{"report_id":"aec802fe-bce4-4e31-a1e1-704490129968","version":6,"status":"done","tags":[],"date":"2026-04-26T13:33:25Z","url":{"schema":"https","addr":"www.ledgerwallet.cc/","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":0,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.ledgerwallet.cc/","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"title":"How to set up your Ledger Hardware Wallet | Ledger","dom":{"size":47967,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (985)","md5":"fcda024c5b6178083b815eb0ea97f350","sha1":"71a12f5b5c1b3c6181e643b2da44885d753df425","sha256":"59b5394b0da1ff0b3d966f04f9e893218b5c276a08390aa0d234eb1b236e81f8","sha512":"a1044f10050da603bd11286461d8538f9767fa31cec269a5410b38f3cca23cd4cf4a20ca774aa3111a3cc851528d6ba8180747d5a3a1143f70468b87e7bf627e","ssdeep":"384:2BLF59QoLV8sUrjmf4Zj9mdQgMKDYfWzNy+maAt0YsrksiuvZQMRlUE0rf61118T:ML3bR9BMKDY+zNy+zoOrkswyUEMma","tlshash":"0923e726e9e281516907875913e772397e78a003ca85deb8b9dce3e49f46fe14d43e0c","dom_hash":"domhashefda9fcd96c3126aea413bf294828501","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.ledgerwallet.cc/","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":0,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-31T13:33:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ka-p.fontawesome.com","ip":{"addr":"104.18.40.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":22175,"first_seen":"2019-12-16T20:35:53Z","last_seen":"2026-04-20T09:32:02.327014Z","alert_count":0,"request_count":2,"received_data":586,"sent_data":999,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.ledger.com","ip":{"addr":"172.64.153.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1994-09-19","domain_rank":203249,"first_seen":"2017-03-23T14:26:33Z","last_seen":"2026-04-25T21:03:26.630288Z","alert_count":0,"request_count":1,"received_data":43558,"sent_data":565,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.ledgerwallet.cc","ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"domain_registered":"2026-01-23","domain_rank":0,"first_seen":"2026-04-25T21:03:24.994893Z","last_seen":"2026-04-25T21:03:24.994893Z","alert_count":114,"request_count":38,"received_data":1374990,"sent_data":17863,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OneTrust","description":"OneTrust is a cloud-based data privacy management compliance platform.","website":"https://www.onetrust.com","common_platform_enumeration":"","icon":"OneTrust.svg","categories":["Cookie compliance"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Sassy Social Share","description":"Sassy Social Share allows your website visitors to share your content over Facebook, Twitter, Google, Linkedin, Whatsapp, Tumblr, Pinterest, Reddit, Gab, Gettr and over 110 more social sharing and bookmarking services.","website":"https://wordpress.org/plugins/sassy-social-share","common_platform_enumeration":"","icon":"","categories":["Widgets","WordPress plugins"]},{"name":"WPML:4.7.1","description":"WPML plugin makes it possible to build and run fully multilingual WordPress sites.","website":"https://wpml.org/","common_platform_enumeration":"","icon":"WPML.svg","categories":["WordPress plugins","Translation"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Yoast SEO:24.5","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.ledgerwallet.cc/js/config.js","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0554350b6d59a1c0d42d0da5b8412b29","sha1":"40df78bb8354bab7bb755324aef1253f456d725e","sha256":"c2c9ccbe2437b10c9438e40659a9af33e7e712ce4a5985c81ecdafd25948d44b","sha512":"ef3452346300b9b7e569aa120c687c0b336d5a0daef73ac15ce3749471c46b676fbbfa6c25cb87cf354bbac580af513e305ee7b003bb9a0cde6a82fd6e8f1a56","ssdeep":"","tlshash":"80115e23ab77c33398b025ba391a5d4e41495c2a16983c0777ba7ad0dac4823188fbc9","size":861,"data":"","first_seen":"2026-01-31T09:29:14.42308Z","last_seen":"2026-04-26T14:06:19.035617Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/js/jquery.i18n.min.js","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d07e7ac6cef1004e693e5028b6e078a9","sha1":"9ef8442518dc14f4d00aaca996c52e6c17b2ab58","sha256":"c6cd491e690858f6809ce0a92f1fd4daa606fb1087ab7f13330c76b95791bec1","sha512":"0fa984fa60f5dec78b161e111d1a4f44342514ddf1202c6a855fdc7e85b07ded48f809c6c85dcc9c50add972ab243bc6454b3095d192de1034f7d07f30a3ef79","ssdeep":"","tlshash":"f3616c0c7679a640d0bb33768e6a91d8f5308b3b02d46604bf2d79d52f705a086e7fa9","size":3217,"data":"","first_seen":"2026-01-31T09:29:14.430208Z","last_seen":"2026-04-26T14:06:19.036847Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"eeab06c71f63e6bd621c830e521e6b6c","sha1":"60d6fa758ffdfd0cb876d659863f3f1839e2e066","sha256":"bac68d6838d8689935de9289dfe65272ce1bc4412c519f89384eb54d319aa4c6","sha512":"40b32ed7807eb32b9719e4845f43588e76ecebf498f8a0f8d41dddaa81add2e05cdd88991a3f78f54ed6b57c0a36aba290214d5ed3a675366805065a58b1c372","ssdeep":"","tlshash":"979002054d508a3d48da1ac752d947c565901c9ee849205500a5a90919409d5a6606d5","size":57,"data":"","first_seen":"2023-03-10T12:47:25Z","last_seen":"2026-04-26T14:06:19.043684Z","times_seen":236,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/js/globalisation-bar.js","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aff10185a0d3f46ab6d4651f50854dd8","sha1":"ab913096324d5bd9daa7a261082d349028dc5a8c","sha256":"2d92480eef85919e3e091a0a97fb66b6bd365a7957e5cfc971fe378fba2e3b60","sha512":"920c641a203b9519bc71f8a5facc4d10b25228f6790adb05e88ec3d5ebb077f586ec87ba4d8577f71071c40f7f2f7f6ad6eff2aef5b243e25f14a720f6be45d2","ssdeep":"","tlshash":"9b41829230d01833909f4897b4a6978d7fb592d53d042c41f02e88a96befe45da13efd","size":2333,"data":"","first_seen":"2023-03-14T17:55:46Z","last_seen":"2026-04-26T14:06:19.034943Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/js/jquery-migrate.min.js","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-26T18:07:53.418183Z","times_seen":691356,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e932f933a5f9cffe4b69d0c2f71f5136","sha1":"7cc69fb78e10e5b546d9306736579dfb5c235756","sha256":"cf6987088637c92905ba0bf55221a4a34a8ba17b6c3e7f89fd49cd8843f05c4c","sha512":"8cd5dc1df9adfb4dbe9ceb4a44c1a0cf91e88bf1ec81394718382cce0bd48454816cf788dff264fdc0d7e3144dc701ab39d46b3c1dc9882a6d0034dee7b80ba0","ssdeep":"","tlshash":"61315aae70e148244137b1390f6f820c752a10672489ed78bf9d87706f65a2b9bf77c9","size":1713,"data":"","first_seen":"2025-04-19T17:02:43.291435Z","last_seen":"2026-04-26T14:06:19.04622Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/js/jquery-3.4.1.min.js","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-04-26T18:07:45.99047Z","times_seen":121483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/js/30433690750.js","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2208c969ec70fe8f77a5d0d26c6b8b7","sha1":"541bc4c7809a405a18866bcf5e7c3304933f0631","sha256":"ed78603592db8190da8f43d68ef07cd3bc0ef4fcf41dc15ed8d390ebe53c1535","sha512":"ac03beb9ae66a4e0600619ab5b5b520a760aa1c5a44d020384266b7e709fa224bae9b4384bcea1e3127cb300c5fdc3eb2a0fff019c283e61c399df3587b65122","ssdeep":"6144:ds9lJG1aA3EABBOUow9SQGOypiAiVaWnL+F:d8GQQBNZGpXJF","tlshash":"e754089c75c0703707a370a4942f100aa23f6995a8dca0a4fa55fad57d3998ea337f7c","size":285810,"data":"","first_seen":"2025-04-19T17:02:43.278055Z","last_seen":"2026-04-26T14:06:19.02118Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/sandbox%20eval%20code","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"8f2f978b9e8bb4ffce1dcf6cbc7ec45f","sha1":"c502e12fe427b823b7383282831f1ad2b87419d0","sha256":"7fd31c692f4e314ea159e25b0d13aa56d878cca222edefec165caf90708b85b8","sha512":"1ae9d648cdc413db6d45ab6f8da4cdbfa5dac1d43544f1650e2bf3d8c6f3f1266db8242367e4dad325a246b3336f5ff7e6d2c7ef9ab41261b30f0605511c299b","ssdeep":"","tlshash":"c6b02b339a40345c1e5026717800500393c553040ba74017f007002b1040fa22a58080","size":125,"data":"","first_seen":"2023-05-06T01:47:54Z","last_seen":"2026-04-26T17:35:51.903795Z","times_seen":21537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/js/main.js","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"be522b7d82e7d59774a71e492e64a413","sha1":"00facaf413467bea4fb4560bb4113ed37930fa2a","sha256":"fac68a76e392cae87d9387e821e4f3c1dbc5545fbbb92170507c3a6a4380ceee","sha512":"a15c2136bc6f9040fa41adeafb5d1f75b7884d6728ece404e1df03eb20a471eb47914ff50e3e6efc2ac4d0df2605af4578f8aaf278e2890ab8b59406da997ebe","ssdeep":"192:JK6W2uakk7E0NHg9UXiTjuUzmZA54uJ8S7G:JKwkk7V2qPA518F","tlshash":"cdf17325b71ca5fe01ff60a7f17f3370323b1456f79180946426d4a6286cea91263fda","size":7900,"data":"","first_seen":"2024-12-10T16:50:02.914831Z","last_seen":"2026-04-26T14:06:19.031734Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/js/popin.js","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"57949c59d347e22757030b78c7fb1500","sha1":"8be4f9e8afa758f7003769b194ab7ccf72806dd8","sha256":"dfbada0689d4aa6b4905d9576ed5b0f1478368e4edf1e833d315bf83709a4568","sha512":"70e1d73f9d7cd022e6cf5a69af5ccf1f06abe79d170c5cc5d20b3cc61aedd6cc3f290d4600a8f2391c56d112c39568953fb54d03d989d22f0182b8ac7feecdfa","ssdeep":"","tlshash":"e211b158f7485d7110ef9bf212ffa7503765215ef58948050820ccd41fddac3b1a61ca","size":935,"data":"","first_seen":"2025-04-19T17:02:43.265334Z","last_seen":"2026-04-26T14:06:19.029221Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/js/language-cookie.js","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3606e4db5e156a1b086bcfeb3b2d9b4","sha1":"23220c5385d52aa1226568fa61390fae99b9c707","sha256":"e923165e0466e69b1e37ea031843f07029a2b4ce2f7aa133f807f020fea53217","sha512":"400a8d14e0e971e0f3077e6044426bb9f8ab3e542169a3ae71b4c046ab461921b2d2f62b402708311f8905f69c4c9cf13e081a624ab2fa8da666ad67e3a24b28","ssdeep":"","tlshash":"56d012183bdc462c053573153bfee2553d3575497082944e4784f4741de4e63ec688b7","size":290,"data":"","first_seen":"2025-03-05T15:00:38.97335Z","last_seen":"2026-04-26T17:37:36.002798Z","times_seen":13284,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/js/jquery.min.js","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-26T18:07:53.454398Z","times_seen":745113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/js/otSDKStub.js","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"160781b098f2515908d071936ad73582","sha1":"966b376bce864deb97cc31ad53d43bb5029e2f70","sha256":"18d9d050df7998e9bf7818ee86fe38893c4641d4e8f077ef6220b6b0ca0a4eaf","sha512":"f882396ac1d2966c4acbc874066c9566157aa76b60f79e55ab5c6108552456e28c257be123b4f05bee0bd1ee84a0657a0324bd0983a272218e248a0b13e44a89","ssdeep":"384:Y8ywjpKOtdTDUMABwXqo+Ur+hjTJ8eMAB6LCbnmc52Jo3pA:Yg9KkDLABwX21hjTJHeCz7A","tlshash":"19b2facdb100ef3406d361ed5a3be2aaa236745d2489c174b895dcf0257cc8b6633bb5","size":23567,"data":"","first_seen":"2025-02-17T13:18:46.264855Z","last_seen":"2026-04-26T14:06:19.030604Z","times_seen":2101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/js/sassy-social-share-public.js","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6fdf00969efecb84184ab6dd2442b605","sha1":"2ec7fb09587c6fe1faec9e3aebceec15df31baa7","sha256":"cca7669f0189166554a1d4290903c5c6fb3cfda24a839719c802c4226be7449f","sha512":"fc1b60eb525612190e2442b3f3e4541e94b4bab37b1191fc5a3f2b86e4fb5a5191abb7cc0e64113a30189c773a1eb74b734bd5f36a14b6cd37bd6a631aa686c2","ssdeep":"1536:hOMoFCtv4j7KCNd14JQkdAnBt45pX20bmgvotCzSSeFEsqoIawCG37VsUA:hORrj7K8kakeBtXYzSSeFEsqoIaw134","tlshash":"29d329a6b350a15c749f8f9cfb36d288621f60afe4d682dcf05d97383255ac5f842c28","size":130816,"data":"","first_seen":"2024-08-31T05:20:10Z","last_seen":"2026-04-26T14:06:19.019567Z","times_seen":1381,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"81c9b8aeb5e3c5dea16c4aae078134bf","sha1":"35e53b332d81ceaf77ae03fc7a0efd1b4e1ac925","sha256":"5448f8436d45889712a496c54b8c055d4aadaca33161c28b5e028be5ff787f44","sha512":"4f09779f5d7754c595f47d08728f41d5568b7136d86d95ebc2458874a9c18fdf3efa3354d4bd929298d000b07a647fe2f4bbf52f335890e8e645d113cda04e31","ssdeep":"","tlshash":"9cd092759dc7249bbd42722a2b57318222b14b8e0567ad8d15c8da045fe2d04894adea","size":241,"data":"","first_seen":"2024-08-21T10:13:49.019722Z","last_seen":"2026-04-26T14:06:19.047401Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/js/iosCookieDisable.js","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"28533cb162279eba36a01f44efe2509e","sha1":"f73daa139da69729c2591ba88bd42168c0591be0","sha256":"777ed4c86261c3682f931fe1d38b24f184abeb04708a122ea45ec630f0b5f3fa","sha512":"fbfcf8e4dbd3ae44014decc6b78482cf8d8db2d8ece5e66d70f5320e6e78bc16984d1910f0cb2f3c3ced93ae4861cb0b596f5ca216059086c04771f5e48461c4","ssdeep":"","tlshash":"88e027f4586157bd7e75410415c673a03171914e2d06ee459c57dc755958f0e0d52703","size":303,"data":"","first_seen":"2024-12-10T16:50:02.91277Z","last_seen":"2026-04-26T14:06:19.040675Z","times_seen":147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"37ac5d499fe4ead5aa0c97aae7d8fc05","sha1":"485e8f3dbca89e764f04a3dabc62223cd9192699","sha256":"22dfcc66b6bb20de958811788bfcf4270709ffbdc0e7d56392dfd36755cd751d","sha512":"1412cbecf5025c53f685a21246bb4f7a685e2bf9f56797be3b6252cb8574be3e280632ce81965fcbf6e2aafc96e24681ae8bce728ab7ec9ee6d87372eb513523","ssdeep":"","tlshash":"f70149bb7ea311308b9fb42f177e8388787080170945d8017f2c906a4fb1e53257aae8","size":793,"data":"","first_seen":"2025-04-19T17:02:43.304196Z","last_seen":"2026-04-26T14:06:19.047972Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"851ad2f5cec7a1d665d0f6d3a8a2779e","sha1":"f91e811af77c662ba54b2415abfecb45f0427a2e","sha256":"3d4490f93ab1a6f1867c77316e14ce718ea8ae9df897832c7b686ab87aba7f59","sha512":"af909229909e62211e001af8a9744b2accfbb08ecb3571d5b4c2426fdea2a2f629ab2dfd785adcee6cd870e0aea7a43613d2910e6e8051b265a8e72d04d09d13","ssdeep":"","tlshash":"bdd0c7e61227844015d112db7f5d760464766113f54136a23e1d55544b9690fd5ba3b0","size":227,"data":"","first_seen":"2025-04-19T17:02:43.305106Z","last_seen":"2026-04-26T14:06:19.048536Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/js/swiper-bundle.min.js","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b52bcce0c3004d1856bc9a4d5042a8e","sha1":"37eaa556e6f385d951fd26c3b2558bcca794f9e7","sha256":"57fe9df5c1cb81e64f22718e83fcea01b465b958782d03426e83a6b3336bc5fa","sha512":"2810addec74539c16d6138047c4dee25c915a6f3ebd70f073ee8323e01c513fe2224ec21c23e9e49a176edb0c94c7457da3c8014e815dd57bdbce0fdeeb6e3ae","ssdeep":"1536:NIJWfG2cz8NgxMGCF+zzHolxUkyBkF+cu0FWvtnSxU9Xmp8MjMLaCW5YG7Qu3WEu:qJoNxBlyBkMsU9Wp8MjMel5YoD39u","tlshash":"84d3f9896220b57646e316db92e4c221b3b50544b80ac8f470bd4c9f597ec9813feffa","size":138272,"data":"","first_seen":"2023-04-01T11:04:48Z","last_seen":"2026-04-26T14:06:19.032554Z","times_seen":299,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/js/f8a71d88c0.js","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"75139775c052785b78bf85918b344fed","sha1":"96307750587567286db5cfdac27d3e4c9227a99a","sha256":"ec53033ea1f9853e6ff19e8e75eb9f78c4cc0a91ec6c8a056cd3982951a628cc","sha512":"57fa96ce06b0ac507bbd9af0fb6e48ab1413f3925be2816e201760a61d5bf4e2812af23eff5fc394d16977d4f228771cd34e4730f5e740c06afc75bf2d0c8df2","ssdeep":"192:BO3pHufbPUCpurfvzCpg67vhcz0gZQJ5BC3hxonZkPzzi3ZuO9ovh3y1Q5l8h3tH:BdACCCdhczKucnmOP9sh3y1Q5l8h3x","tlshash":"0652c55d7a85b47646eb7161803f220fb279312a3406d420e25ddde4acbddae9133f2d","size":13543,"data":"","first_seen":"2025-04-19T17:02:43.274394Z","last_seen":"2026-04-26T14:06:19.025324Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"db52cbfb04a1dfcb08873bb062fb009f","sha1":"e0ac2fdfa9b42dc4d20cb00755c4f7baef80b652","sha256":"5a1ca3b3bc962366ba3010320a42bc1e0e3870ece410112a3386dbcf2130e0ee","sha512":"fbbb46c131e480e6fd20f6c5097a8707b2c89de18f95a00e27efe165fb5ecd7e1ba1b20849bd0404a659d1d977ec90730414d773feb0e0d3ce9d878e90ac020f","ssdeep":"","tlshash":"26a01200cce22c9330a1b0383349304000c1830b0650c04028f8d30a1f5510544c84ec","size":85,"data":"","first_seen":"2025-04-19T17:02:43.30765Z","last_seen":"2026-04-26T14:06:19.04905Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"310b81aa3a0c8bda099aadb10c265e5a","sha1":"4ad4b78f283fa9c514cd57aeb9a84276c47451a2","sha256":"7e20d72332916dad00754f675d4712f27116463e14df96f92f155ea8fe3b2e9b","sha512":"57a5ef2376f38c104aa3ba081f5b95301e40b9838af4f842a97f8a2bf0ff8a32f5e7ec8582032c619a7eb54e3a674fc88d8968d82dec037511b53cfb65a0d487","ssdeep":"","tlshash":"5990041d34d310007157747735df54041435350711457d003d1c57d3cf5107d455154c","size":51,"data":"","first_seen":"2026-04-25T21:03:29.693929Z","last_seen":"2026-04-26T14:06:19.06235Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/picture/windows.svg","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:05.