3f0d1c5384ca9f3a","sha256":"f0f72498a10d9348e7c180029e71657b1b6bcda88e81950a1a622f83fca37945","sha512":"fbe3be16a7c2c9ca7fa189114736667cccb12e7eb5eaaa535c8deeef39c23755a49625db7d5cd6d01a019a2c764d3744a0190701c8dd59b452112475bc0e1737","ssdeep":"","tlshash":"ad614f5572bb603204b7a0ef6fef7268681218837585c948bf8c4b012f81e6897f6fc5","size":3431,"data":"","first_seen":"2026-10-09T15:54:43.686979Z","last_seen":"2026-10-09T17:11:57.294309Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keepers-ledger.com/_astro/page.BDh2vuYI.js","fqdn":"keepers-ledger.com","domain":"keepers-ledger.com","tld":"com"},"ip":{"addr":"51.158.144.104","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"85eb455d6c5ed7530a0cc657cb8850e2","sha1":"34b3cf149fd92e81b288a3c62df26cbdc839da05","sha256":"fce9ccf60de44254eba97ea656fca7a30a6777271d9e2d84564c59b6fdef9a35","sha512":"2767decf42711d90e58d9c5190b46a1cf0d54287e9b2cf2dfc037e68d4901f964b25bfa03546d95359eff33c77b08a87a9f8443bebfc7ab1d4459ea2daab365e","ssdeep":"","tlshash":"2f510ea53705a4bf53ab822b91ab91c1b23614c4640a6018b478ada07934ef563f3fde","size":2487,"data":"","first_seen":"2026-09-22T19:35:49.36595Z","last_seen":"2026-10-09T17:11:57.289532Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"keepers-ledger.com/_astro/fairys-swamp-map.DUHoS3QR.png","fqdn":"keepers-ledger.com","domain":"keepers-ledger.com","tld":"com"},"ip":{"addr":"51.158.144.104","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://keepers-ledger.com/","date":"2026-10-09T17:11:26.258Z","timestamp":1791565886258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keepers-ledger.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 12:50:24 GMT","end":"Mon, 04 Jan 2027 12:50:23 GMT"},"fingerprint":{"sha1":"2E:85:FD:A4:C3:22:7F:BF:5B:D1:84:1C:B0:54:CB:59:FF:54:C5:BD","sha256":"D1:56:D7:FE:B8:24:D4:6F:3C:7E:E6:EA:EB:14:D7:03:40:4C:44:31:5C:E7:6F:6F:BF:4A:FF:CC:A1:19:55:BE"}}},"request":{"raw":"GET /_astro/fairys-swamp-map.DUHoS3QR.png HTTP/1.1\r\nHost: keepers-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://keepers-ledger.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/png\r\ndate: Fri, 09 Oct 2026 17:11:26 GMT\r\netag: \"6ac78911-3c8\"\r\nlast-modified: Thu, 08 Oct 2026 12:14:09 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\ncontent-length: 968\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":968,"size_decoded":1433,"mime_type":"image/png","magic":"PNG image data, 31 x 32, 8-bit/color RGBA, non-interlaced","md5":"a7c10623e112771b3609abcb82a7077b","sha1":"324f86f330b71546ff58e34d738f67078d3710a0","sha256":"3019dbc50d2c453f5529b26dd1395e393af7437875ab6b419cf4b1102308788d","sha512":"6b69a13be4ed42ee573e14f20a38031ec15f43d808b13e10fe560c3622a7153a533f12c8ae949e76e81b1ff8332b0018fada897c8075b19613d45f20a94eb2f7","ssdeep":"","tlshash":"5611a1e75b6269cec414a08483dc5e43883a82a28433ec4a845ad36fcc60e6c3c0c741","first_seen":"2026-10-09T15:54:43.536338Z","last_seen":"2026-10-09T17:11:57.268558Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"keepers-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keepers-ledger.com/_astro/universal-bag.ChtODioF.png","fqdn":"keepers-ledger.com","domain":"keepers-ledger.com","tld":"com"},"ip":{"addr":"51.158.144.104","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://keepers-ledger.com/","date":"2026-10-09T17:11:26.263Z","timestamp":1791565886263,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keepers-ledger.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 12:50:24 GMT","end":"Mon, 04 Jan 2027 12:50:23 GMT"},"fingerprint":{"sha1":"2E:85:FD:A4:C3:22:7F:BF:5B:D1:84:1C:B0:54:CB:59:FF:54:C5:BD","sha256":"D1:56:D7:FE:B8:24:D4:6F:3C:7E:E6:EA:EB:14:D7:03:40:4C:44:31:5C:E7:6F:6F:BF:4A:FF:CC:A1:19:55:BE"}}},"request":{"raw":"GET /_astro/universal-bag.ChtODioF.png HTTP/1.1\r\nHost: keepers-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://keepers-ledger.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/png\r\ndate: Fri, 09 Oct 2026 17:11:26 GMT\r\netag: \"6ac78911-665\"\r\nlast-modified: Thu, 08 Oct 2026 12:14:09 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\ncontent-length: 1637\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1637,"size_decoded":2103,"mime_type":"image/png","magic":"PNG image data, 42 x 39, 8-bit/color RGBA, non-interlaced","md5":"d97d7f4885aec40618bf2360dab92b60","sha1":"921ef4e04f7fa37e5eeb6439ed64e21fcfb0f21b","sha256":"1b4e65caa74147f4b1b934b4a64aa9acd99912de51da79052de13a87cee2a983","sha512":"a0585ec218d9fa958f16bd9f9ee1d47583c8c95a2cf921bb8ea38c2fc78de0505fc30f4b6bbd55781317f7475844f061251b15bb7b348db15a938583a44c131d","ssdeep":"","tlshash":"0a31c8db80128638c901bb04f6799d246f7e31b289b21688a106cda94213967f9a391a","first_seen":"2026-10-09T15:54:43.665958Z","last_seen":"2026-10-09T17:11:57.269982Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"keepers-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keepers-ledger.com/_astro/bronze-hammer.DZ44pIIn.png","fqdn":"keepers-ledger.com","domain":"keepers-ledger.com","tld":"com"},"ip":{"addr":"51.158.144.104","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://keepers-ledger.com/","date":"2026-10-09T17:11:26.264Z","timestamp":1791565886264,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keepers-ledger.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 12:50:24 GMT","end":"Mon, 04 Jan 2027 12:50:23 GMT"},"fingerprint":{"sha1":"2E:85:FD:A4:C3:22:7F:BF:5B:D1:84:1C:B0:54:CB:59:FF:54:C5:BD","sha256":"D1:56:D7:FE:B8:24:D4:6F:3C:7E:E6:EA:EB:14:D7:03:40:4C:44:31:5C:E7:6F:6F:BF:4A:FF:CC:A1:19:55:BE"}}},"request":{"raw":"GET /_astro/bronze-hammer.DZ44pIIn.png HTTP/1.1\r\nHost: keepers-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://keepers-ledger.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/png\r\ndate: Fri, 09 Oct 2026 17:11:26 GMT\r\netag: \"6ac78911-287\"\r\nlast-modified: Thu, 08 Oct 2026 12:14:09 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\ncontent-length: 647\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":647,"size_decoded":1112,"mime_type":"image/png","magic":"PNG image data, 29 x 31, 8-bit/color RGBA, non-interlaced","md5":"d3f3a9aed170ff9728435f864a54e7b2","sha1":"4bd3749cc4f935c9d6db652a4881e2c5c8d5ab56","sha256":"b7b081d4f1a9acff6e517cc6ccf36ef23a5a6a776036b2b766becf9e579616d9","sha512":"94826b4908928997938d8e2f7a720f28da34cd8c07d9a87255424e30f2d7f5a9d4f61886a74739bb62fd3b9c72ef321d38eb52ef980d2a371f07b9d86e3774cf","ssdeep":"","tlshash":"78f0235ff216ec346326e8b349a46810e6602cb597f9124555caccaa29b2c10a76a732","first_seen":"2026-10-09T15:54:43.49332Z","last_seen":"2026-10-09T17:11:57.271127Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"keepers-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keepers-ledger.com/_astro/leather-scroll.Cnat2jbv.png","fqdn":"keepers-ledger.com","domain":"keepers-ledger.com","tld":"com"},"ip":{"addr":"51.158.144.104","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://keepers-ledger.com/","date":"2026-10-09T17:11:26.267Z","timestamp":1791565886267,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keepers-ledger.