{"report_id":"b67425ad-1045-4a98-ac28-47c2e70f4240","version":0,"status":"done","tags":[],"date":"2026-10-09T16:56:11Z","url":{"schema":"http","addr":"retrieve-ledger.com/","fqdn":"retrieve-ledger.com","domain":"retrieve-ledger.com","tld":"com"},"ip":{"addr":"80.78.26.49","port":0,"asn":39287,"as":"Materialism s.r.l.","country":"Sweden","country_code":"SE"},"final":{"url":{"schema":"https","addr":"retrieve-ledger.com/","fqdn":"retrieve-ledger.com","domain":"retrieve-ledger.com","tld":"com"},"title":"Ledger Recover","dom":{"size":29062,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (28946), with no line terminators","md5":"a0fd7f416e817446eb9fd273938dd05a","sha1":"3819e4bd477573637da21f24f18079d0aa224483","sha256":"d65c867939b48fea93ef8092c0020a00f94d0329a4c55cddc0a537e5285be47a","sha512":"495da79a086bd64755534979e9feee73abae423dadfd8df2d616989a8460ed60eb5963b5cb0dbcc3653df61a4c674c3f8362e654916784255480f66fa1149a77","ssdeep":"384:pEGFAnfKtt1LNdwI3YSAphjUqsaDZa1TekcfqBpHGweOg7wM+hG/aXdh9:pEGFAnCtrNdV3YSAnYZaDZWqkck0B/u9","tlshash":"54d22971b2c0652f62038bf8f162b77e74f786a9cb534904e2bc0a575bc4c9c9c1689b","dom_hash":"domhashdbf91856bdb90452afc4c88fa99ca027","first_seen":"2026-10-09T15:54:13.822105Z","last_seen":"2026-10-09T16:56:16.920071Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"retrieve-ledger.com/","fqdn":"retrieve-ledger.com","domain":"retrieve-ledger.com","tld":"com"},"ip":{"addr":"80.78.26.49","port":0,"asn":39287,"as":"Materialism s.r.l.","country":"Sweden","country_code":"SE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-13T16:56:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"retrieve-ledger.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"retrieve-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"retrieve-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"antibot.pw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"antibot.pw","ip":{"addr":"35.89.149.212","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-09-13","domain_rank":3193719,"first_seen":"2017-12-22T23:51:42Z","last_seen":"2026-10-09T15:54:05.796644Z","alert_count":1,"request_count":1,"received_data":1102,"sent_data":634,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"retrieve-ledger.com","ip":{"addr":"80.78.26.49","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"domain_registered":"2026-10-05","domain_rank":0,"first_seen":"2026-10-09T15:54:05.134606Z","last_seen":"2026-10-09T15:54:05.134606Z","alert_count":39,"request_count":13,"received_data":992189,"sent_data":6821,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.66","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-10-04T23:38:02.393941Z","alert_count":0,"request_count":1,"received_data":84994,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"retrieve-ledger.com/","fqdn":"retrieve-ledger.com","domain":"retrieve-ledger.com","tld":"com"},"ip":{"addr":"80.78.26.49","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"22aa558f679dcd7618b9e1be607d31a7","sha1":"18d02d785d6c7f8fd5920c5fb848ca87016bc86a","sha256":"165384a6fb31b44cb048b0f84980e3dda0758e859625172aa954e9196485ba90","sha512":"6fa43153b4a06f37b3a92ad3a974901d597c6ce5e4fac3b60412b7eabe7c1208658aaa6b8d3e86ec5c50cb243488ef53381c214622193dcc5b5e38af1f32fc3a","ssdeep":"","tlshash":"42e0f13e7948952405d3109c937b308c552319094cde60d0c0109aa2cf7b9efce5376f","size":398,"data":"","first_seen":"2026-10-09T15:54:13.897092Z","last_seen":"2026-10-09T16:56:16.976784Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"retrieve-ledger.com/static/js/main.116b0833.js","fqdn":"retrieve-ledger.com","domain":"retrieve-ledger.com","tld":"com"},"ip":{"addr":"80.78.26.49","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c0dbc82162faf8b08f51e44deefb8e2","sha1":"24083995c388411adbba9f1fb48d446f1d6dcc88","sha256":"fd4f78162b828d33ba23e1174e2f84b92a2c5575617461422fb7290d753e8310","sha512":"530f86a617beb1865e9bd0713df20bb68e147f1f993749b23310b8b7f721d5bb1964b422e99959698a347bc71ac4c663dddf298923a19679a8f8d1eba7e48164","ssdeep":"6144:nmcYJ8mQAzeWJXNiw2IfvB2tgninoPOReGf53vMbJeiCkD66EB8:Y8HFtMPOVf53vMbJmkp","tlshash":"ad746cc43281f5a5abf702e640bf0509733e1a5e780d8464b239fccb6568459726bfbe","size":369483,"data":"","first_seen":"2026-10-09T15:54:13.86728Z","last_seen":"2026-10-09T16:56:16.946133Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"retrieve-ledger.com/","fqdn":"retrieve-ledger.com","domain":"retrieve-ledger.com","tld":"com"},"ip":{"addr":"80.78.26.49","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-09T16:55:36.951Z","timestamp":1791564936951,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retrieve-ledger.