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /static/picture/windows.svg HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:01 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 357\r\nlast-modified: Tue, 22 Jul 2025 06:21:48 GMT\r\netag: \"687f2dfc-165\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":357,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5f55d8525ea1a10b08a5516420648186","sha1":"41ab6b88f1b13960b7d84860262548e59128a43b","sha256":"ab46b270159c355c53da475e47b87adcd9a3b790b548e78dca2c6ec440901473","sha512":"6ce2d497118c4800fee22dbe78d4d5977aba9646dd1fe95c2b86928b2d48cd3a02425afe8cad0221dba947fcba3fe9d1fbd8c84748c421325018740345392809","ssdeep":"","tlshash":"29e026b61004a830d5b6c338b328b4b33926b2c179b700b49caca68db56d1cd0d1b1f8","first_seen":"2025-01-23T11:47:07.090196Z","last_seen":"2026-04-26T14:06:19.034317Z","times_seen":109,"resource_available":false,"data":null}},"time_used":1071,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":805,"receive":266,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/js/f8a71d88c0.js","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:05.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /static/js/f8a71d88c0.js HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 22 Jul 2025 06:21:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"687f2df6-34e7\"\r\nexpires: Mon, 27 Apr 2026 01:29:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13543,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13061)","md5":"75139775c052785b78bf85918b344fed","sha1":"96307750587567286db5cfdac27d3e4c9227a99a","sha256":"ec53033ea1f9853e6ff19e8e75eb9f78c4cc0a91ec6c8a056cd3982951a628cc","sha512":"57fa96ce06b0ac507bbd9af0fb6e48ab1413f3925be2816e201760a61d5bf4e2812af23eff5fc394d16977d4f228771cd34e4730f5e740c06afc75bf2d0c8df2","ssdeep":"192:BO3pHufbPUCpurfvzCpg67vhcz0gZQJ5BC3hxonZkPzzi3ZuO9ovh3y1Q5l8h3tH:BdACCCdhczKucnmOP9sh3y1Q5l8h3x","tlshash":"0652c55d7a85b47646eb7161803f220fb279312a3406d420e25ddde4acbddae9133f2d","first_seen":"2025-04-19T17:02:43.274394Z","last_seen":"2026-04-26T14:06:19.025324Z","times_seen":46,"resource_available":true,"data":null}},"time_used":798,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":798,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/font/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:06.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /static/font/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/static/css/css2.css\r\nCookie: optimizelyEndUserId=oeu1777210386567r0.4177369836789899\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:03 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48444\r\nlast-modified: Tue, 22 Jul 2025 06:21:36 GMT\r\netag: \"687f2df0-bd3c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48444,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48444, version 1.0","md5":"8e433c0592f77beb6dc527d7b90be120","sha1":"d7402416753ae1bb4cbd4b10d33a0c10517838bd","sha256":"f052ee44c3728dfd23aba8a4567150bc314d23903026fbb6ad089422c2df56af","sha512":"5e90f48b923bb95aeb49691d03dade8825c119b2fa28977ea170c41548900f4e0165e2869f97c7a9380d7ff8ff331a1da855500e5f7b0dfd2b9abd77a386bbf3","ssdeep":"768:dn0V9qZpy/4pR+9MzTCGXckDohHxCc/TfZQEh9UONYyPYcABoN/8rZujvB:dn0+rAmWUMooVrbZQE7NYyzABK8rQ1","tlshash":"0523f25daa398ea9ed25403bd63f2ff004c61409dd645cdfa62871bf2db290d06633d6","first_seen":"2024-07-30T23:13:06Z","last_seen":"2026-04-26T16:36:38.674422Z","times_seen":20666,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/js/i18n/i18n_en.json","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:06.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /js/i18n/i18n_en.json HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/\r\nCookie: optimizelyEndUserId=oeu1777210386567r0.4177369836789899; wp-wpml_current_language=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:03 GMT\r\ncontent-type: application/json\r\ncontent-length: 752\r\nlast-modified: Sat, 13 Dec 2025 00:22:24 GMT\r\netag: \"693cb1c0-2f0\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":752,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e59225b9fc16249176c547f2523d52d9","sha1":"2ad5a70c39bb9802e86ea8ca556a1ae41d4cd16e","sha256":"cb801133d7e8199b45e79f95b50c353ac31b25d8073475c2e05102f5a8e6b218","sha512":"23779fa8cacdc1d5dcb6ea337322b8267a0b2742012f7d0ab78b1e74731fe3f3e61170101687cbe3d6db6e49c8281c7f37c952d7b84e70aba74e7fc70fa99dd3","ssdeep":"","tlshash":"ae01242f42f1913d02c8b5a9f8a973bc05218b0f42f5824bb8b45e9ac66dbd0d11db4f","first_seen":"2026-04-25T21:03:29.682555Z","last_seen":"2026-04-26T14:06:19.037481Z","times_seen":4,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/font/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:06.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /static/font/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/static/css/css2.css\r\nCookie: optimizelyEndUserId=oeu1777210386567r0.4177369836789899\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:03 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48444\r\nlast-modified: Tue, 22 Jul 2025 06:21:36 GMT\r\netag: \"687f2df0-bd3c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48444,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48444, version 1.0","md5":"8e433c0592f77beb6dc527d7b90be120","sha1":"d7402416753ae1bb4cbd4b10d33a0c10517838bd","sha256":"f052ee44c3728dfd23aba8a4567150bc314d23903026fbb6ad089422c2df56af","sha512":"5e90f48b923bb95aeb49691d03dade8825c119b2fa28977ea170c41548900f4e0165e2869f97c7a9380d7ff8ff331a1da855500e5f7b0dfd2b9abd77a386bbf3","ssdeep":"768:dn0V9qZpy/4pR+9MzTCGXckDohHxCc/TfZQEh9UONYyPYcABoN/8rZujvB:dn0+rAmWUMooVrbZQE7NYyzABK8rQ1","tlshash":"0523f25daa398ea9ed25403bd63f2ff004c61409dd645cdfa62871bf2db290d06633d6","first_seen":"2024-07-30T23:13:06Z","last_seen":"2026-04-26T16:36:38.674422Z","times_seen":20666,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/picture/android.svg","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:05.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /static/picture/android.svg HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:01 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 22 Jul 2025 06:21:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"687f2dfa-c75\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3189,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e2165b4b3dde528e8e8e8b1817f87690","sha1":"f6df3a8ffa22cb22e249d5acf32de52213240ea5","sha256":"51538f4454407de13d2851738310f7159a56152f6fdf3bc90c49942d697a78af","sha512":"4b3ad8e712ecb4dd59c476afef83e75de1ace88aef7e0a1e1ecca791bcecdd8eeec424c62d9615a617c06ee64aefb3d53140bfc05156075eaa41c7604f401db6","ssdeep":"","tlshash":"b46173d532b922fcf980d7fc910390b67515b8fa3fa1d22847709e25a61246d4d76ce3","first_seen":"2025-01-23T11:47:07.079362Z","last_seen":"2026-04-26T14:06:19.031173Z","times_seen":108,"resource_available":false,"data":null}},"time_used":806,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":806,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/css/vli5gyn.css","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:05.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /static/css/vli5gyn.css HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/static/css/main.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 22 Jul 2025 06:21:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"687f2dec-a20\"\r\nexpires: Mon, 27 Apr 2026 01:29:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2592,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (393)","md5":"8914b6abf914a88707ead2042780a9f6","sha1":"f670ddb96a004624c47cac67cbacacb9b196cb7f","sha256":"9638746c28edcfbd5805c6b5b95ddcf006bb67e74f791ff0d7c6b8afcecdb4e1","sha512":"e99c518fd6bb61ec71b2aa2b72f959a6a33e8066a88bcdb42fabfb66d705fb947e3b7e1acb2343bb8dd7235a711e950197f4aa02d3f6611e8c333eea51266686","ssdeep":"","tlshash":"4051a8204a0a2492c0e10da736cbbf647a1f317a78c0ac5355ad8d7aadb3d67a300f5d","first_seen":"2025-04-19T17:02:43.288338Z","last_seen":"2026-04-26T14:06:19.017629Z","times_seen":32,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":524,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ka-p.fontawesome.com/releases/v5.15.4/css/pro.min.css?token=f8a71d88c0","fqdn":"ka-p.