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 12:50:24 GMT","end":"Mon, 04 Jan 2027 12:50:23 GMT"},"fingerprint":{"sha1":"2E:85:FD:A4:C3:22:7F:BF:5B:D1:84:1C:B0:54:CB:59:FF:54:C5:BD","sha256":"D1:56:D7:FE:B8:24:D4:6F:3C:7E:E6:EA:EB:14:D7:03:40:4C:44:31:5C:E7:6F:6F:BF:4A:FF:CC:A1:19:55:BE"}}},"request":{"raw":"GET /_astro/leather-scroll.Cnat2jbv.png HTTP/1.1\r\nHost: keepers-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://keepers-ledger.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/png\r\ndate: Fri, 09 Oct 2026 17:11:26 GMT\r\netag: \"6ac78911-2f7\"\r\nlast-modified: Thu, 08 Oct 2026 12:14:09 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\ncontent-length: 759\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":759,"size_decoded":1224,"mime_type":"image/png","magic":"PNG image data, 31 x 32, 8-bit/color RGBA, non-interlaced","md5":"3620242a036c409ffec927ae0ac81417","sha1":"5d44478321a479e12f1f0f57e06848bb176dbed2","sha256":"0acd709f8c835f6ec24a49295ed4482b8389043b837b64cb7a798a5e37ad3ab7","sha512":"d410d2d5ffe0185252a1ba5c79a9cb1948f53baab8626658ac2eaa2d8040bb9b9228db8e983ea47dafc60a64f907ba3420b5d5281767bebd9db72f0673131948","ssdeep":"","tlshash":"df01b5cfd763da29dd76b32694c0519f86bd9f603ab32908006d42bd75ea1084a8441e","first_seen":"2026-10-09T15:54:43.509144Z","last_seen":"2026-10-09T17:11:57.272074Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"keepers-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keepers-ledger.com/_astro/keepers-clothes.Ba63vm1P.png","fqdn":"keepers-ledger.com","domain":"keepers-ledger.com","tld":"com"},"ip":{"addr":"51.158.144.104","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://keepers-ledger.com/","date":"2026-10-09T17:11:26.268Z","timestamp":1791565886268,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keepers-ledger.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 12:50:24 GMT","end":"Mon, 04 Jan 2027 12:50:23 GMT"},"fingerprint":{"sha1":"2E:85:FD:A4:C3:22:7F:BF:5B:D1:84:1C:B0:54:CB:59:FF:54:C5:BD","sha256":"D1:56:D7:FE:B8:24:D4:6F:3C:7E:E6:EA:EB:14:D7:03:40:4C:44:31:5C:E7:6F:6F:BF:4A:FF:CC:A1:19:55:BE"}}},"request":{"raw":"GET /_astro/keepers-clothes.Ba63vm1P.png HTTP/1.1\r\nHost: keepers-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://keepers-ledger.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/png\r\ndate: Fri, 09 Oct 2026 17:11:26 GMT\r\netag: \"6ac78911-491\"\r\nlast-modified: Thu, 08 Oct 2026 12:14:09 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\ncontent-length: 1169\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1169,"size_decoded":1635,"mime_type":"image/png","magic":"PNG image data, 31 x 32, 8-bit/color RGBA, non-interlaced","md5":"3cc8cc0ab9215ab40566381b7440b4a1","sha1":"328399b585ca88e6b6f51a8969d1c96d44d37ce1","sha256":"56b63fb25f3212ecd4d457fdeb19d939240ec1c081842008f81d09acc94fd7e1","sha512":"385a2e482fea04fdfeccae3b306e044c7d7bf170b44289f9423efc2936708091fa150cb3fe7c4097357312fa3d6daab3b427a7281376056163d925b7363bd19b","ssdeep":"","tlshash":"fd21cafe8197008c90fdd52b1860d1d92ea5a15c2d2e9127fd4b056cf207d6651ffe47","first_seen":"2026-10-09T15:54:43.625316Z","last_seen":"2026-10-09T17:11:57.272987Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"keepers-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keepers-ledger.com/_astro/golden-talisman.DV9klZCR.png","fqdn":"keepers-ledger.com","domain":"keepers-ledger.com","tld":"com"},"ip":{"addr":"51.158.144.104","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://keepers-ledger.com/","date":"2026-10-09T17:11:26.272Z","timestamp":1791565886272,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keepers-ledger.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 12:50:24 GMT","end":"Mon, 04 Jan 2027 12:50:23 GMT"},"fingerprint":{"sha1":"2E:85:FD:A4:C3:22:7F:BF:5B:D1:84:1C:B0:54:CB:59:FF:54:C5:BD","sha256":"D1:56:D7:FE:B8:24:D4:6F:3C:7E:E6:EA:EB:14:D7:03:40:4C:44:31:5C:E7:6F:6F:BF:4A:FF:CC:A1:19:55:BE"}}},"request":{"raw":"GET /_astro/golden-talisman.DV9klZCR.png HTTP/1.1\r\nHost: keepers-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://keepers-ledger.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/png\r\ndate: Fri, 09 Oct 2026 17:11:26 GMT\r\netag: \"6ac78911-4e8\"\r\nlast-modified: Thu, 08 Oct 2026 12:14:09 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\ncontent-length: 1256\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1256,"size_decoded":1722,"mime_type":"image/png","magic":"PNG image data, 32 x 36, 8-bit/color RGBA, non-interlaced","md5":"a16a33f6ad61dc93eed9b92852600157","sha1":"309a87935de4840408f1209e2be2735ddfc45b87","sha256":"f06d3e4659450c133ab9802ede074cc5512f8e5a61236bbad087afb2ad2baaeb","sha512":"a75c75d4ba46befb9ed26f8ea8d2cb5287444a4f8895d163cfe3685f0e9b1b085c93b85579f7ae3cfd0f9ad130330eb77b0fde7fea934b6853d944ed97554212","ssdeep":"","tlshash":"8021b79b87ae6c67fcd9a72e476888212e6b634f9f03124e9987146160413dd04819a2","first_seen":"2026-10-09T15:54:43.639786Z","last_seen":"2026-10-09T17:11:57.273964Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"keepers-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keepers-ledger.com/_astro/zombie-power.DdYbe_JC.png","fqdn":"keepers-ledger.com","domain":"keepers-ledger.com","tld":"com"},"ip":{"addr":"51.158.144.104","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://keepers-ledger.com/","date":"2026-10-09T17:11:26.277Z","timestamp":1791565886277,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keepers-ledger.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 12:50:24 GMT","end":"Mon, 04 Jan 2027 12:50:23 GMT"},"fingerprint":{"sha1":"2E:85:FD:A4:C3:22:7F:BF:5B:D1:84:1C:B0:54:CB:59:FF:54:C5:BD","sha256":"D1:56:D7:FE:B8:24:D4:6F:3C:7E:E6:EA:EB:14:D7:03:40:4C:44:31:5C:E7:6F:6F:BF:4A:FF:CC:A1:19:55:BE"}}},"request":{"raw":"GET /_astro/zombie-power.DdYbe_JC.png HTTP/1.1\r\nHost: keepers-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://keepers-ledger.