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 14:02:48 GMT","end":"Sun, 03 Jan 2027 14:02:47 GMT"},"fingerprint":{"sha1":"F2:89:4D:28:C2:AE:C4:B8:DF:5A:22:8B:EB:F5:14:F5:CB:D3:E4:8A","sha256":"31:F0:C9:72:DA:74:12:84:E9:E6:50:CF:C6:B9:AB:EF:52:17:56:5B:19:E6:A2:A5:BD:CA:43:B7:AD:33:FF:A1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: retrieve-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 09 Oct 2026 16:55:37 GMT\r\nServer: Apache/2.4.66 (Ubuntu)\r\nLast-Modified: Mon, 05 Oct 2026 15:14:10 GMT\r\nETag: \"5b7-65d19557e1777-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 820\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.66","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1463,"size_decoded":1157,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1453), with no line terminators","md5":"4bd6e267f493e68eaf149e2be78d387c","sha1":"7b95a9744038fe27fc7485297288ee3b88e20ebc","sha256":"71524610cda7a994fe351621d76ffa75e0f8ce3ac412c494bf5ea85cc62f897c","sha512":"08b6d1acddeea5abe431c9ccf6a4eb9142865cf7498c8c1c47952b1e33ceb108688425cefaad50ba4c4be5255339e033878c7af43ead5c82c4f8cd7cf6dd7ebf","ssdeep":"","tlshash":"dd315717ac00c54c5260016fae77b06d8447380cdea6e890f85215bb4dd4ff6cd66d9a","first_seen":"2026-10-09T15:54:13.844434Z","last_seen":"2026-10-09T16:56:16.925503Z","times_seen":2,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":3,"connect":13,"send":0,"wait":17,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"retrieve-ledger.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"retrieve-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"retrieve-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"retrieve-ledger.com/static/media/main-image.d4a74fa7ea542d0062a3.png","fqdn":"retrieve-ledger.com","domain":"retrieve-ledger.com","tld":"com"},"ip":{"addr":"80.78.26.49","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://retrieve-ledger.com/","date":"2026-10-09T16:55:41.651Z","timestamp":1791564941651,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retrieve-ledger.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 14:02:48 GMT","end":"Sun, 03 Jan 2027 14:02:47 GMT"},"fingerprint":{"sha1":"F2:89:4D:28:C2:AE:C4:B8:DF:5A:22:8B:EB:F5:14:F5:CB:D3:E4:8A","sha256":"31:F0:C9:72:DA:74:12:84:E9:E6:50:CF:C6:B9:AB:EF:52:17:56:5B:19:E6:A2:A5:BD:CA:43:B7:AD:33:FF:A1"}}},"request":{"raw":"GET /static/media/main-image.d4a74fa7ea542d0062a3.png HTTP/1.1\r\nHost: retrieve-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://retrieve-ledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 09 Oct 2026 16:55:41 GMT\r\nServer: Apache/2.4.66 (Ubuntu)\r\nLast-Modified: Mon, 05 Oct 2026 15:14:10 GMT\r\nETag: \"53491-65d195582baf9\"\r\nAccept-Ranges: bytes\r\nContent-Length: 341137\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.66","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":341137,"size_decoded":341427,"mime_type":"image/png","magic":"PNG image data, 977 x 1009, 8-bit/color RGBA, non-interlaced","md5":"89c50d4ea24d3901845bd51d53c23dd8","sha1":"bd262483421d3712e160ae800d0c371981b4fa47","sha256":"5c6588924890d4e5b4d5a2a18e310aefcb549da512504761c9e8e6d2dfe8c0f9","sha512":"d3b5a9b8c4091f21313c2a5c8029e4a2fb33d3e327a33fb8dccb0dce960e116bff07b757acda46a45032e8b79e587131e055edbe87272cd4920b6356ea31026d","ssdeep":"6144:V5aHMYspzci8PlQzClDoQiy35RXEMtjyEJ3n5oWfGfdfHBTpvAp:ToM5ciQlQmLGcyOXmW+fxHJSp","tlshash":"e974229273a47e124429ef137eece837291404d6998d8a9d030b7b17633f8b7ece6941","first_seen":"2026-01-31T14:59:07.571425Z","last_seen":"2026-10-09T16:56:16.932027Z","times_seen":11,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"retrieve-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"retrieve-ledger.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"retrieve-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"retrieve-ledger.com/static/media/succes.e9d6fc93407a7ab48971.png","fqdn":"retrieve-ledger.com","domain":"retrieve-ledger.com","tld":"com"},"ip":{"addr":"80.78.26.49","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://retrieve-ledger.com/","date":"2026-10-09T16:55:41.652Z","timestamp":1791564941652,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retrieve-ledger.