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.18.40.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:06.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 21:57:31 GMT","end":"Wed, 15 Jul 2026 22:57:28 GMT"},"fingerprint":{"sha1":"AF:65:F8:6C:70:82:CB:7C:3C:AD:4D:54:65:50:3B:13:F0:3A:0B:2E","sha256":"2A:78:5B:B0:CC:FA:C9:8B:51:86:B1:FA:62:ED:C7:B8:BC:18:15:3D:91:FC:87:53:9E:E0:AF:8C:08:D1:17:2F"}}},"request":{"raw":"GET /releases/v5.15.4/css/pro.min.css?token=f8a71d88c0 HTTP/1.1\r\nHost: ka-p.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.ledgerwallet.cc/\r\nOrigin: https://www.ledgerwallet.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sun, 26 Apr 2026 13:33:07 GMT\r\ncontent-length: 9\r\ncf-ray: 9f25f5154b424c11-OSL\r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: GKnrbl3-bU_EfL-o6Xki\r\ncf-cache-status: MISS\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"722969577a96ca3953e84e3d949dee81","sha1":"3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5","sha256":"78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3","sha512":"54b2b4596cd1769e46a12a0ca6ede70468985cf8771c2b11e75b3f52567a64418bc24c067d96d52037e0e135e7a7ff828ad0241d55b827506e1c67de1caee8bc","ssdeep":"","tlshash":"26500000000c000c33c3030000000f000003030000030000cf000003000000c00c000c","first_seen":"2023-04-05T07:39:32Z","last_seen":"2026-04-26T15:32:37.936274Z","times_seen":26074,"resource_available":true,"data":null}},"time_used":621,"timings":{"blocked":42,"dns":20,"connect":1,"send":0,"wait":535,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/css/swiper-bundle.min.css","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:05.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /static/css/swiper-bundle.min.css HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 22 Jul 2025 06:21:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"687f2dec-45f3\"\r\nexpires: Mon, 27 Apr 2026 01:29:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17907,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (17653)","md5":"8f1466ab740d33fd9870d24bc5565378","sha1":"f2ed0ba668e294c3d4be0f6378a572612d06c685","sha256":"53e05ab85d78b92fa96ffe4b348e57c6c292350ffe2c8895ce32c0ea4a4d4599","sha512":"25ad68c629cc9844417a8917c7e9db41555778d5fbef5b6751259638ae261886c302f32b59c46c8ad791c933f6ae076617c6f08cb7442400c8c1d317400e5c72","ssdeep":"192:q6mUJbiKne0JlXZHZ+SMS4nxep/a2GZb0Q5nfufKlAYfg5fyeesedOJ9A5Pz+c3y:qHUbe0JdZHZ+1nZ24tlWfF4XYz","tlshash":"958244a86300282753274f364b71cbb9dd7444d20f9389ae91c0ee48d7f6db9136f6a9","first_seen":"2023-04-05T13:09:42Z","last_seen":"2026-04-26T14:06:19.022674Z","times_seen":506,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/css/sassy-social-share-public.css","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:05.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /static/css/sassy-social-share-public.css HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 22 Jul 2025 06:21:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"687f2dec-2982\"\r\nexpires: Mon, 27 Apr 2026 01:29:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10626,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10626), with no line terminators","md5":"dfef56ce10fcc95babd48b3a1deffd0b","sha1":"c503cadef77da33bc7c4c3986d280174013c387e","sha256":"90677654dfc817c8ab412ae4c941a27af0c69e7907f64a524773a0bfc2fd1322","sha512":"669e103c1db8ae49b2fc72febac41d352653086d69aea2944edf98dea8122398d9bc89d7a39f3bb1dd0bee192ec92f2fe997ab96894660cd475ef5ecd0ffc5e0","ssdeep":"192:ZClNjmY+qKYsTAPqkLgT+TuTHTiaTiTdT3TUTCTrTmyrHQt/o:Ql04svCqrua+J74O3DrHQt/o","tlshash":"2922102bebd9157a6523ccb7f713b6bcf4282881af8708aedc01e33d474199b1a69544","first_seen":"2025-04-19T17:02:43.270399Z","last_seen":"2026-04-26T14:06:19.030076Z","times_seen":32,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":541,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/picture/macos.svg","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:05.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /static/picture/macos.svg HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:01 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 22 Jul 2025 06:21:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"687f2dfc-ade\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2782,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a5900522e13c97d8a78a85c9ee4c204f","sha1":"05fede7dfc2545e1e16a218fd632082ffe76644f","sha256":"c985ee2d30e0b92af51a4e65285b1c0cb8cf506ef81fcc0e107664d5c53c1862","sha512":"5d5e47aa6fe4ee5ab74cd8004a20c92c95b569c5df9d12e69cfb3332d440fe963e3f20ec042b800208847eac4a65c75a3d7f172aa71785094af2f2a65a3335c2","ssdeep":"","tlshash":"2d51980873fc60b4e104e2e6066969ba2e973df72531c41c8fd53c6bee5158ec9a0d57","first_seen":"2025-01-23T11:47:07.091882Z","last_seen":"2026-04-26T14:06:19.042813Z","times_seen":104,"resource_available":false,"data":null}},"time_used":805,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":805,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/picture/linux.svg","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:05.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /static/picture/linux.svg HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:01 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 22 Jul 2025 06:21:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"687f2dfa-f72\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3954,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ee06aaff416114ce48b88ade9ded6dc2","sha1":"1638a4c57d219c3183e3f70acd15b2c53c897867","sha256":"84aa2ea10843d283647a2dcfe58f6c3f945e8a790efb094f1c7d969e6f85e638","sha512":"768bb7e6b3e4b72fa0c8111839c09d01a72a5cef89bc9c692d23e63636d7707505c20f3fc4509f4daf11985d0223099d791b6ca62a5f1c3b5aae4a286f470a36","ssdeep":"","tlshash":"798177aa93f691bcb040c7f9c596ac3977166ef12a42cd4973ec18d5c75001dad2e8d3","first_seen":"2025-01-23T11:47:07.076005Z","last_seen":"2026-04-26T14:06:19.024833Z","times_seen":104,"resource_available":false,"data":null}},"time_used":804,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":804,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/js/iosCookieDisable.js","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:05.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /static/js/iosCookieDisable.js HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 303\r\nlast-modified: Tue, 22 Jul 2025 06:21:42 GMT\r\netag: \"687f2df6-12f\"\r\nexpires: Mon, 27 Apr 2026 01:29:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":303,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with very long lines (303), with no line terminators","md5":"28533cb162279eba36a01f44efe2509e","sha1":"f73daa139da69729c2591ba88bd42168c0591be0","sha256":"777ed4c86261c3682f931fe1d38b24f184abeb04708a122ea45ec630f0b5f3fa","sha512":"fbfcf8e4dbd3ae44014decc6b78482cf8d8db2d8ece5e66d70f5320e6e78bc16984d1910f0cb2f3c3ced93ae4861cb0b596f5ca216059086c04771f5e48461c4","ssdeep":"","tlshash":"88e027f4586157bd7e75410415c673a03171914e2d06ee459c57dc755958f0e0d52703","first_seen":"2024-12-10T16:50:02.91277Z","last_seen":"2026-04-26T14:06:19.040675Z","times_seen":147,"resource_available":true,"data":null}},"time_used":1062,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":802,"receive":260,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/js/globalisation-bar.js","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:05.