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/png\r\ndate: Fri, 09 Oct 2026 17:11:26 GMT\r\netag: \"6ac78911-4ea\"\r\nlast-modified: Thu, 08 Oct 2026 12:14:09 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\ncontent-length: 1258\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1258,"size_decoded":1724,"mime_type":"image/png","magic":"PNG image data, 35 x 34, 8-bit/color RGBA, non-interlaced","md5":"09276507c2f11cb300f733d7e935b6df","sha1":"6af8a5e8a0d6150f45ec2f4df22e1fc5e1d260e5","sha256":"601ddbf62ba01e8543b3fdf35645f1bd9b1808a6514ea999d3c294cdc6aef5ad","sha512":"770fc045596ca950580fb072a279fefedb32eb919087a5420999e736ebe86b2d1660a00c6d19a01f2b178ef15763f2999d5d1820bf575bce167a1c9d749988d5","ssdeep":"","tlshash":"bd21c8d7563be225cb8be365e281932432131a36f184d805fd13bd0aa73d671de68a21","first_seen":"2026-10-09T15:54:43.579853Z","last_seen":"2026-10-09T17:11:57.274879Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"keepers-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keepers-ledger.com/_astro/golden-nugget.D_bT3hsD.png","fqdn":"keepers-ledger.com","domain":"keepers-ledger.com","tld":"com"},"ip":{"addr":"51.158.144.104","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://keepers-ledger.com/","date":"2026-10-09T17:11:26.279Z","timestamp":1791565886279,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keepers-ledger.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 12:50:24 GMT","end":"Mon, 04 Jan 2027 12:50:23 GMT"},"fingerprint":{"sha1":"2E:85:FD:A4:C3:22:7F:BF:5B:D1:84:1C:B0:54:CB:59:FF:54:C5:BD","sha256":"D1:56:D7:FE:B8:24:D4:6F:3C:7E:E6:EA:EB:14:D7:03:40:4C:44:31:5C:E7:6F:6F:BF:4A:FF:CC:A1:19:55:BE"}}},"request":{"raw":"GET /_astro/golden-nugget.D_bT3hsD.png HTTP/1.1\r\nHost: keepers-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://keepers-ledger.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/png\r\ndate: Fri, 09 Oct 2026 17:11:26 GMT\r\netag: \"6ac78911-4b6\"\r\nlast-modified: Thu, 08 Oct 2026 12:14:09 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\ncontent-length: 1206\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1206,"size_decoded":1672,"mime_type":"image/png","magic":"PNG image data, 32 x 27, 8-bit/color RGBA, non-interlaced","md5":"9f4d2d0a2bb4cf9e9b4245f514ca020e","sha1":"1080ce5357ab6dd11efe2ee688a8f40de0e87a2d","sha256":"7162216ec79b09967d9441a27b02ecff8c65786c8c2f0f37750f1f0574de2691","sha512":"d0b9b07e204785e1379b4ad7ee2811a624ed93958307d1bd1992618896bbc64a28d62704f332655a24a353251422c23cfcdc7e04238a59de6a0ba99e64d7b80d","ssdeep":"","tlshash":"db213de8525cfcde523d08709823c44224c2072657b7620fb1c5af84f2e895cb2b6dd7","first_seen":"2026-10-09T15:54:43.587302Z","last_seen":"2026-10-09T17:11:57.276013Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"keepers-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keepers-ledger.com/","fqdn":"keepers-ledger.com","domain":"keepers-ledger.com","tld":"com"},"ip":{"addr":"51.158.144.104","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-09T17:11:25.634Z","timestamp":1791565885634,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keepers-ledger.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 12:50:24 GMT","end":"Mon, 04 Jan 2027 12:50:23 GMT"},"fingerprint":{"sha1":"2E:85:FD:A4:C3:22:7F:BF:5B:D1:84:1C:B0:54:CB:59:FF:54:C5:BD","sha256":"D1:56:D7:FE:B8:24:D4:6F:3C:7E:E6:EA:EB:14:D7:03:40:4C:44:31:5C:E7:6F:6F:BF:4A:FF:CC:A1:19:55:BE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: keepers-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/html\r\ndate: Fri, 09 Oct 2026 17:11:25 GMT\r\netag: \"6ac78a3c-2464\"\r\nlast-modified: Thu, 08 Oct 2026 12:19:08 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncontent-length: 9316\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Astro:7.3.5","description":"Astro is a new JavaScript-based static site builder.","website":"https://astro.build","common_platform_enumeration":"","icon":"Astro.svg","categories":["Static site generator","JavaScript frameworks"]}],"data":{"size":48352,"size_decoded":9829,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39664)","md5":"837e0cc9b35d6bf8b9db904203963662","sha1":"796d668fc20686512ca242caaed207ce4ac06866","sha256":"4d93bcb9c391361a563184b57647fcf4bd4485187aa698660fdcdd919ebfe1a9","sha512":"56c3d1c0fd5dbd4b12e39920771ebc3b7f9523f5b1223087e999efdbe3519b706587a5d22ba6053f8e4055beca722583b28c21667a7fcf416d9dbc19e6b5ec02","ssdeep":"768:QoSoP2oxopo/h+ljukPtpLZYyN97QzdfPNtznz379no1F:ZtPb2eJYukhNKe","tlshash":"262352b0b3525d32016382cbb7d61a786191a30acb8185d96bef4ef57b96f34773204e","first_seen":"2026-10-09T15:54:43.440474Z","last_seen":"2026-10-09T17:11:57.277074Z","times_seen":2,"resource_available":true,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":124,"connect":16,"send":0,"wait":21,"receive":11,"ssl":161},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"keepers-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keepers-ledger.com/_astro/alegreya-sans-latin-400-normal.DtLlO8BS.woff2","fqdn":"keepers-ledger.com","domain":"keepers-ledger.com","tld":"com"},"ip":{"addr":"51.158.144.104","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://keepers-ledger.com/","date":"2026-10-09T17:11:26.143Z","timestamp":1791565886143,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keepers-ledger.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 12:50:24 GMT","end":"Mon, 04 Jan 2027 12:50:23 GMT"},"fingerprint":{"sha1":"2E:85:FD:A4:C3:22:7F:BF:5B:D1:84:1C:B0:54:CB:59:FF:54:C5:BD","sha256":"D1:56:D7:FE:B8:24:D4:6F:3C:7E:E6:EA:EB:14:D7:03:40:4C:44:31:5C:E7:6F:6F:BF:4A:FF:CC:A1:19:55:BE"}}},"request":{"raw":"GET /_astro/alegreya-sans-latin-400-normal.DtLlO8BS.woff2 HTTP/1.1\r\nHost: keepers-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://keepers-ledger.