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 14:02:48 GMT","end":"Sun, 03 Jan 2027 14:02:47 GMT"},"fingerprint":{"sha1":"F2:89:4D:28:C2:AE:C4:B8:DF:5A:22:8B:EB:F5:14:F5:CB:D3:E4:8A","sha256":"31:F0:C9:72:DA:74:12:84:E9:E6:50:CF:C6:B9:AB:EF:52:17:56:5B:19:E6:A2:A5:BD:CA:43:B7:AD:33:FF:A1"}}},"request":{"raw":"GET /static/media/succes.e9d6fc93407a7ab48971.png HTTP/1.1\r\nHost: retrieve-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://retrieve-ledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 09 Oct 2026 16:55:41 GMT\r\nServer: Apache/2.4.66 (Ubuntu)\r\nLast-Modified: Mon, 05 Oct 2026 15:14:10 GMT\r\nETag: \"2ab2-65d195587105b\"\r\nAccept-Ranges: bytes\r\nContent-Length: 10930\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.66","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":10930,"size_decoded":11218,"mime_type":"image/png","magic":"PNG image data, 362 x 366, 8-bit/color RGBA, non-interlaced","md5":"db413b3c48cf69c25f808dcacea8427b","sha1":"0d43054f2836f78a6d84d1f1d7af0b72e10ee3b3","sha256":"c7c1bdaf4c52c08241a4be46bde3cc1a0a26c48202a4b5e8b8a2c505185525a3","sha512":"7031869dcbd74b433b9eec3ccded8a529dceddabf76a477b330b731581d7a4e259befdc1793f5fdf0738573bb7acd325c5858d858d512ab198bafd3c4d94e3b4","ssdeep":"192:I6knECiGx7IygQkVHpJ0plOEdREk4RzjE9hBPb7y2ud:IJnECqy0VH70fOEExRk9hBP3+d","tlshash":"57328ec4f9927a80d801fe014cfa542ab2ef9152c0e95cccdeed6a9a5d261f1116b3e3","first_seen":"2026-03-06T10:06:44.115679Z","last_seen":"2026-10-09T16:56:16.933647Z","times_seen":6,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":13,"send":0,"wait":17,"receive":10,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"retrieve-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"retrieve-ledger.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"retrieve-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"retrieve-ledger.com/static/media/myLogo.0b936020e250fb23f500.jpg","fqdn":"retrieve-ledger.com","domain":"retrieve-ledger.com","tld":"com"},"ip":{"addr":"80.78.26.49","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://retrieve-ledger.com/","date":"2026-10-09T16:55:41.654Z","timestamp":1791564941654,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retrieve-ledger.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 14:02:48 GMT","end":"Sun, 03 Jan 2027 14:02:47 GMT"},"fingerprint":{"sha1":"F2:89:4D:28:C2:AE:C4:B8:DF:5A:22:8B:EB:F5:14:F5:CB:D3:E4:8A","sha256":"31:F0:C9:72:DA:74:12:84:E9:E6:50:CF:C6:B9:AB:EF:52:17:56:5B:19:E6:A2:A5:BD:CA:43:B7:AD:33:FF:A1"}}},"request":{"raw":"GET /static/media/myLogo.0b936020e250fb23f500.jpg HTTP/1.1\r\nHost: retrieve-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://retrieve-ledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 09 Oct 2026 16:55:41 GMT\r\nServer: Apache/2.4.66 (Ubuntu)\r\nLast-Modified: Mon, 05 Oct 2026 15:14:10 GMT\r\nETag: \"4100-65d195583b4fa\"\r\nAccept-Ranges: bytes\r\nContent-Length: 16640\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.66","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":16640,"size_decoded":16928,"mime_type":"image/jpeg","magic":"PNG image data, 2501 x 838, 8-bit gray+alpha, non-interlaced","md5":"21c2f1df73fcc925f423e8c15fbac6ad","sha1":"41c488d4c80eeaf4ed57f4abf5700252d522e5c8","sha256":"436eb035a7d69e1be17643f4dd262b02f2861cd9927a11117e4a9abca1aec270","sha512":"55494edce8ccea719b0187dfaf1b913b2aecfb8d4c83e32f1f2008fab08592d3550585416f9aba64b255d9863043800b404a4b0b4cf859c640cbfcd53d3e2d36","ssdeep":"384:4CJnWoaggggghgggggggggggggggggggghvQ5szAiFgfrrtonopNqo1nqqM4XYMT:9Jvisz9+fXty8nA4XJ","tlshash":"1872e535bbadf796d18d3fb106c0f07772fe240047a0d66b35219e9b1ad14ee382a905","first_seen":"2026-01-31T14:59:07.573792Z","last_seen":"2026-10-09T16:56:16.937436Z","times_seen":11,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":19,"send":0,"wait":14,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"retrieve-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"retrieve-ledger.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"retrieve-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"retrieve-ledger.com/static/media/ledger-logo.c5cb6e04098f986f04b4.png","fqdn":"retrieve-ledger.com","domain":"retrieve-ledger.com","tld":"com"},"ip":{"addr":"80.78.26.49","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://retrieve-ledger.com/","date":"2026-10-09T16:55:41.646Z","timestamp":1791564941646,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retrieve-ledger.