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /static/js/globalisation-bar.js HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 22 Jul 2025 06:21:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"687f2df6-91d\"\r\nexpires: Mon, 27 Apr 2026 01:29:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2333,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2333), with no line terminators","md5":"aff10185a0d3f46ab6d4651f50854dd8","sha1":"ab913096324d5bd9daa7a261082d349028dc5a8c","sha256":"2d92480eef85919e3e091a0a97fb66b6bd365a7957e5cfc971fe378fba2e3b60","sha512":"920c641a203b9519bc71f8a5facc4d10b25228f6790adb05e88ec3d5ebb077f586ec87ba4d8577f71071c40f7f2f7f6ad6eff2aef5b243e25f14a720f6be45d2","ssdeep":"","tlshash":"9b41829230d01833909f4897b4a6978d7fb592d53d042c41f02e88a96befe45da13efd","first_seen":"2023-03-14T17:55:46Z","last_seen":"2026-04-26T14:06:19.034943Z","times_seen":87,"resource_available":true,"data":null}},"time_used":800,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":800,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/css/p.css","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:06.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /static/css/p.css HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/static/css/vli5gyn.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:02 GMT\r\ncontent-type: text/css\r\ncontent-length: 5\r\nlast-modified: Tue, 22 Jul 2025 06:21:32 GMT\r\netag: \"687f2dec-5\"\r\nexpires: Mon, 27 Apr 2026 01:29:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"83d24d4b43cc7eef2b61e66c95f3d158","sha1":"f0cafc285ee23bb6c28c5166f305493c4331c84d","sha256":"1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb","sha512":"e6e84563d3a55767f8e5f36c4e217a0768120d6e15ce4d01aa63d36af7ec8d20b600ce96dcc56de91ec7e55e83a8267baddd68b61447069b82abdb2e92c6acb6","ssdeep":"","tlshash":"e630000000000000000000000000000000000c00000000000000000000000000000000","first_seen":"2023-03-12T07:28:04Z","last_seen":"2026-04-26T18:07:38.433311Z","times_seen":131584,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":269,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/js/otSDKStub.js/consent/5ff3ecce-44bd-4ef3-b746-ec81546bf82a/5ff3ecce-44bd-4ef3-b746-ec81546bf82a.json","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:06.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /static/js/otSDKStub.js/consent/5ff3ecce-44bd-4ef3-b746-ec81546bf82a/5ff3ecce-44bd-4ef3-b746-ec81546bf82a.json HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:02 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-04-26T18:07:34.030835Z","times_seen":496543,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/css/live.css","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:05.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /static/css/live.css HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 22 Jul 2025 06:21:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"687f2dea-bcfc\"\r\nexpires: Mon, 27 Apr 2026 01:29:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48380,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (48380), with no line terminators","md5":"7667a25a52011279a199c9c6f259f0a1","sha1":"f1132ea9d75a1fee0238b3c7d21f25dd750bfc95","sha256":"888727b902bd8a4d097954dc2198ff9ed485e412b4e4dc04306850f314624d57","sha512":"84329725122c243e28fc152ab85aa0a4c23fc34f654dee55580ae9397ff865dfffc10bd102b40605900baa947c1bbed4081c15c99b3f0a64711a8124a04c15ff","ssdeep":"384:qSqXKiTj6bT41JyvEw+AJ+wbkmANJ1DJwTxgJvldGlqaR7KDqaRQwM9qqaROkGqF:icKmcM9tOZjqVbwMRAAgd92wj","tlshash":"11239513ad61723c6dbf463bb47674a89638c806eb4b5bfd88d2d629d3dc3300136999","first_seen":"2025-04-19T17:02:43.260493Z","last_seen":"2026-04-26T14:06:19.03918Z","times_seen":32,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":541,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/js/main.js","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:05.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /static/js/main.js HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 22 Jul 2025 06:21:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"687f2df8-1edc\"\r\nexpires: Mon, 27 Apr 2026 01:29:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7900,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7900), with no line terminators","md5":"be522b7d82e7d59774a71e492e64a413","sha1":"00facaf413467bea4fb4560bb4113ed37930fa2a","sha256":"fac68a76e392cae87d9387e821e4f3c1dbc5545fbbb92170507c3a6a4380ceee","sha512":"a15c2136bc6f9040fa41adeafb5d1f75b7884d6728ece404e1df03eb20a471eb47914ff50e3e6efc2ac4d0df2605af4578f8aaf278e2890ab8b59406da997ebe","ssdeep":"192:JK6W2uakk7E0NHg9UXiTjuUzmZA54uJ8S7G:JKwkk7V2qPA518F","tlshash":"cdf17325b71ca5fe01ff60a7f17f3370323b1456f79180946426d4a6286cea91263fda","first_seen":"2024-12-10T16:50:02.914831Z","last_seen":"2026-04-26T14:06:19.031734Z","times_seen":40,"resource_available":true,"data":null}},"time_used":801,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":801,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledger.com/wp-content/themes/ledger-v2/public/fonts/HMAlphaMono-Medium.otf","fqdn":"www.ledger.com","domain":"ledger.com","tld":"com"},"ip":{"addr":"172.64.153.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:06.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 10:32:23 GMT","end":"Fri, 10 Jul 2026 11:32:10 GMT"},"fingerprint":{"sha1":"BC:36:D3:AD:3E:3B:DB:64:DB:92:E7:5C:EE:73:63:5D:DD:9D:50:7E","sha256":"97:42:87:20:1F:86:EB:0C:05:20:EC:34:3B:0F:A0:72:6D:70:A9:AB:90:60:53:AF:66:6C:F5:D6:E7:17:AC:37"}}},"request":{"raw":"GET /wp-content/themes/ledger-v2/public/fonts/HMAlphaMono-Medium.otf HTTP/1.1\r\nHost: www.ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.ledgerwallet.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Apr 2026 13:33:06 GMT\r\ncontent-type: font/otf\r\ncontent-encoding: br\r\netag: \"dhvfspr95qf4wso\"\r\nlast-modified: Fri, 17 Apr 2026 12:42:49 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\nset-cookie: __cf_bm=1vL0SUgCbF1Pu56ANaN5lYFlz8LkV3CiP4_Ia9vZXdc-1777210386.707616-1.0.1.1-VkdekIdWbuE0MoAyXGZOetEFpWBRYMy21wyUGwnHJiGTsLaYNdNUcZH9ltqkH_c5Rk6lKqnUfTanfKdDmxFei4YMf1YFHxa1EDOztHZYLviQ7JaSuB_SjygmSetYEcCd; HttpOnly; Secure; Path=/; Domain=ledger.com; Expires=Sun, 26 Apr 2026 14:03:06 GMT\r\nexpires: Sun, 26 Apr 2026 17:33:06 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: REVALIDATED\r\nserver: cloudflare\r\ncf-ray: 9f25f514e83f56bb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42504,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"1e23673ac7da90f745d9c0c32853755c","sha1":"761ec8cc6847bb87504d8094dd7ded1e841efa58","sha256":"272e189d3a286d88ab5fedcf1be3b597351a1a83ca4adec3b4d1833e75b917af","sha512":"b2b407b1ca07fdf25b0351060a84f62b2cebf55222f3b458fa92e96cf1d3c4a2f569462f7670701d6c19ea496a3a5e7b0f3965a62ae374a9cf11eaf5049b4626","ssdeep":"768:jqCQxf7pMSDPHeYXQvgjy8p/Iww76KyKTJPcbOis1MCf:qDPTQvgyd7TyKTzixCf","tlshash":"b313c0fc2b1d5781c6da4d301aa97bbdf276434b93226346984ee2d19c402ac9cce6dd","first_seen":"2023-05-18T18:15:48Z","last_seen":"2026-04-26T14:06:19.026477Z","times_seen":442,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":49,"dns":21,"connect":1,"send":0,"wait":102,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/font/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:06.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /static/font/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/static/css/css2.css\r\nCookie: optimizelyEndUserId=oeu1777210386567r0.4177369836789899\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:02 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48444\r\nlast-modified: Tue, 22 Jul 2025 06:21:36 GMT\r\netag: \"687f2df0-bd3c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48444,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48444, version 1.0","md5":"8e433c0592f77beb6dc527d7b90be120","sha1":"d7402416753ae1bb4cbd4b10d33a0c10517838bd","sha256":"f052ee44c3728dfd23aba8a4567150bc314d23903026fbb6ad089422c2df56af","sha512":"5e90f48b923bb95aeb49691d03dade8825c119b2fa28977ea170c41548900f4e0165e2869f97c7a9380d7ff8ff331a1da855500e5f7b0dfd2b9abd77a386bbf3","ssdeep":"768:dn0V9qZpy/4pR+9MzTCGXckDohHxCc/TfZQEh9UONYyPYcABoN/8rZujvB:dn0+rAmWUMooVrbZQE7NYyzABK8rQ1","tlshash":"0523f25daa398ea9ed25403bd63f2ff004c61409dd645cdfa62871bf2db290d06633d6","first_seen":"2024-07-30T23:13:06Z","last_seen":"2026-04-26T16:36:38.674422Z","times_seen":20666,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":270,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/favicon.ico","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:07.