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: font/woff2\r\ndate: Fri, 09 Oct 2026 17:11:26 GMT\r\netag: \"6ac78911-5c9c\"\r\nlast-modified: Thu, 08 Oct 2026 12:14:09 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\ncontent-length: 23708\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23708,"size_decoded":24177,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23708, version 1.0","md5":"dec96422d9be92a54783a95aa3bbaaeb","sha1":"123cd4a1e13951a8e1f1163e0a05abe24ce500dd","sha256":"b2a5a35a2563a2f9bf9fb91939fc6ea6c115e9811cda5c4a37d02f623c7c4dbe","sha512":"7bdebf82c6698ec9e3d1026d6a69f82baf40b929c35975179d7b2f157bdab1c80323e0e63822004e0d5facf2dd80b492a833d83c59144b5f93bb8064b0c2df3f","ssdeep":"384:0j6KHKh0aqnXyidfiVGpkf0AEY/tXCvlcxs+F4kVD4/HuW2Mizpp67nOLsFb1tV8:o527aX6MM0uyvlcW+BxAu0v9bh1m","tlshash":"42b2e1ce89bc6ef836102a2dac0ed0c607e5bc32429ed0d8ee40cac25a9b115de44775","first_seen":"2026-07-01T01:31:40.592384Z","last_seen":"2026-10-11T20:47:04.127353Z","times_seen":242,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"keepers-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keepers-ledger.com/_astro/blue-techbook.6-xFHTUY.png","fqdn":"keepers-ledger.com","domain":"keepers-ledger.com","tld":"com"},"ip":{"addr":"51.158.144.104","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://keepers-ledger.com/","date":"2026-10-09T17:11:26.266Z","timestamp":1791565886266,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keepers-ledger.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 12:50:24 GMT","end":"Mon, 04 Jan 2027 12:50:23 GMT"},"fingerprint":{"sha1":"2E:85:FD:A4:C3:22:7F:BF:5B:D1:84:1C:B0:54:CB:59:FF:54:C5:BD","sha256":"D1:56:D7:FE:B8:24:D4:6F:3C:7E:E6:EA:EB:14:D7:03:40:4C:44:31:5C:E7:6F:6F:BF:4A:FF:CC:A1:19:55:BE"}}},"request":{"raw":"GET /_astro/blue-techbook.6-xFHTUY.png HTTP/1.1\r\nHost: keepers-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://keepers-ledger.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/png\r\ndate: Fri, 09 Oct 2026 17:11:26 GMT\r\netag: \"6ac78911-304\"\r\nlast-modified: Thu, 08 Oct 2026 12:14:09 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\ncontent-length: 772\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":772,"size_decoded":1237,"mime_type":"image/png","magic":"PNG image data, 32 x 29, 8-bit/color RGBA, non-interlaced","md5":"d967963f6e756661397a78ceb53e7d4d","sha1":"2aa0dc66f4ced5546135b01e8ef8e84307134985","sha256":"5c70dad1b2e07e43b71053eb66c31cccfddb1aaf15b1e253c3e1311115d65543","sha512":"4521ad9c5a560b2d2cec343c580569f0704f255e4adaff2d16baa77a38a95160d3fb090719f6bf0427336ed0ca3cd39943946556cf876279045d55fa684cdb78","ssdeep":"","tlshash":"1101baede62cc42d8bc3d4574122e21ffd3809258491f1fa9c4de7716816484d141d5b","first_seen":"2026-10-09T15:54:43.621998Z","last_seen":"2026-10-09T17:11:57.278741Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"keepers-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keepers-ledger.com/_astro/prayer-for-storms.CuMvh7oL.png","fqdn":"keepers-ledger.com","domain":"keepers-ledger.com","tld":"com"},"ip":{"addr":"51.158.144.104","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://keepers-ledger.com/","date":"2026-10-09T17:11:26.273Z","timestamp":1791565886273,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keepers-ledger.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 12:50:24 GMT","end":"Mon, 04 Jan 2027 12:50:23 GMT"},"fingerprint":{"sha1":"2E:85:FD:A4:C3:22:7F:BF:5B:D1:84:1C:B0:54:CB:59:FF:54:C5:BD","sha256":"D1:56:D7:FE:B8:24:D4:6F:3C:7E:E6:EA:EB:14:D7:03:40:4C:44:31:5C:E7:6F:6F:BF:4A:FF:CC:A1:19:55:BE"}}},"request":{"raw":"GET /_astro/prayer-for-storms.CuMvh7oL.png HTTP/1.1\r\nHost: keepers-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://keepers-ledger.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/png\r\ndate: Fri, 09 Oct 2026 17:11:26 GMT\r\netag: \"6ac78911-5fd\"\r\nlast-modified: Thu, 08 Oct 2026 12:14:09 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\ncontent-length: 1533\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1533,"size_decoded":1999,"mime_type":"image/png","magic":"PNG image data, 37 x 37, 8-bit/color RGBA, non-interlaced","md5":"af6324e6b991679e2fe7b870ed4ff437","sha1":"ca571476cd9f8878c38447e37c5df95e4e943a15","sha256":"52de14892d7f4ad52a3906059c866ef644d739b59febc13267b5708beaf0f726","sha512":"df573543222ea5554506fb8db9fc5f1ec609f6e96d87fe05818be84b725810b492f2dd2abad06f0021e7e2f02cd7ecc25d4f1f13acb34ce2ca1ea26588a14c79","ssdeep":"","tlshash":"8e3107781356ef3842b8c5edbba163f12e46c305511f6e65d846ca370400c9cfb27ae2","first_seen":"2026-10-09T15:54:43.652659Z","last_seen":"2026-10-09T17:11:57.279651Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"keepers-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keepers-ledger.com/_astro/engineering-kit.Ci9RHGhp.png","fqdn":"keepers-ledger.com","domain":"keepers-ledger.com","tld":"com"},"ip":{"addr":"51.158.144.104","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://keepers-ledger.com/","date":"2026-10-09T17:11:26.275Z","timestamp":1791565886275,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keepers-ledger.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 12:50:24 GMT","end":"Mon, 04 Jan 2027 12:50:23 GMT"},"fingerprint":{"sha1":"2E:85:FD:A4:C3:22:7F:BF:5B:D1:84:1C:B0:54:CB:59:FF:54:C5:BD","sha256":"D1:56:D7:FE:B8:24:D4:6F:3C:7E:E6:EA:EB:14:D7:03:40:4C:44:31:5C:E7:6F:6F:BF:4A:FF:CC:A1:19:55:BE"}}},"request":{"raw":"GET /_astro/engineering-kit.Ci9RHGhp.png HTTP/1.1\r\nHost: keepers-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://keepers-ledger.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/png\r\ndate: Fri, 09 Oct 2026 17:11:26 GMT\r\netag: \"6ac78911-614\"\r\nlast-modified: Thu, 08 Oct 2026 12:14:09 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\ncontent-length: 1556\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1556,"size_decoded":2022,"mime_type":"image/png","magic":"PNG image data, 36 x 35, 8-bit/color RGBA, non-interlaced","md5":"e49b37e6532c0db16ee68bcf99ea90ba","sha1":"46e4fd19bbd43902b29219cafa8e4a1afbe758fb","sha256":"8f1e43bcdd87125970ee32e4c9e4d819efb07c0153dee3c2f0ad6a07785f22ba","sha512":"bf78ae9ba2847a7c3f3fd90f4e5cd84e5df716e9895f1f906eafa1be808ab978be6c2a4623907c34be2fad58014edec68a9626d135ac63410fb05bb78a9e2f82","ssdeep":"","tlshash":"3c31ea5948750421c92d2731ab71c83ba6d5c6f92998068788c3937bf9f4f93d284f25","first_seen":"2026-10-09T15:54:43.542941Z","last_seen":"2026-10-09T17:11:57.280512Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"keepers-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keepers-ledger.com/_astro/wrath.D5pz6nYT.png","fqdn":"keepers-ledger.com","domain":"keepers-ledger.com","tld":"com"},"ip":{"addr":"51.158.144.104","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://keepers-ledger.com/","date":"2026-10-09T17:11:26.276Z","timestamp":1791565886276,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keepers-ledger.