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 14:02:48 GMT","end":"Sun, 03 Jan 2027 14:02:47 GMT"},"fingerprint":{"sha1":"F2:89:4D:28:C2:AE:C4:B8:DF:5A:22:8B:EB:F5:14:F5:CB:D3:E4:8A","sha256":"31:F0:C9:72:DA:74:12:84:E9:E6:50:CF:C6:B9:AB:EF:52:17:56:5B:19:E6:A2:A5:BD:CA:43:B7:AD:33:FF:A1"}}},"request":{"raw":"GET /static/media/ledger-logo.c5cb6e04098f986f04b4.png HTTP/1.1\r\nHost: retrieve-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://retrieve-ledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 09 Oct 2026 16:55:41 GMT\r\nServer: Apache/2.4.66 (Ubuntu)\r\nLast-Modified: Mon, 05 Oct 2026 15:14:10 GMT\r\nETag: \"6810-65d195581ff79\"\r\nAccept-Ranges: bytes\r\nContent-Length: 26640\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.66","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":26640,"size_decoded":26927,"mime_type":"image/png","magic":"PNG image data, 2500 x 2176, 8-bit/color RGBA, non-interlaced","md5":"9853abb41380d6bb1bbc693d95a6ffcc","sha1":"c3e008cdcceb9ff5d6d1a097e5204c3a00820223","sha256":"e76126f0290a22d03e9106fca851d3b360711f451fa81239ebf8102f78e1d004","sha512":"5bab91b73269403f04d7c9ffd10319e524c334732fe523b788ed6526bc7d3bc2ac2880121633cdd528d09718c94cf6584796dfbac7c14c950fa46686b515a2a3","ssdeep":"48:pKKKKKKKKKKKKKKKKlKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKkeOKKKKKKKKI:3ow","tlshash":"cec2ac69b3666f2dc68e7dfb13883db556721800175ca313b2e8e90b5c0fb8e7423599","first_seen":"2025-02-23T17:33:55.180553Z","last_seen":"2026-10-09T16:56:16.938786Z","times_seen":16,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"retrieve-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"retrieve-ledger.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"retrieve-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://retrieve-ledger.com/","date":"2026-10-09T16:55:37.439Z","timestamp":1791564937439,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://retrieve-ledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 16:55:37 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1361426\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 22 Nov 2021 21:02:51 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=86CZNltcLH3aiLLjqI6MhiCGl8lpBQHQOgVEC%2B7zgApzHgkbWXBbyYWdxQBsc57gdJ%2FuOH%2F3DVXTqjg18JjNS7gRExTaMCfxqYPd2nZ400ng%2Fye70%2B8R7tHvd%2B49vmRo%2Bp26gEFK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a47ee9fb1e645689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14850\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83981,"size_decoded":15863,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65311)","md5":"3d5ef2bf867c4054a2f336cdbad9e1dc","sha1":"07228d1fa3245ee156a27a353f45758a3207849f","sha256":"a361e7885c36bacb3fd9cb068da207c3b9329962cac022d06e28923939f575e8","sha512":"168deb96b663fe4eee8d39c78380864760fb912b34bf82cb6a7c36aa4b18b91944ccefad71a10f428810d0a6a818ddbaff3ae7db42264750dfb8b5a73a8eda04","ssdeep":"1536:YlMVM6MVM9MVMKMVMRsVMNdhwJHQ9Kll3ITRUHrt+z:sdhgw9kITRULt+z","tlshash":"458376e8e44c05d56732c44baf55b378a1b6f73cd5810da9f02f590c29d26a822c6f7a","first_seen":"2023-04-09T08:23:50Z","last_seen":"2026-10-09T19:29:01.52398Z","times_seen":22376,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"retrieve-ledger.com/static/js/main.116b0833.js","fqdn":"retrieve-ledger.com","domain":"retrieve-ledger.com","tld":"com"},"ip":{"addr":"80.78.26.49","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://retrieve-ledger.com/","date":"2026-10-09T16:55:37.443Z","timestamp":1791564937443,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retrieve-ledger.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 14:02:48 GMT","end":"Sun, 03 Jan 2027 14:02:47 GMT"},"fingerprint":{"sha1":"F2:89:4D:28:C2:AE:C4:B8:DF:5A:22:8B:EB:F5:14:F5:CB:D3:E4:8A","sha256":"31:F0:C9:72:DA:74:12:84:E9:E6:50:CF:C6:B9:AB:EF:52:17:56:5B:19:E6:A2:A5:BD:CA:43:B7:AD:33:FF:A1"}}},"request":{"raw":"GET /static/js/main.116b0833.js HTTP/1.1\r\nHost: retrieve-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://retrieve-ledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 09 Oct 2026 16:55:37 GMT\r\nServer: Apache/2.4.66 (Ubuntu)\r\nLast-Modified: Mon, 05 Oct 2026 15:14:10 GMT\r\nETag: \"5a34b-65d19557e2717-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.66","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":369483,"size_decoded":120570,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"7c0dbc82162faf8b08f51e44deefb8e2","sha1":"24083995c388411adbba9f1fb48d446f1d6dcc88","sha256":"fd4f78162b828d33ba23e1174e2f84b92a2c5575617461422fb7290d753e8310","sha512":"530f86a617beb1865e9bd0713df20bb68e147f1f993749b23310b8b7f721d5bb1964b422e99959698a347bc71ac4c663dddf298923a19679a8f8d1eba7e48164","ssdeep":"6144:nmcYJ8mQAzeWJXNiw2IfvB2tgninoPOReGf53vMbJeiCkD66EB8:Y8HFtMPOVf53vMbJmkp","tlshash":"ad746cc43281f5a5abf702e640bf0509733e1a5e780d8464b239fccb6568459726bfbe","first_seen":"2026-10-09T15:54:13.86728Z","last_seen":"2026-10-09T16:56:16.946133Z","times_seen":2,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":1,"connect":18,"send":0,"wait":43,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"retrieve-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"retrieve-ledger.