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/\r\nCookie: optimizelyEndUserId=oeu1777210386567r0.4177369836789899; wp-wpml_current_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:03 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-04-26T18:07:34.030835Z","times_seen":496543,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/js/jquery.min.js","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:05.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /static/js/jquery.min.js HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 22 Jul 2025 06:21:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"687f2df8-15601\"\r\nexpires: Mon, 27 Apr 2026 01:29:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-26T18:07:53.454398Z","times_seen":745113,"resource_available":true,"data":null}},"time_used":811,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":811,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/image/logo-long.svg","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:05.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /static/image/logo-long.svg HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:01 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 22 Jul 2025 06:21:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"687f2df4-7c9\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1993,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bab631a2479c23c7727cf637c7e005e4","sha1":"8314d7bb128be21c1b40ce9de4c76b524b651bcf","sha256":"088d1bf639f9a9e3f2ca38cf1ea4c88002c79d6f3e4706868aa3d9f27208109f","sha512":"f9cc6d7447d4ab817cbb5e516eb4f28982a1f30fc727f8551eab06ebb772b269b0e0afe95b28bb56a3d9ef31d59a0b3e491963fe6a2480f7b1ee5dcb0119a2fa","ssdeep":"","tlshash":"a941b4d84ab002fdcc58e9fe0b68312c696651e5f409449df7e39e2ead9844c8c4a2f2","first_seen":"2023-07-02T01:08:01Z","last_seen":"2026-04-26T14:06:19.018946Z","times_seen":615,"resource_available":false,"data":null}},"time_used":808,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":808,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/picture/ios.svg","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:05.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /static/picture/ios.svg HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:01 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 22 Jul 2025 06:21:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"687f2dfa-5db\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1499,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c48840ea68fc5cfd38a0ccbf3ad749b8","sha1":"3c85f6a72c486226512b2c2e8e7f55dbc3dfdcf8","sha256":"1c205b2d13092a1627aa2f0c5098ded9f8f1f7f8e1edff0697f4fba66a77a1e2","sha512":"8fd1e65f9c60e6f587f6818455a5977e7e496558e04faa7740c0bb4dc7d24999fe11718ffcd0f275f32408c03100159557de174087be01167da5b630ac4904f7","ssdeep":"","tlshash":"f73172a5f3c3a17ed491afb48d3690b838035883fd31f92554e82c2b694552e8c7a8df","first_seen":"2025-01-23T11:47:07.093432Z","last_seen":"2026-04-26T14:06:19.024187Z","times_seen":108,"resource_available":false,"data":null}},"time_used":806,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":806,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/js/popin.js","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:05.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /static/js/popin.js HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 935\r\nlast-modified: Tue, 22 Jul 2025 06:21:44 GMT\r\netag: \"687f2df8-3a7\"\r\nexpires: Mon, 27 Apr 2026 01:29:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":935,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (935), with no line terminators","md5":"57949c59d347e22757030b78c7fb1500","sha1":"8be4f9e8afa758f7003769b194ab7ccf72806dd8","sha256":"dfbada0689d4aa6b4905d9576ed5b0f1478368e4edf1e833d315bf83709a4568","sha512":"70e1d73f9d7cd022e6cf5a69af5ccf1f06abe79d170c5cc5d20b3cc61aedd6cc3f290d4600a8f2391c56d112c39568953fb54d03d989d22f0182b8ac7feecdfa","ssdeep":"","tlshash":"e211b158f7485d7110ef9bf212ffa7503765215ef58948050820ccd41fddac3b1a61ca","first_seen":"2025-04-19T17:02:43.265334Z","last_seen":"2026-04-26T14:06:19.029221Z","times_seen":48,"resource_available":true,"data":null}},"time_used":1058,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":798,"receive":260,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/css/css2.css","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:05.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /static/css/css2.css HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/static/css/main.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 22 Jul 2025 06:21:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"687f2dea-4f7d\"\r\nexpires: Mon, 27 Apr 2026 01:29:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20349,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"88dffa80ed8f9bc765e44562afd12abf","sha1":"bd845cc2e88e5f4c882524de7f8d92e2b817e18e","sha256":"eba27d442e83dcaa1aaf0ca82a815d890e36e974f39b5310da05cc57ccb549b1","sha512":"b783b9e2e097225ddd39d41e4e68333ea042acc0533112e807ccb0d90892dac412f3695a8925e50e4e39b1020d4e457e51831bf716bdf7b670629f51bb2bb364","ssdeep":"192:Wp6mp6p1p93tpqpWYp76nTu93GDWRU6AMt93l8WiJ6Nhg934RWDa6OyH93/iW83D:WImcDDt0F4kZn3SZVbIR7fmxJG","tlshash":"23927781042b6100e6871dd263cf3f266edd2089b049c6ba2ffd1c9b9ceed6523a574d","first_seen":"2025-04-19T17:02:43.268113Z","last_seen":"2026-04-26T14:06:19.018279Z","times_seen":32,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":524,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ka-p.fontawesome.com/releases/v5.15.4/css/pro-v4-shims.min.css?token=f8a71d88c0","fqdn":"ka-p.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.18.40.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:06.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 21:57:31 GMT","end":"Wed, 15 Jul 2026 22:57:28 GMT"},"fingerprint":{"sha1":"AF:65:F8:6C:70:82:CB:7C:3C:AD:4D:54:65:50:3B:13:F0:3A:0B:2E","sha256":"2A:78:5B:B0:CC:FA:C9:8B:51:86:B1:FA:62:ED:C7:B8:BC:18:15:3D:91:FC:87:53:9E:E0:AF:8C:08:D1:17:2F"}}},"request":{"raw":"GET /releases/v5.15.4/css/pro-v4-shims.min.css?token=f8a71d88c0 HTTP/1.1\r\nHost: ka-p.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.ledgerwallet.cc/\r\nOrigin: https://www.ledgerwallet.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sun, 26 Apr 2026 13:33:07 GMT\r\ncontent-length: 9\r\ncf-ray: 9f25f5154b444c11-OSL\r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: GKnrbl_0pYj-RG4QCbPB\r\ncf-cache-status: MISS\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"722969577a96ca3953e84e3d949dee81","sha1":"3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5","sha256":"78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3","sha512":"54b2b4596cd1769e46a12a0ca6ede70468985cf8771c2b11e75b3f52567a64418bc24c067d96d52037e0e135e7a7ff828ad0241d55b827506e1c67de1caee8bc","ssdeep":"","tlshash":"26500000000c000c33c3030000000f000003030000030000cf000003000000c00c000c","first_seen":"2023-04-05T07:39:32Z","last_seen":"2026-04-26T15:32:37.936274Z","times_seen":26074,"resource_available":true,"data":null}},"time_used":648,"timings":{"blocked":41,"dns":20,"connect":3,"send":0,"wait":564,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/js/30433690750.js","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:05.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /static/js/30433690750.js HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 22 Jul 2025 06:21:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"687f2df6-45c72\"\r\nexpires: Mon, 27 Apr 2026 01:29:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":285810,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65468)","md5":"f2208c969ec70fe8f77a5d0d26c6b8b7","sha1":"541bc4c7809a405a18866bcf5e7c3304933f0631","sha256":"ed78603592db8190da8f43d68ef07cd3bc0ef4fcf41dc15ed8d390ebe53c1535","sha512":"ac03beb9ae66a4e0600619ab5b5b520a760aa1c5a44d020384266b7e709fa224bae9b4384bcea1e3127cb300c5fdc3eb2a0fff019c283e61c399df3587b65122","ssdeep":"6144:ds9lJG1aA3EABBOUow9SQGOypiAiVaWnL+F:d8GQQBNZGpXJF","tlshash":"e754089c75c0703707a370a4942f100aa23f6995a8dca0a4fa55fad57d3998ea337f7c","first_seen":"2025-04-19T17:02:43.278055Z","last_seen":"2026-04-26T14:06:19.02118Z","times_seen":32,"resource_available":true,"data":null}},"time_used":539,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":539,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/picture/app-start.webp","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:05.