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 12:50:24 GMT","end":"Mon, 04 Jan 2027 12:50:23 GMT"},"fingerprint":{"sha1":"2E:85:FD:A4:C3:22:7F:BF:5B:D1:84:1C:B0:54:CB:59:FF:54:C5:BD","sha256":"D1:56:D7:FE:B8:24:D4:6F:3C:7E:E6:EA:EB:14:D7:03:40:4C:44:31:5C:E7:6F:6F:BF:4A:FF:CC:A1:19:55:BE"}}},"request":{"raw":"GET /_astro/wrath.D5pz6nYT.png HTTP/1.1\r\nHost: keepers-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://keepers-ledger.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/png\r\ndate: Fri, 09 Oct 2026 17:11:26 GMT\r\netag: \"6ac78911-295\"\r\nlast-modified: Thu, 08 Oct 2026 12:14:09 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\ncontent-length: 661\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":661,"size_decoded":1126,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced","md5":"f6123604520f61ef2bc9feacdb8766b5","sha1":"c6d14961d3882dbc512bc827ee8239338a2cdab5","sha256":"bc815c3a805f2b490c8b29f15291c3a72de0239d6c200175be69dc29f2ba144c","sha512":"baa42e2660f2be606413a24992e110646f38c61949b59574d5e44ae30abb45d70895e49534ca2f186a0027b7c278dfe351570060783cf140e41e1fcd94a5760c","ssdeep":"","tlshash":"350123f5e939f51342922911504e4a26802d7bb801bf6abf29539e3d1668b1406ba122","first_seen":"2026-10-09T15:54:43.431413Z","last_seen":"2026-10-09T17:11:57.281435Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"keepers-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keepers-ledger.com/favicon.svg","fqdn":"keepers-ledger.com","domain":"keepers-ledger.com","tld":"com"},"ip":{"addr":"51.158.144.104","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keepers-ledger.com/","date":"2026-10-09T17:11:26.315Z","timestamp":1791565886315,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keepers-ledger.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 12:50:24 GMT","end":"Mon, 04 Jan 2027 12:50:23 GMT"},"fingerprint":{"sha1":"2E:85:FD:A4:C3:22:7F:BF:5B:D1:84:1C:B0:54:CB:59:FF:54:C5:BD","sha256":"D1:56:D7:FE:B8:24:D4:6F:3C:7E:E6:EA:EB:14:D7:03:40:4C:44:31:5C:E7:6F:6F:BF:4A:FF:CC:A1:19:55:BE"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: keepers-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://keepers-ledger.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=3600\r\ncontent-type: image/svg+xml\r\ndate: Fri, 09 Oct 2026 17:11:26 GMT\r\netag: \"6ac78912-189\"\r\nlast-modified: Thu, 08 Oct 2026 12:14:10 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\ncontent-length: 393\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":393,"size_decoded":847,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"99fe1dad7f70e30a54a58540312579fd","sha1":"3259ce7f2e5866f44b33a7ecfe6a46084df076cb","sha256":"174c5b52521504673fc5135486f3d6f04b9c5a2626ff1f5ee9ecf3d8af6c6900","sha512":"9c7745b9a512f442065a482ab23c0825c7d90304f56f8da579382ad7cd9220ce3a40bf2704af8cb8ee7bb3c0f268bb6456d13fab4a05537545735c60305610b3","ssdeep":"","tlshash":"10e068a4c7685009ec4087712c7cfa8505d270c7974f80a6b4d03781234728b9b113b9","first_seen":"2026-10-09T15:54:43.600759Z","last_seen":"2026-10-09T17:11:57.282128Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"keepers-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keepers-ledger.com/_astro/alegreya-latin-400-normal.BLlBRtDv.woff2","fqdn":"keepers-ledger.com","domain":"keepers-ledger.com","tld":"com"},"ip":{"addr":"51.158.144.104","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://keepers-ledger.com/","date":"2026-10-09T17:11:26.140Z","timestamp":1791565886140,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keepers-ledger.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 12:50:24 GMT","end":"Mon, 04 Jan 2027 12:50:23 GMT"},"fingerprint":{"sha1":"2E:85:FD:A4:C3:22:7F:BF:5B:D1:84:1C:B0:54:CB:59:FF:54:C5:BD","sha256":"D1:56:D7:FE:B8:24:D4:6F:3C:7E:E6:EA:EB:14:D7:03:40:4C:44:31:5C:E7:6F:6F:BF:4A:FF:CC:A1:19:55:BE"}}},"request":{"raw":"GET /_astro/alegreya-latin-400-normal.BLlBRtDv.woff2 HTTP/1.1\r\nHost: keepers-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://keepers-ledger.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: font/woff2\r\ndate: Fri, 09 Oct 2026 17:11:26 GMT\r\netag: \"6ac78911-5964\"\r\nlast-modified: Thu, 08 Oct 2026 12:14:09 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\ncontent-length: 22884\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22884,"size_decoded":23353,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22884, version 1.0","md5":"33d9b26d516b587bfda7c7ec879e40b4","sha1":"b6cf5bee7ec52d8b7f6c4d5ee2d43663f5dd0238","sha256":"7cbcf38a5ef682a8b9e2ef4a330b31a08b33bf1ae08e338267c0d1292479c68a","sha512":"3e346cfdb8b00d18627aab56bbe50edaf4ae785613d4bcd5d9ecb457879e4c070c39b2a7a1b379fa89ddf033bdfabbb2b6fe56de8d6c95ed525267eb95b163a8","ssdeep":"384:2WpYijIZro2mM8Bw61WyIILuyyT97IzA/rCz+jvIVdl07qcC:lirP1cIILuyq9kU/ez+jvIDl0Wl","tlshash":"e0a2d09eca5f90ee8ec74b7963103e67506233223a9517818bdce02085b194b4dfe99e","first_seen":"2026-07-02T12:56:15.47221Z","last_seen":"2026-10-11T22:40:21.487602Z","times_seen":68,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"keepers-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keepers-ledger.com/_astro/jacquard-24-latin-400-normal.C1P8W-p0.woff2","fqdn":"keepers-ledger.com","domain":"keepers-ledger.com","tld":"com"},"ip":{"addr":"51.158.144.104","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://keepers-ledger.com/","date":"2026-10-09T17:11:26.142Z","timestamp":1791565886142,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keepers-ledger.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 12:50:24 GMT","end":"Mon, 04 Jan 2027 12:50:23 GMT"},"fingerprint":{"sha1":"2E:85:FD:A4:C3:22:7F:BF:5B:D1:84:1C:B0:54:CB:59:FF:54:C5:BD","sha256":"D1:56:D7:FE:B8:24:D4:6F:3C:7E:E6:EA:EB:14:D7:03:40:4C:44:31:5C:E7:6F:6F:BF:4A:FF:CC:A1:19:55:BE"}}},"request":{"raw":"GET /_astro/jacquard-24-latin-400-normal.C1P8W-p0.woff2 HTTP/1.1\r\nHost: keepers-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://keepers-ledger.