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"retrieve-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"antibot.pw/api/v2-blockers?ip=\u0026apikey=8784caf8da59a5feaf0f6fc17e3f1dfc\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0","fqdn":"antibot.pw","domain":"antibot.pw","tld":"pw"},"ip":{"addr":"35.89.149.212","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://retrieve-ledger.com/","date":"2026-10-09T16:55:37.526Z","timestamp":1791564937526,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"antibot.pw","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:52:39 GMT","end":"Sat, 14 Nov 2026 16:52:38 GMT"},"fingerprint":{"sha1":"C8:52:0B:B3:D2:B8:1F:48:1A:0A:94:A2:BF:63:F2:70:07:27:10:B5","sha256":"BE:4E:E1:FE:D5:9B:5D:CB:F8:F9:06:A3:90:E6:72:80:CC:CA:7B:E9:86:A8:B8:0E:51:F8:B8:22:25:19:8D:82"}}},"request":{"raw":"GET /api/v2-blockers?ip=\u0026apikey=8784caf8da59a5feaf0f6fc17e3f1dfc\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0 HTTP/1.1\r\nHost: antibot.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://retrieve-ledger.com/\r\nOrigin: https://retrieve-ledger.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=pirp0b0leckp45talhn02rm8he; path=/\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nbug-bounty: report to live chat\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 473\r\ncontent-type: application/json\r\ndate: Fri, 09 Oct 2026 16:55:38 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"pirp0b0leckp45talhn02rm8he","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=pirp0b0leckp45talhn02rm8he; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":680,"size_decoded":895,"mime_type":"application/json","magic":"JSON text data","md5":"198b44aa1dae885323952c1024166929","sha1":"8a50267f4d35c178a5e59214ef46cabcbe7c1a8b","sha256":"eb29eeffa1ba7734bdfb2d2f7ef607db8ae43f1260735cf65ab6dc5e8ad0a048","sha512":"15b49aba4fce71fd7a48767e1f9b8b42d75684f5a2b624dc775a5942b140159bc5ee47860a6ff6e78098b7f4accf015adaa031c945a8863d2cc1e0d3238847c2","ssdeep":"","tlshash":"2c01237c01b00eb6df60639a112bbbce1bbd01bba9c0c541b9eccd0575885dda019997","first_seen":"2026-10-09T16:56:16.951985Z","last_seen":"2026-10-09T16:56:16.951985Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1464,"timings":{"blocked":0,"dns":702,"connect":170,"send":0,"wait":245,"receive":0,"ssl":346},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"antibot.pw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"retrieve-ledger.com/logo192.png","fqdn":"retrieve-ledger.com","domain":"retrieve-ledger.com","tld":"com"},"ip":{"addr":"80.78.26.49","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://retrieve-ledger.com/","date":"2026-10-09T16:55:37.756Z","timestamp":1791564937756,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retrieve-ledger.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 14:02:48 GMT","end":"Sun, 03 Jan 2027 14:02:47 GMT"},"fingerprint":{"sha1":"F2:89:4D:28:C2:AE:C4:B8:DF:5A:22:8B:EB:F5:14:F5:CB:D3:E4:8A","sha256":"31:F0:C9:72:DA:74:12:84:E9:E6:50:CF:C6:B9:AB:EF:52:17:56:5B:19:E6:A2:A5:BD:CA:43:B7:AD:33:FF:A1"}}},"request":{"raw":"GET /logo192.png HTTP/1.1\r\nHost: retrieve-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://retrieve-ledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 09 Oct 2026 16:55:37 GMT\r\nServer: Apache/2.4.66 (Ubuntu)\r\nLast-Modified: Mon, 05 Oct 2026 15:14:10 GMT\r\nETag: \"5b7-65d19557e1777-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 820\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.66","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1463,"size_decoded":1156,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1453), with no line terminators","md5":"4bd6e267f493e68eaf149e2be78d387c","sha1":"7b95a9744038fe27fc7485297288ee3b88e20ebc","sha256":"71524610cda7a994fe351621d76ffa75e0f8ce3ac412c494bf5ea85cc62f897c","sha512":"08b6d1acddeea5abe431c9ccf6a4eb9142865cf7498c8c1c47952b1e33ceb108688425cefaad50ba4c4be5255339e033878c7af43ead5c82c4f8cd7cf6dd7ebf","ssdeep":"","tlshash":"dd315717ac00c54c5260016fae77b06d8447380cdea6e890f85215bb4dd4ff6cd66d9a","first_seen":"2026-10-09T15:54:13.844434Z","last_seen":"2026-10-09T16:56:16.925503Z","times_seen":2,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"retrieve-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"retrieve-ledger.