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /static/picture/app-start.webp HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:01 GMT\r\ncontent-type: image/webp\r\ncontent-length: 54642\r\nlast-modified: Tue, 22 Jul 2025 06:21:46 GMT\r\netag: \"687f2dfa-d572\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54642,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0b19f531a7969cb4c3fe64166d260bd5","sha1":"8d348fac05716b22bcc7a8952b2c7e3f6d31bcab","sha256":"6403d366e2e19f24beaa3c887b99d9f437db3a6b54f389fbacd6c1967e0f14da","sha512":"8ba416b2f3cb416c1ee0a256c7b3a101d71c276dc7c9aa6dcae799f88474645468278f96f49304bfd32e8bd4e0bbf9f74bf0949342e9760b48d7307806237cd2","ssdeep":"1536:h+rwcqFNOGdcd8Tg3i+4Ptfto1ZpTzSxFQNAnaoHn:IFqNd7g3ipVf+1ZR+xFQOJHn","tlshash":"7d3301c8fc1da4f5231c982f5e518f91824e59baef018ddbd36299284657284dfbe8cc","first_seen":"2025-04-19T17:02:43.256612Z","last_seen":"2026-04-26T14:06:19.042196Z","times_seen":40,"resource_available":false,"data":null}},"time_used":1073,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":807,"receive":266,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/picture/logo-long.svg","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:05.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /static/picture/logo-long.svg HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:01 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 22 Jul 2025 06:21:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"687f2dfc-7c9\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1993,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bab631a2479c23c7727cf637c7e005e4","sha1":"8314d7bb128be21c1b40ce9de4c76b524b651bcf","sha256":"088d1bf639f9a9e3f2ca38cf1ea4c88002c79d6f3e4706868aa3d9f27208109f","sha512":"f9cc6d7447d4ab817cbb5e516eb4f28982a1f30fc727f8551eab06ebb772b269b0e0afe95b28bb56a3d9ef31d59a0b3e491963fe6a2480f7b1ee5dcb0119a2fa","ssdeep":"","tlshash":"a941b4d84ab002fdcc58e9fe0b68312c696651e5f409449df7e39e2ead9844c8c4a2f2","first_seen":"2023-07-02T01:08:01Z","last_seen":"2026-04-26T14:06:19.018946Z","times_seen":615,"resource_available":false,"data":null}},"time_used":803,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":803,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/js/sassy-social-share-public.js","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:05.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /static/js/sassy-social-share-public.js HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 22 Jul 2025 06:21:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"687f2dfa-1ff00\"\r\nexpires: Mon, 27 Apr 2026 01:29:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":130816,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2747), with CRLF line terminators","md5":"6fdf00969efecb84184ab6dd2442b605","sha1":"2ec7fb09587c6fe1faec9e3aebceec15df31baa7","sha256":"cca7669f0189166554a1d4290903c5c6fb3cfda24a839719c802c4226be7449f","sha512":"fc1b60eb525612190e2442b3f3e4541e94b4bab37b1191fc5a3f2b86e4fb5a5191abb7cc0e64113a30189c773a1eb74b734bd5f36a14b6cd37bd6a631aa686c2","ssdeep":"1536:hOMoFCtv4j7KCNd14JQkdAnBt45pX20bmgvotCzSSeFEsqoIawCG37VsUA:hORrj7K8kakeBtXYzSSeFEsqoIaw134","tlshash":"29d329a6b350a15c749f8f9cfb36d288621f60afe4d682dcf05d97383255ac5f842c28","first_seen":"2024-08-31T05:20:10Z","last_seen":"2026-04-26T14:06:19.019567Z","times_seen":1381,"resource_available":true,"data":null}},"time_used":803,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":803,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/js/swiper-bundle.min.js","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:05.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /static/js/swiper-bundle.min.js HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 22 Jul 2025 06:21:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"687f2dfa-21c20\"\r\nexpires: Mon, 27 Apr 2026 01:29:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":138272,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65282)","md5":"9b52bcce0c3004d1856bc9a4d5042a8e","sha1":"37eaa556e6f385d951fd26c3b2558bcca794f9e7","sha256":"57fe9df5c1cb81e64f22718e83fcea01b465b958782d03426e83a6b3336bc5fa","sha512":"2810addec74539c16d6138047c4dee25c915a6f3ebd70f073ee8323e01c513fe2224ec21c23e9e49a176edb0c94c7457da3c8014e815dd57bdbce0fdeeb6e3ae","ssdeep":"1536:NIJWfG2cz8NgxMGCF+zzHolxUkyBkF+cu0FWvtnSxU9Xmp8MjMLaCW5YG7Qu3WEu:qJoNxBlyBkMsU9Wp8MjMel5YoD39u","tlshash":"84d3f9896220b57646e316db92e4c221b3b50544b80ac8f470bd4c9f597ec9813feffa","first_seen":"2023-04-01T11:04:48Z","last_seen":"2026-04-26T14:06:19.032554Z","times_seen":299,"resource_available":true,"data":null}},"time_used":799,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":799,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/js/config.js","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:05.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /js/config.js HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 861\r\nlast-modified: Sun, 12 Oct 2025 07:30:08 GMT\r\netag: \"68eb5900-35d\"\r\nexpires: Mon, 27 Apr 2026 01:29:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":861,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"0554350b6d59a1c0d42d0da5b8412b29","sha1":"40df78bb8354bab7bb755324aef1253f456d725e","sha256":"c2c9ccbe2437b10c9438e40659a9af33e7e712ce4a5985c81ecdafd25948d44b","sha512":"ef3452346300b9b7e569aa120c687c0b336d5a0daef73ac15ce3749471c46b676fbbfa6c25cb87cf354bbac580af513e305ee7b003bb9a0cde6a82fd6e8f1a56","ssdeep":"","tlshash":"80115e23ab77c33398b025ba391a5d4e41495c2a16983c0777ba7ad0dac4823188fbc9","first_seen":"2026-01-31T09:29:14.42308Z","last_seen":"2026-04-26T14:06:19.035617Z","times_seen":6,"resource_available":true,"data":null}},"time_used":1057,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":797,"receive":260,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/js/jquery-3.4.1.min.js","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:05.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /js/jquery-3.4.1.min.js HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 09 Feb 2020 04:55:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5e3f90ca-15851\"\r\nexpires: Mon, 27 Apr 2026 01:29:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88145,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-04-26T18:07:45.99047Z","times_seen":121483,"resource_available":true,"data":null}},"time_used":795,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":795,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-26T13:33:03.