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: font/woff2\r\ndate: Fri, 09 Oct 2026 17:11:26 GMT\r\netag: \"6ac78911-8a30\"\r\nlast-modified: Thu, 08 Oct 2026 12:14:09 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\ncontent-length: 35376\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35376,"size_decoded":35845,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35376, version 1.0","md5":"8d0827aba482072f33a69ea7533d4b0c","sha1":"3b4f715b50430c4cbecbe52c873d3143d6adb0bc","sha256":"9d2cf508084a032b44160357968bd9f0cfb47ed69a17d167cb0f069a15229ad5","sha512":"76e37b5fe0f202589a18258786149b29a3c34f3a8104ed133ece6d4e2bf44d024ff9cc441e63eabdf1191b0001e36bd54f88488f093e42227589f514d33c0d31","ssdeep":"768:l4BQn2cgPUlPVRDnSX+USB9NOusOXDAbda814qLGFdClj19:lMQn2cUURXD7hB9NjzAbdFlSaR9","tlshash":"85f2f1c48ac5270eea24611efdbd47ad8da2f366938946c113c9466c352358f432e3b6","first_seen":"2025-07-31T23:16:57.903031Z","last_seen":"2026-10-09T17:11:57.283533Z","times_seen":5,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"keepers-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keepers-ledger.com/_astro/alegreya-sc-latin-400-normal.nTGC35F9.woff2","fqdn":"keepers-ledger.com","domain":"keepers-ledger.com","tld":"com"},"ip":{"addr":"51.158.144.104","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://keepers-ledger.com/","date":"2026-10-09T17:11:26.144Z","timestamp":1791565886144,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keepers-ledger.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 12:50:24 GMT","end":"Mon, 04 Jan 2027 12:50:23 GMT"},"fingerprint":{"sha1":"2E:85:FD:A4:C3:22:7F:BF:5B:D1:84:1C:B0:54:CB:59:FF:54:C5:BD","sha256":"D1:56:D7:FE:B8:24:D4:6F:3C:7E:E6:EA:EB:14:D7:03:40:4C:44:31:5C:E7:6F:6F:BF:4A:FF:CC:A1:19:55:BE"}}},"request":{"raw":"GET /_astro/alegreya-sc-latin-400-normal.nTGC35F9.woff2 HTTP/1.1\r\nHost: keepers-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://keepers-ledger.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: font/woff2\r\ndate: Fri, 09 Oct 2026 17:11:26 GMT\r\netag: \"6ac78911-71a8\"\r\nlast-modified: Thu, 08 Oct 2026 12:14:09 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\ncontent-length: 29096\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29096,"size_decoded":29565,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29096, version 1.0","md5":"98a23fe04948afdd2a93125f30a9ab32","sha1":"84d7f9d303f11df6f04bd1179ddec2a87f375b1b","sha256":"dbdc9b83a7a593fe3a7c77a996bbca847e9c88b8ceabe660d5af6200b725f4b8","sha512":"e5f70f4a3e1336ca80e72f42e23fee59b660b1b3e821839b53e958d61a18e83af7dfa4a4bddf67629814ba20b436aa3b1b57db0bb0db03212c77908968059a36","ssdeep":"768:IMXMwjqktfbtFvfo8LoX1GJg4uvypPkCC8Vy:r/qoZxloC1PhkCc","tlshash":"11d2f1146124bcbea35ab3ea8817c71222157c7e54e6df066b4f440cfc5a8e630b4be6","first_seen":"2026-07-01T03:47:44.422288Z","last_seen":"2026-10-09T21:28:26.71945Z","times_seen":45,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"keepers-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keepers-ledger.com/_astro/Base.DenLGDs3.css","fqdn":"keepers-ledger.com","domain":"keepers-ledger.com","tld":"com"},"ip":{"addr":"51.158.144.104","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://keepers-ledger.com/","date":"2026-10-09T17:11:26.146Z","timestamp":1791565886146,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keepers-ledger.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 12:50:24 GMT","end":"Mon, 04 Jan 2027 12:50:23 GMT"},"fingerprint":{"sha1":"2E:85:FD:A4:C3:22:7F:BF:5B:D1:84:1C:B0:54:CB:59:FF:54:C5:BD","sha256":"D1:56:D7:FE:B8:24:D4:6F:3C:7E:E6:EA:EB:14:D7:03:40:4C:44:31:5C:E7:6F:6F:BF:4A:FF:CC:A1:19:55:BE"}}},"request":{"raw":"GET /_astro/Base.DenLGDs3.css HTTP/1.1\r\nHost: keepers-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://keepers-ledger.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Fri, 09 Oct 2026 17:11:26 GMT\r\netag: \"6ac78a33-184e\"\r\nlast-modified: Thu, 08 Oct 2026 12:18:59 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncontent-length: 6222\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26232,"size_decoded":6735,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (26227)","md5":"45a8485f279182e27388b9493814a68b","sha1":"66a274d7349de06dc3baf9db0e2701c233cb0573","sha256":"285e022b0acf2f042d7378d34314dffd1cba1be86b32db3978483c7e200b49d6","sha512":"690f4aa83fee5604f5f616fd928838e4e4f47a3bf40b417da6ffe37a723392ffe867011e4c3e7b281b09cb48f7ac6dbab3cef2cb44c4543ab0b0ca783b974415","ssdeep":"384:VVaEEJfbMzqk5LzSTrdBudB6sDDoLTHLe8lxVJsI1lwysGwjCACcXW6KEGtZY:VVaEEJfbMzqk5Luzuz6MDondz2lk0ZeS","tlshash":"f9c2d590f318e579fe2bba6273cc661c251075169c1782f8ec574961a8c3ff36b60a1e","first_seen":"2026-10-09T15:54:43.654952Z","last_seen":"2026-10-09T17:11:57.28459Z","times_seen":2,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"keepers-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keepers-ledger.com/_astro/HomeView.XKzgZ1o7.css","fqdn":"keepers-ledger.com","domain":"keepers-ledger.com","tld":"com"},"ip":{"addr":"51.158.144.104","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://keepers-ledger.com/","date":"2026-10-09T17:11:26.147Z","timestamp":1791565886147,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keepers-ledger.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 12:50:24 GMT","end":"Mon, 04 Jan 2027 12:50:23 GMT"},"fingerprint":{"sha1":"2E:85:FD:A4:C3:22:7F:BF:5B:D1:84:1C:B0:54:CB:59:FF:54:C5:BD","sha256":"D1:56:D7:FE:B8:24:D4:6F:3C:7E:E6:EA:EB:14:D7:03:40:4C:44:31:5C:E7:6F:6F:BF:4A:FF:CC:A1:19:55:BE"}}},"request":{"raw":"GET /_astro/HomeView.XKzgZ1o7.css HTTP/1.1\r\nHost: keepers-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://keepers-ledger.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Fri, 09 Oct 2026 17:11:26 GMT\r\netag: \"6ac78a33-67f\"\r\nlast-modified: Thu, 08 Oct 2026 12:18:59 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncontent-length: 1663\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7498,"size_decoded":2175,"mime_type":"text/css","magic":"ASCII text, with very long lines (7497)","md5":"623bd57c4f64ffa5d719ce3816daa0a8","sha1":"1c3cdfd7428f37d3b3afff0f18d759433902d2df","sha256":"287a271317f5987a51b202221a54831f2ff0855bb714ed6127788a7fbe6440b6","sha512":"06dbf144e9d3b372e5a2d428f8f02c8c7b01ca6b8cced0262919bdf4f2e8dae8ca964690f6ef25430f7147cc587053c55eed8ded463b300fcfb478c1c60b6b73","ssdeep":"96:+IDg0+mdM4tnaXvJkzY3VJ76mE+jpoktwghdwbNhnS0:+I1Zm0naCM76mE+NwghdwbNhS0","tlshash":"eaf18cb47358e664bc17684aa7ca563c111075125b13caef9e934ee4b4c7bf2272460f","first_seen":"2026-10-09T15:54:43.603276Z","last_seen":"2026-10-09T17:11:57.285587Z","times_seen":2,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"keepers-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keepers-ledger.com/_astro/simple-candle.D7FNK8rs.png","fqdn":"keepers-ledger.com","domain":"keepers-ledger.com","tld":"com"},"ip":{"addr":"51.158.144.104","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://keepers-ledger.com/","date":"2026-10-09T17:11:26.256Z","timestamp":1791565886256,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keepers-ledger.