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"retrieve-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"retrieve-ledger.com/favicon.ico","fqdn":"retrieve-ledger.com","domain":"retrieve-ledger.com","tld":"com"},"ip":{"addr":"80.78.26.49","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://retrieve-ledger.com/","date":"2026-10-09T16:55:37.758Z","timestamp":1791564937758,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retrieve-ledger.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 14:02:48 GMT","end":"Sun, 03 Jan 2027 14:02:47 GMT"},"fingerprint":{"sha1":"F2:89:4D:28:C2:AE:C4:B8:DF:5A:22:8B:EB:F5:14:F5:CB:D3:E4:8A","sha256":"31:F0:C9:72:DA:74:12:84:E9:E6:50:CF:C6:B9:AB:EF:52:17:56:5B:19:E6:A2:A5:BD:CA:43:B7:AD:33:FF:A1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: retrieve-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://retrieve-ledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 09 Oct 2026 16:55:37 GMT\r\nServer: Apache/2.4.66 (Ubuntu)\r\nLast-Modified: Mon, 05 Oct 2026 15:14:10 GMT\r\nETag: \"95b6-65d19557e1777\"\r\nAccept-Ranges: bytes\r\nContent-Length: 38326\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/vnd.microsoft.icon\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.66","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":38326,"size_decoded":38628,"mime_type":"image/vnd.microsoft.icon","magic":"PNG image data, 2973 x 2588, 8-bit/color RGBA, non-interlaced","md5":"3e7a2e9fc7ab98a43776841813f58635","sha1":"36a119f5e4955038adff357013dde9eeb14aab31","sha256":"7a9c28fceaec2abb3fe030b145a9836564fa3ae0a0ab437be46c2e90cfeb7bc0","sha512":"4639984e69c25e9735efb813705d5d71285a9f3bc7e9aeb30a6218a7d316e1caff514cc76019e1af5b99b855bba68054cda7940b5c7a2d31528dffe19d310c2c","ssdeep":"96:XM6knmWIrCtISHCC6bHJHV3jrO7777777777777777777777777777777777777g:c6kn0SiC6bpBMnHPT3M","tlshash":"0a03faf925a4d779cc58c37ba7b817f1ca52fc700d06a70967a0d2a04a6b751b0eeb1c","first_seen":"2026-01-31T14:59:07.563857Z","last_seen":"2026-10-09T16:56:16.95722Z","times_seen":16,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"retrieve-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"retrieve-ledger.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"retrieve-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"retrieve-ledger.com/static/media/payment-methods-logos.aa824c0c997995e6d104.png","fqdn":"retrieve-ledger.com","domain":"retrieve-ledger.com","tld":"com"},"ip":{"addr":"80.78.26.49","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://retrieve-ledger.com/","date":"2026-10-09T16:55:41.656Z","timestamp":1791564941656,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retrieve-ledger.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 14:02:48 GMT","end":"Sun, 03 Jan 2027 14:02:47 GMT"},"fingerprint":{"sha1":"F2:89:4D:28:C2:AE:C4:B8:DF:5A:22:8B:EB:F5:14:F5:CB:D3:E4:8A","sha256":"31:F0:C9:72:DA:74:12:84:E9:E6:50:CF:C6:B9:AB:EF:52:17:56:5B:19:E6:A2:A5:BD:CA:43:B7:AD:33:FF:A1"}}},"request":{"raw":"GET /static/media/payment-methods-logos.aa824c0c997995e6d104.png HTTP/1.1\r\nHost: retrieve-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://retrieve-ledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 09 Oct 2026 16:55:41 GMT\r\nServer: Apache/2.4.66 (Ubuntu)\r\nLast-Modified: Mon, 05 Oct 2026 15:14:10 GMT\r\nETag: \"7039-65d19558412ba\"\r\nAccept-Ranges: bytes\r\nContent-Length: 28729\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.66","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":28729,"size_decoded":29017,"mime_type":"image/png","magic":"PNG image data, 684 x 132, 8-bit/color RGBA, non-interlaced","md5":"f77c52314aeed3af4b4d5f03c8c33f81","sha1":"57eaf112cb058734b603a43c00b027ecc5c3ce4f","sha256":"e96d3b9dcc0eb91fa3ac96ab08196db574b6e4b7152daf7d11c3631b0e5cfe62","sha512":"0be005e1cb2abaa3ece5d10459ffed718f9d127aae38ded46addd51d21dbef7f5b985bc56ef3301a4559bd1691829a6633d615d50210409663c75dbeb2097b3d","ssdeep":"768:O552QErEBrE6/EW44HOnqcottnFX6DLVkf7y2TPPOahsE:bPR6/HHfBfx6DZfePOaSE","tlshash":"94d2e0cd067543123e94491eb628528f2ae16ece13dd5716a2e4fbda4d3c18cf0b6f0a","first_seen":"2026-01-31T14:59:07.554526Z","last_seen":"2026-10-09T16:56:16.959886Z","times_seen":11,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":19,"send":0,"wait":19,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"retrieve-ledger.