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:00 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 24 Jan 2026 09:34:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69749239-bd80\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OneTrust","description":"OneTrust is a cloud-based data privacy management compliance platform.","website":"https://www.onetrust.com","common_platform_enumeration":"","icon":"OneTrust.svg","categories":["Cookie compliance"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Sassy Social Share","description":"Sassy Social Share allows your website visitors to share your content over Facebook, Twitter, Google, Linkedin, Whatsapp, Tumblr, Pinterest, Reddit, Gab, Gettr and over 110 more social sharing and bookmarking services.","website":"https://wordpress.org/plugins/sassy-social-share","common_platform_enumeration":"","icon":"","categories":["Widgets","WordPress plugins"]},{"name":"WPML:4.7.1","description":"WPML plugin makes it possible to build and run fully multilingual WordPress sites.","website":"https://wpml.org/","common_platform_enumeration":"","icon":"WPML.svg","categories":["WordPress plugins","Translation"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Yoast SEO:24.5","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":48512,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (920)","md5":"cd6bf0742c2da7dacf084b6f50e32d77","sha1":"8ee90c70b4613b90c73b1e32eae45b07ec676672","sha256":"e49e1d5beecc23bb62a0a2824eda9b16b144eefab1def9d175fdd399c406f9ef","sha512":"8736d6a51dd62211ffe1d24bf22d05910c8b3e3b5d51691322536c21fbcbd83b661700993aa6c322c1fb4c25df349d24c695c1476565f97f38da0b74f874a16c","ssdeep":"768:re1yqo9KoN9BMKDY+RNq+zoOACU30UEdig3Zd1CL:rZdnzY0UEMdL","tlshash":"7e23e726e9f280656907975813e773397e78a003ca45deb8b9dce3d49f4abe14943e0c","first_seen":"2026-04-25T21:03:29.677654Z","last_seen":"2026-04-26T14:06:19.027675Z","times_seen":4,"resource_available":true,"data":null}},"time_used":2129,"timings":{"blocked":924,"dns":387,"connect":272,"send":0,"wait":269,"receive":0,"ssl":275},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/image/live_weixin.png","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:05.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /static/image/live_weixin.png HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 22 Jul 2025 06:21:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"687f2df4-5367\"\r\nexpires: Tue, 26 May 2026 13:29:01 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21351,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 565 x 411, 8-bit/color RGBA, non-interlaced","md5":"5b15117f54f5fb0ec3d92a2339d3bd4a","sha1":"a88bc3011bf412e3b70a5f8e777bde13e4b5a666","sha256":"63ef9d70b04907dfc259c73992ce2d8000c0a842a9d4193eec20de3836dda61e","sha512":"760e7ec4c98c933bddc3c69b9f2c8028e81588d2489055a881a3860a889b3d2a7fbcdf913b8d7f6ccef3ee144f02f64facf7531bac977c113205316fc392b739","ssdeep":"384:V9jiB70vMUMVY47zHs2t7pHfziphPVwIBiB9PwoQEpGVtP9551aj1:bIQUUMS43VBp/zcdwrrfQ9L5Lk1","tlshash":"40a2c04009c7d1b644dd1868220b7fe5e1fdf26c63a1992263b715a0d6245332f7eeed","first_seen":"2023-05-06T01:48:37Z","last_seen":"2026-04-26T14:06:19.041286Z","times_seen":78,"resource_available":false,"data":null}},"time_used":810,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":810,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/js/jquery.i18n.min.js","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:05.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /js/jquery.i18n.min.js HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 18 Dec 2024 09:26:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6762954e-c91\"\r\nexpires: Mon, 27 Apr 2026 01:29:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3217,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"d07e7ac6cef1004e693e5028b6e078a9","sha1":"9ef8442518dc14f4d00aaca996c52e6c17b2ab58","sha256":"c6cd491e690858f6809ce0a92f1fd4daa606fb1087ab7f13330c76b95791bec1","sha512":"0fa984fa60f5dec78b161e111d1a4f44342514ddf1202c6a855fdc7e85b07ded48f809c6c85dcc9c50add972ab243bc6454b3095d192de1034f7d07f30a3ef79","ssdeep":"","tlshash":"f3616c0c7679a640d0bb33768e6a91d8f5308b3b02d46604bf2d79d52f705a086e7fa9","first_seen":"2026-01-31T09:29:14.430208Z","last_seen":"2026-04-26T14:06:19.036847Z","times_seen":7,"resource_available":true,"data":null}},"time_used":795,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":795,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/css/main.css","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:05.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /static/css/main.css HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 22 Jul 2025 06:21:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"687f2dec-2a4ea\"\r\nexpires: Mon, 27 Apr 2026 01:29:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":173290,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65514), with no line terminators","md5":"76996d5ec8107e265d6a6af27af20a74","sha1":"2549c1e1ac5e7305da27be8d038bdffb85f8d833","sha256":"61dc12f4143f36378bfdd94781feb06f43b7da32b7591b35c5a8f217c1b03899","sha512":"c02977b57fa3f736b4638bfe81b63f51e11c1910165cd0eea8d3d114f688e37b687a329e64e28784f2e316215d34a879accced71a18f632ff9aa49573b84d99c","ssdeep":"1536:51FlK0Oy12LEOOOJvkP1g8ziYWbD/Q8+0G39dhqkCcwpX5S7RBe81:6q2LEqJvkP1g8zKzQ6GbhPwpX5S7RBey","tlshash":"4204d8626f96206ca73bc527e5c0b1583a38d421d7a72efbe452d529d7ce3960233b4c","first_seen":"2025-04-19T17:02:43.259544Z","last_seen":"2026-04-26T14:06:19.038235Z","times_seen":32,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/js/language-cookie.js","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:05.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /static/js/language-cookie.js HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 290\r\nlast-modified: Tue, 22 Jul 2025 06:21:44 GMT\r\netag: \"687f2df8-122\"\r\nexpires: Mon, 27 Apr 2026 01:29:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":290,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"f3606e4db5e156a1b086bcfeb3b2d9b4","sha1":"23220c5385d52aa1226568fa61390fae99b9c707","sha256":"e923165e0466e69b1e37ea031843f07029a2b4ce2f7aa133f807f020fea53217","sha512":"400a8d14e0e971e0f3077e6044426bb9f8ab3e542169a3ae71b4c046ab461921b2d2f62b402708311f8905f69c4c9cf13e081a624ab2fa8da666ad67e3a24b28","ssdeep":"","tlshash":"56d012183bdc462c053573153bfee2553d3575497082944e4784f4741de4e63ec688b7","first_seen":"2025-03-05T15:00:38.97335Z","last_seen":"2026-04-26T17:37:36.002798Z","times_seen":13284,"resource_available":true,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/js/otSDKStub.js","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:05.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /static/js/otSDKStub.js HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 22 Jul 2025 06:21:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"687f2df8-5c0f\"\r\nexpires: Mon, 27 Apr 2026 01:29:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23567,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23566)","md5":"160781b098f2515908d071936ad73582","sha1":"966b376bce864deb97cc31ad53d43bb5029e2f70","sha256":"18d9d050df7998e9bf7818ee86fe38893c4641d4e8f077ef6220b6b0ca0a4eaf","sha512":"f882396ac1d2966c4acbc874066c9566157aa76b60f79e55ab5c6108552456e28c257be123b4f05bee0bd1ee84a0657a0324bd0983a272218e248a0b13e44a89","ssdeep":"384:Y8ywjpKOtdTDUMABwXqo+Ur+hjTJ8eMAB6LCbnmc52Jo3pA:Yg9KkDLABwX21hjTJHeCz7A","tlshash":"19b2facdb100ef3406d361ed5a3be2aaa236745d2489c174b895dcf0257cc8b6633bb5","first_seen":"2025-02-17T13:18:46.264855Z","last_seen":"2026-04-26T14:06:19.030604Z","times_seen":2101,"resource_available":true,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgerwallet.cc/static/js/jquery-migrate.min.js","fqdn":"www.ledgerwallet.cc","domain":"ledgerwallet.cc","tld":"cc"},"ip":{"addr":"207.56.18.131","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ledgerwallet.cc/","date":"2026-04-26T13:33:05.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgerwallet.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 16:34:24 GMT","end":"Sun, 21 Jun 2026 16:34:23 GMT"},"fingerprint":{"sha1":"13:83:D6:0B:5F:C9:55:2D:50:F6:44:43:A7:17:4D:65:69:79:4C:F4","sha256":"7E:D9:E2:11:C4:9E:95:7D:98:A8:FC:30:72:DC:9A:8E:82:FC:53:23:B0:48:0D:53:0C:E1:73:B5:72:9D:20:93"}}},"request":{"raw":"GET /static/js/jquery-migrate.min.js HTTP/1.1\r\nHost: www.ledgerwallet.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgerwallet.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 13:29:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 22 Jul 2025 06:21:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"687f2df8-3509\"\r\nexpires: Mon, 27 Apr 2026 01:29:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-26T18:07:53.418183Z","times_seen":691356,"resource_available":true,"data":null}},"time_used":810,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":810,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.ledgerwallet.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.ledgerwallet.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}