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 12:50:24 GMT","end":"Mon, 04 Jan 2027 12:50:23 GMT"},"fingerprint":{"sha1":"2E:85:FD:A4:C3:22:7F:BF:5B:D1:84:1C:B0:54:CB:59:FF:54:C5:BD","sha256":"D1:56:D7:FE:B8:24:D4:6F:3C:7E:E6:EA:EB:14:D7:03:40:4C:44:31:5C:E7:6F:6F:BF:4A:FF:CC:A1:19:55:BE"}}},"request":{"raw":"GET /_astro/simple-candle.D7FNK8rs.png HTTP/1.1\r\nHost: keepers-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://keepers-ledger.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/png\r\ndate: Fri, 09 Oct 2026 17:11:26 GMT\r\netag: \"6ac78911-22a\"\r\nlast-modified: Thu, 08 Oct 2026 12:14:09 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\ncontent-length: 554\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":554,"size_decoded":1019,"mime_type":"image/png","magic":"PNG image data, 18 x 30, 8-bit/color RGBA, non-interlaced","md5":"7dd2e4a5c9b54adf7ec6f3ea236e24a6","sha1":"5de00e2eea09c6eb4fd2e07f0e8c5942c559e22b","sha256":"338c8e7f925bae3dc914a9c0be68ac172f2f3f74ef1634014c5de3a41ea99170","sha512":"951d388d5229d6fbe10b9f2e1298698da1b43e5798560ac07ab02e6aa056fa71252af15ad09675a491c4bfc7e85c32fd827091fd277275d62708fd57380aaf45","ssdeep":"","tlshash":"b7f0e17b54699b6ff3943075bb1b71a49d375a22112a054f00ca89b518c0843c6e07a4","first_seen":"2026-10-09T15:54:43.612373Z","last_seen":"2026-10-09T17:11:57.286549Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"keepers-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keepers-ledger.com/_astro/primer.B1iYOqSd.png","fqdn":"keepers-ledger.com","domain":"keepers-ledger.com","tld":"com"},"ip":{"addr":"51.158.144.104","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://keepers-ledger.com/","date":"2026-10-09T17:11:26.261Z","timestamp":1791565886261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keepers-ledger.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 12:50:24 GMT","end":"Mon, 04 Jan 2027 12:50:23 GMT"},"fingerprint":{"sha1":"2E:85:FD:A4:C3:22:7F:BF:5B:D1:84:1C:B0:54:CB:59:FF:54:C5:BD","sha256":"D1:56:D7:FE:B8:24:D4:6F:3C:7E:E6:EA:EB:14:D7:03:40:4C:44:31:5C:E7:6F:6F:BF:4A:FF:CC:A1:19:55:BE"}}},"request":{"raw":"GET /_astro/primer.B1iYOqSd.png HTTP/1.1\r\nHost: keepers-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://keepers-ledger.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/png\r\ndate: Fri, 09 Oct 2026 17:11:26 GMT\r\netag: \"6ac78911-37c\"\r\nlast-modified: Thu, 08 Oct 2026 12:14:09 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\ncontent-length: 892\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":892,"size_decoded":1357,"mime_type":"image/png","magic":"PNG image data, 32 x 36, 8-bit/color RGBA, non-interlaced","md5":"8631f64437d1e34776494f6c661d0c19","sha1":"478dc20abd0e799d63370e3366371c7b205318e1","sha256":"b60b7eb06660be11fc4627d30d7e9a94b261b58c5723bf4ab4ef297e1ed8b5a9","sha512":"116202177d6becbc2e1df0b181c438d857d57bd85f34b69d7bd05bdb958fcf03c90eaedb4b6e0a5d9cc71787a137da7ffc8c0c658b5018ea3854feae49c8df46","ssdeep":"","tlshash":"de11e6c0cb52e0d6631456cf0a2d488aa2f31c6dc953810c42d28fff81423c8e8b0691","first_seen":"2026-10-09T15:54:43.619498Z","last_seen":"2026-10-09T17:11:57.287584Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"keepers-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keepers-ledger.com/_astro/bronze-sword.D7Tdn6hh.png","fqdn":"keepers-ledger.com","domain":"keepers-ledger.com","tld":"com"},"ip":{"addr":"51.158.144.104","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://keepers-ledger.com/","date":"2026-10-09T17:11:26.270Z","timestamp":1791565886270,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keepers-ledger.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 12:50:24 GMT","end":"Mon, 04 Jan 2027 12:50:23 GMT"},"fingerprint":{"sha1":"2E:85:FD:A4:C3:22:7F:BF:5B:D1:84:1C:B0:54:CB:59:FF:54:C5:BD","sha256":"D1:56:D7:FE:B8:24:D4:6F:3C:7E:E6:EA:EB:14:D7:03:40:4C:44:31:5C:E7:6F:6F:BF:4A:FF:CC:A1:19:55:BE"}}},"request":{"raw":"GET /_astro/bronze-sword.D7Tdn6hh.png HTTP/1.1\r\nHost: keepers-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://keepers-ledger.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/png\r\ndate: Fri, 09 Oct 2026 17:11:26 GMT\r\netag: \"6ac78911-2e6\"\r\nlast-modified: Thu, 08 Oct 2026 12:14:09 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\ncontent-length: 742\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":742,"size_decoded":1207,"mime_type":"image/png","magic":"PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced","md5":"b814e2a97bc41dbe50c76763bdd2396d","sha1":"469d49eb00ef65fb2fa00043b4f8a2cf8b6cc482","sha256":"dccc06721944632f94d731fbc360c82106b584130e17dde5852e2f518a69b21a","sha512":"45361be40bbec1b744142ff8673e171042187dd1908d7535c9a27ff5e43ae03882151e0b3bca30843a97fa74e8f7e327724159ebef559bdaf669f414e5cc362d","ssdeep":"","tlshash":"0101658a8b98072fb955343a45b20a9047570c29d3cd17ca068fae7d7b3ae3489ae605","first_seen":"2026-10-09T15:54:43.524614Z","last_seen":"2026-10-09T17:11:57.288671Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"keepers-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keepers-ledger.com/_astro/page.BDh2vuYI.js","fqdn":"keepers-ledger.com","domain":"keepers-ledger.com","tld":"com"},"ip":{"addr":"51.158.144.104","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://keepers-ledger.com/","date":"2026-10-09T17:11:26.149Z","timestamp":1791565886149,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keepers-ledger.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 12:50:24 GMT","end":"Mon, 04 Jan 2027 12:50:23 GMT"},"fingerprint":{"sha1":"2E:85:FD:A4:C3:22:7F:BF:5B:D1:84:1C:B0:54:CB:59:FF:54:C5:BD","sha256":"D1:56:D7:FE:B8:24:D4:6F:3C:7E:E6:EA:EB:14:D7:03:40:4C:44:31:5C:E7:6F:6F:BF:4A:FF:CC:A1:19:55:BE"}}},"request":{"raw":"GET /_astro/page.BDh2vuYI.js HTTP/1.1\r\nHost: keepers-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://keepers-ledger.