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"retrieve-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"retrieve-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"retrieve-ledger.com/static/css/main.9682b7de.css","fqdn":"retrieve-ledger.com","domain":"retrieve-ledger.com","tld":"com"},"ip":{"addr":"80.78.26.49","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://retrieve-ledger.com/","date":"2026-10-09T16:55:37.444Z","timestamp":1791564937444,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retrieve-ledger.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 14:02:48 GMT","end":"Sun, 03 Jan 2027 14:02:47 GMT"},"fingerprint":{"sha1":"F2:89:4D:28:C2:AE:C4:B8:DF:5A:22:8B:EB:F5:14:F5:CB:D3:E4:8A","sha256":"31:F0:C9:72:DA:74:12:84:E9:E6:50:CF:C6:B9:AB:EF:52:17:56:5B:19:E6:A2:A5:BD:CA:43:B7:AD:33:FF:A1"}}},"request":{"raw":"GET /static/css/main.9682b7de.css HTTP/1.1\r\nHost: retrieve-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://retrieve-ledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 09 Oct 2026 16:55:37 GMT\r\nServer: Apache/2.4.66 (Ubuntu)\r\nLast-Modified: Mon, 05 Oct 2026 15:14:10 GMT\r\nETag: \"affb-65d19557e1777-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 9220\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.66","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":45051,"size_decoded":9558,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (45001)","md5":"6143405858e60a41786a92fea751bb86","sha1":"e958b0d8d9be61a17127e73107c3bb35a346c621","sha256":"18c99a38c7700b13cc3e813670cf492657170afaecbf407de102f6ad3c0d8593","sha512":"b9b3b38fee3eccf77ccb1cc6f26d2ef51160d311bb209474322d0f3961b965a4e2889ff68980a910ee7dde8a3320e7fe53159bb23dc5ee4e3bba5044ca9b9ec8","ssdeep":"384:I43rTdyDGA2qtqLgK6XhSzuqm+JDtXdRmXo6jt5iZxgZE4wXeufCH:RGD2+KMIzHrqXBbU5CH","tlshash":"0813a412bb84702df57780a9a5e2639d662cd842e71707fdf513ba75c6ca2e30633b48","first_seen":"2026-10-09T15:54:13.87911Z","last_seen":"2026-10-09T16:56:16.961402Z","times_seen":4,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":13,"send":0,"wait":23,"receive":3,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"retrieve-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"retrieve-ledger.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"retrieve-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"retrieve-ledger.com/static/media/loader.5806ef469905cfb77a10.gif","fqdn":"retrieve-ledger.com","domain":"retrieve-ledger.com","tld":"com"},"ip":{"addr":"80.78.26.49","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://retrieve-ledger.com/","date":"2026-10-09T16:55:37.632Z","timestamp":1791564937632,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retrieve-ledger.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 14:02:48 GMT","end":"Sun, 03 Jan 2027 14:02:47 GMT"},"fingerprint":{"sha1":"F2:89:4D:28:C2:AE:C4:B8:DF:5A:22:8B:EB:F5:14:F5:CB:D3:E4:8A","sha256":"31:F0:C9:72:DA:74:12:84:E9:E6:50:CF:C6:B9:AB:EF:52:17:56:5B:19:E6:A2:A5:BD:CA:43:B7:AD:33:FF:A1"}}},"request":{"raw":"GET /static/media/loader.5806ef469905cfb77a10.gif HTTP/1.1\r\nHost: retrieve-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://retrieve-ledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 09 Oct 2026 16:55:37 GMT\r\nServer: Apache/2.4.66 (Ubuntu)\r\nLast-Modified: Mon, 05 Oct 2026 15:14:10 GMT\r\nETag: \"19994-65d1955828c19\"\r\nAccept-Ranges: bytes\r\nContent-Length: 104852\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/gif\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.66","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":104852,"size_decoded":105141,"mime_type":"image/gif","magic":"GIF image data, version 89a, 305 x 128","md5":"593cc04b5acf4eab9603fb61a182d227","sha1":"0f3f6bcfab266daf03d38c2805399bf28a52bfad","sha256":"2266663bfe22937a6ade893b2c698903ffb5c0879b3a5ee456c7988b84588dcf","sha512":"3f948bcc3054da55726f5db2f614c305ab7b11b55f653d3e885106c6d78a9f87c045033893b9557f1d51682735a1ce26a40573edeb2de25051c4b38d819e057d","ssdeep":"1536:sKePmJiNk/gHe7fu4FD9vMelHI+H5eBKw8M2RKLxJkW0R8dkS2TOyZrGxb:sYD/n/xL0Pt23zZK9","tlshash":"9fa3d0c3b27d900beae92771a5d58e518c8924446ca24e5ff46f79dae3003c62dfd236","first_seen":"2026-01-31T14:59:07.547919Z","last_seen":"2026-10-09T16:56:16.964503Z","times_seen":14,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"retrieve-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"retrieve-ledger.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"retrieve-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"retrieve-ledger.com/bower_components/aos/dist/aos.css","fqdn":"retrieve-ledger.com","domain":"retrieve-ledger.com","tld":"com"},"ip":{"addr":"80.78.26.49","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://retrieve-ledger.com/","date":"2026-10-09T16:55:37.441Z","timestamp":1791564937441,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retrieve-ledger.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 14:02:48 GMT","end":"Sun, 03 Jan 2027 14:02:47 GMT"},"fingerprint":{"sha1":"F2:89:4D:28:C2:AE:C4:B8:DF:5A:22:8B:EB:F5:14:F5:CB:D3:E4:8A","sha256":"31:F0:C9:72:DA:74:12:84:E9:E6:50:CF:C6:B9:AB:EF:52:17:56:5B:19:E6:A2:A5:BD:CA:43:B7:AD:33:FF:A1"}}},"request":{"raw":"GET /bower_components/aos/dist/aos.css HTTP/1.1\r\nHost: retrieve-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://retrieve-ledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 09 Oct 2026 16:55:37 GMT\r\nServer: Apache/2.4.66 (Ubuntu)\r\nLast-Modified: Mon, 05 Oct 2026 15:14:10 GMT\r\nETag: \"5b7-65d19557e1777-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 820\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.66","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1463,"size_decoded":1156,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1453), with no line terminators","md5":"4bd6e267f493e68eaf149e2be78d387c","sha1":"7b95a9744038fe27fc7485297288ee3b88e20ebc","sha256":"71524610cda7a994fe351621d76ffa75e0f8ce3ac412c494bf5ea85cc62f897c","sha512":"08b6d1acddeea5abe431c9ccf6a4eb9142865cf7498c8c1c47952b1e33ceb108688425cefaad50ba4c4be5255339e033878c7af43ead5c82c4f8cd7cf6dd7ebf","ssdeep":"","tlshash":"dd315717ac00c54c5260016fae77b06d8447380cdea6e890f85215bb4dd4ff6cd66d9a","first_seen":"2026-10-09T15:54:13.844434Z","last_seen":"2026-10-09T16:56:16.925503Z","times_seen":2,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"retrieve-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"retrieve-ledger.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"retrieve-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"retrieve-ledger.com/static/media/Ledger-logo.adc916ad0cd95419d456fe0d7fa4e948.svg","fqdn":"retrieve-ledger.com","domain":"retrieve-ledger.com","tld":"com"},"ip":{"addr":"80.78.26.49","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://retrieve-ledger.com/","date":"2026-10-09T16:55:41.643Z","timestamp":1791564941643,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retrieve-ledger.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 14:02:48 GMT","end":"Sun, 03 Jan 2027 14:02:47 GMT"},"fingerprint":{"sha1":"F2:89:4D:28:C2:AE:C4:B8:DF:5A:22:8B:EB:F5:14:F5:CB:D3:E4:8A","sha256":"31:F0:C9:72:DA:74:12:84:E9:E6:50:CF:C6:B9:AB:EF:52:17:56:5B:19:E6:A2:A5:BD:CA:43:B7:AD:33:FF:A1"}}},"request":{"raw":"GET /static/media/Ledger-logo.adc916ad0cd95419d456fe0d7fa4e948.svg HTTP/1.1\r\nHost: retrieve-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://retrieve-ledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 09 Oct 2026 16:55:41 GMT\r\nServer: Apache/2.4.66 (Ubuntu)\r\nLast-Modified: Mon, 05 Oct 2026 15:14:10 GMT\r\nETag: \"7c9-65d195581a1b9\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1993\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.66","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1993,"size_decoded":2282,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bab631a2479c23c7727cf637c7e005e4","sha1":"8314d7bb128be21c1b40ce9de4c76b524b651bcf","sha256":"088d1bf639f9a9e3f2ca38cf1ea4c88002c79d6f3e4706868aa3d9f27208109f","sha512":"f9cc6d7447d4ab817cbb5e516eb4f28982a1f30fc727f8551eab06ebb772b269b0e0afe95b28bb56a3d9ef31d59a0b3e491963fe6a2480f7b1ee5dcb0119a2fa","ssdeep":"","tlshash":"a941b4d84ab002fdcc58e9fe0b68312c696651e5f409449df7e39e2ead9844c8c4a2f2","first_seen":"2023-07-02T01:08:01Z","last_seen":"2026-10-09T16:56:16.974964Z","times_seen":672,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"retrieve-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"retrieve-ledger.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"retrieve-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}