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Fri, 09 Oct 2026 17:11:26 GMT\r\netag: \"6ac78a33-45e\"\r\nlast-modified: Thu, 08 Oct 2026 12:18:59 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncontent-length: 1118\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2487,"size_decoded":1644,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2487), with no line terminators","md5":"85eb455d6c5ed7530a0cc657cb8850e2","sha1":"34b3cf149fd92e81b288a3c62df26cbdc839da05","sha256":"fce9ccf60de44254eba97ea656fca7a30a6777271d9e2d84564c59b6fdef9a35","sha512":"2767decf42711d90e58d9c5190b46a1cf0d54287e9b2cf2dfc037e68d4901f964b25bfa03546d95359eff33c77b08a87a9f8443bebfc7ab1d4459ea2daab365e","ssdeep":"","tlshash":"2f510ea53705a4bf53ab822b91ab91c1b23614c4640a6018b478ada07934ef563f3fde","first_seen":"2026-09-22T19:35:49.36595Z","last_seen":"2026-10-09T17:11:57.289532Z","times_seen":5,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"keepers-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keepers-ledger.com/_astro/alegreya-sans-latin-700-normal.DEbcy2sF.woff2","fqdn":"keepers-ledger.com","domain":"keepers-ledger.com","tld":"com"},"ip":{"addr":"51.158.144.104","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://keepers-ledger.com/","date":"2026-10-09T17:11:26.249Z","timestamp":1791565886249,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keepers-ledger.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 12:50:24 GMT","end":"Mon, 04 Jan 2027 12:50:23 GMT"},"fingerprint":{"sha1":"2E:85:FD:A4:C3:22:7F:BF:5B:D1:84:1C:B0:54:CB:59:FF:54:C5:BD","sha256":"D1:56:D7:FE:B8:24:D4:6F:3C:7E:E6:EA:EB:14:D7:03:40:4C:44:31:5C:E7:6F:6F:BF:4A:FF:CC:A1:19:55:BE"}}},"request":{"raw":"GET /_astro/alegreya-sans-latin-700-normal.DEbcy2sF.woff2 HTTP/1.1\r\nHost: keepers-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://keepers-ledger.com/_astro/Base.DenLGDs3.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: font/woff2\r\ndate: Fri, 09 Oct 2026 17:11:26 GMT\r\netag: \"6ac78911-5da8\"\r\nlast-modified: Thu, 08 Oct 2026 12:14:09 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\ncontent-length: 23976\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23976,"size_decoded":24445,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23976, version 1.0","md5":"c198fa600447a1a708d9440d07ee8437","sha1":"403b09118b4c02a8a8b4749dc472e2a15caab9af","sha256":"5acd19a588614d23e52b741a21dd8555178ab4932c3195c6d8fb4b296f84acae","sha512":"4faa9d358c94619e40db64047fc05c7c4fb4b778255e6fcfc89694025b612405c7ebf00f2384de2c14fb935597ebc63852634e6431c6c14c9c923b5a40c4d6b6","ssdeep":"384:P6eyCR1UZLVB7kvV9Z6RntI66J2gWBw3NOL1mf1ugkiStdTBVM3+XvoDReszVkx9:OCXU/IZ6V6SO0mfwgkikV7s8+kDV1XYg","tlshash":"37b2e1f249c70d36e9c2061ad64b1c6a85475b6fbcf2a44bc032e6278f15d3d55a9fc0","first_seen":"2026-07-01T02:41:04.598117Z","last_seen":"2026-10-11T16:07:20.84093Z","times_seen":173,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"keepers-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keepers-ledger.com/_astro/bronze-tools.BP3V-_OT.png","fqdn":"keepers-ledger.com","domain":"keepers-ledger.com","tld":"com"},"ip":{"addr":"51.158.144.104","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://keepers-ledger.com/","date":"2026-10-09T17:11:26.272Z","timestamp":1791565886272,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keepers-ledger.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 12:50:24 GMT","end":"Mon, 04 Jan 2027 12:50:23 GMT"},"fingerprint":{"sha1":"2E:85:FD:A4:C3:22:7F:BF:5B:D1:84:1C:B0:54:CB:59:FF:54:C5:BD","sha256":"D1:56:D7:FE:B8:24:D4:6F:3C:7E:E6:EA:EB:14:D7:03:40:4C:44:31:5C:E7:6F:6F:BF:4A:FF:CC:A1:19:55:BE"}}},"request":{"raw":"GET /_astro/bronze-tools.BP3V-_OT.png HTTP/1.1\r\nHost: keepers-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://keepers-ledger.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/png\r\ndate: Fri, 09 Oct 2026 17:11:26 GMT\r\netag: \"6ac78911-622\"\r\nlast-modified: Thu, 08 Oct 2026 12:14:09 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\ncontent-length: 1570\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1570,"size_decoded":2036,"mime_type":"image/png","magic":"PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced","md5":"a2c45fc2f54861b5f2c83bc18277f508","sha1":"0ab5de82e2182139f17aa9f7f47a7f0cf039ea5d","sha256":"4a528577f5dd59845882d1469ffa422579bd58f55bd871e01a99764c543b354e","sha512":"17ec9d79d7a0c8a42ee21dc7685d6207225ddb90fd5c04fc8869b8c20214393c9aab79737aae3126c0232ae16156cab24678ce0001f136fe2618d28508376f25","ssdeep":"","tlshash":"d531ea90579cc060ca781576f31d29ae6f33a1d8131f16485899ca57d3f52f760691c4","first_seen":"2026-10-09T15:54:43.667724Z","last_seen":"2026-10-09T17:11:57.291073Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"keepers-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keepers-ledger.com/_astro/gravestone-i.BYhlY1iC.png","fqdn":"keepers-ledger.com","domain":"keepers-ledger.com","tld":"com"},"ip":{"addr":"51.158.144.104","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://keepers-ledger.com/","date":"2026-10-09T17:11:26.274Z","timestamp":1791565886274,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keepers-ledger.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 12:50:24 GMT","end":"Mon, 04 Jan 2027 12:50:23 GMT"},"fingerprint":{"sha1":"2E:85:FD:A4:C3:22:7F:BF:5B:D1:84:1C:B0:54:CB:59:FF:54:C5:BD","sha256":"D1:56:D7:FE:B8:24:D4:6F:3C:7E:E6:EA:EB:14:D7:03:40:4C:44:31:5C:E7:6F:6F:BF:4A:FF:CC:A1:19:55:BE"}}},"request":{"raw":"GET /_astro/gravestone-i.BYhlY1iC.png HTTP/1.1\r\nHost: keepers-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://keepers-ledger.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/png\r\ndate: Fri, 09 Oct 2026 17:11:26 GMT\r\netag: \"6ac78911-25a\"\r\nlast-modified: Thu, 08 Oct 2026 12:14:09 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\ncontent-length: 602\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":602,"size_decoded":1067,"mime_type":"image/png","magic":"PNG image data, 21 x 30, 8-bit/color RGBA, non-interlaced","md5":"b084ec1630f8a516a9e8fcd229708181","sha1":"e7dea21b0f2ae71c58f10b33b1dbe19e330d3612","sha256":"821e9e1c49d87be20dc83462ed06bd9d997f3fb9de96c3069493290fb35eae6c","sha512":"98c1ee5fd2f563031c6f2adfa559966480d77b391e9b7656337a56e3399e7263a15064f0934513f9f577f61ff4c05afcfef6a09f8c8348d750fc56c092db3c52","ssdeep":"","tlshash":"fff047f96749ecb1a0b294258d540f18956d05ac830751c50d0df5220c536469da1722","first_seen":"2026-10-09T15:54:43.675325Z","last_seen":"2026-10-09T17:11:57.292008Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"keepers-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}