{"report_id":"d2524727-d925-419d-9470-bd4dbe29db70","version":6,"status":"done","tags":[],"date":"2026-02-27T18:41:14Z","url":{"schema":"https","addr":"use-ledger.com/","fqdn":"use-ledger.com","domain":"use-ledger.com","tld":"com"},"ip":{"addr":"104.21.1.124","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"use-ledger.com/","fqdn":"use-ledger.com","domain":"use-ledger.com","tld":"com"},"title":"Ledger Cold Wallet: Offline Crypto Storage for Maximum Security","dom":{"size":30996,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (736)","md5":"f1b293f300bd4ae52dad3c8709120121","sha1":"f72abcc4357e55de135fd2a74714da77e101fb66","sha256":"4ff25fe68e218c0470e954b1b2e5b1e78bc9559e3e622243cde3bd425dc2244c","sha512":"6576a0acde600eea5d6937e111ccf993dcae211fc1c1ef8ab7d6f522dbd8c7692d84d4301ffb4ee5020f3dda5062ef1a5656aff0abd62b82adcc9dbfc25b8e6e","ssdeep":"768:DM2L4U6rnzIR5/1ioD/91KYMSYLulOWOatbBmzvMv1B:ciF1FYyl+aRBmzvMvP","tlshash":"cbd2eb2272e2752207c703aeb55262babe39c103c31e1295b67d014d6fc58ddcb7769e","dom_hash":"domhash6efcaa8b4640868018aec4dd545a7754","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"use-ledger.com/","fqdn":"use-ledger.com","domain":"use-ledger.com","tld":"com"},"ip":{"addr":"104.21.1.124","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-03T18:41:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"use-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"use-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"use-ledger.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":12,"request_count":6,"received_data":106973,"sent_data":2638,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"use-ledger.com/script.js","fqdn":"use-ledger.com","domain":"use-ledger.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"834d4cac789e5ee1f15d746bb3a2d37c","sha1":"4e0c96c9c9ac350db0d73a8252341d6ce65d54f1","sha256":"33f14f7264600422deb7e378e2515a159be2ed840dedfb57b6f568fab21b6f23","sha512":"67fef0849111acc5d2932e1f296db5c7e14891d8885a912336fc26982446af001ebd8fb6e2f36b66aa82711bf30827bcce78d6173019078767ed585146b0078d","ssdeep":"","tlshash":"75217b2a11b120394433b27a9b9f9395673130cbb04aed553e5d87492f41ba54df2acf","size":1225,"data":"","first_seen":"2026-02-27T18:41:25.92358Z","last_seen":"2026-02-27T19:06:16.820398Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"use-ledger.com/","fqdn":"use-ledger.com","domain":"use-ledger.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-27T18:40:52.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use-ledger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:42:26 GMT","end":"Mon, 18 May 2026 19:40:14 GMT"},"fingerprint":{"sha1":"29:15:8A:CB:30:3B:6C:EC:74:24:E1:87:D9:3A:24:5A:A4:1D:F8:70","sha256":"F0:8F:58:0D:9F:33:09:F0:BC:24:26:E3:0B:94:BE:05:F2:2E:5C:AC:06:75:C6:03:CA:41:C5:95:BC:04:B5:C3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: use-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 18:40:52 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=opP8QqEr08naWXx9X%2FRL28ffq23WgXhzUIL3dUpt2lP7ANFJQWcM1zcdZVk1M1vdE7IxyhxWa5Aqq1Qvm2RPsvs4%2BgxMHytyCt5QoOk6\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9d49d02a0c0a57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31023,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (736)","md5":"40c04c22a91b3c8af7afb874808dd45b","sha1":"04f1c6864927b1a0cecaf437d7e46e282098c652","sha256":"dda9e8b9fdc6cc7de238b5a12607f9d4dd3be7776dc279866f0e59e79cca56c9","sha512":"a0b1dcaffac456305d7ba21169d88bb2faa04d75ff1acda2969ac25163f7631d314d8090b52540c8c5f6dd7c23e6779531c38341fd7fa604ee83dba3d56abb14","ssdeep":"768:qM2L4U6rnzIR5/1ioD/91KYMSYLulOWOatbBmzvMv1f:JiF1FYyl+aRBmzvMvd","tlshash":"59d2eb2272e2752207c703aeb55262babe39c103c31e129976bd014d6fc58ddcb7769e","first_seen":"2026-02-27T18:41:25.921558Z","last_seen":"2026-02-27T19:06:16.832484Z","times_seen":3,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":81,"dns":52,"connect":8,"send":0,"wait":99,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"use-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"use-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"use-ledger.com/styles.css","fqdn":"use-ledger.com","domain":"use-ledger.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://use-ledger.com/","date":"2026-02-27T18:40:53.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use-ledger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:42:26 GMT","end":"Mon, 18 May 2026 19:40:14 GMT"},"fingerprint":{"sha1":"29:15:8A:CB:30:3B:6C:EC:74:24:E1:87:D9:3A:24:5A:A4:1D:F8:70","sha256":"F0:8F:58:0D:9F:33:09:F0:BC:24:26:E3:0B:94:BE:05:F2:2E:5C:AC:06:75:C6:03:CA:41:C5:95:BC:04:B5:C3"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: use-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://use-ledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 18:40:53 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Feb 2026 11:06:08 GMT\r\npriority: u=2,i=?0\r\netag: W/\"69a02920-1b5f\"\r\nexpires: Sat, 28 Feb 2026 18:40:53 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TlG1uPFti3%2BWPSbgltA6KLmt4n4rFYZQKMK8%2FhwhfSwV5cKQGEz4m3X8GvHvxV3n%2Fq%2Fg%2FGtF4jeAFCHWaZswvXOj6KTOctGxGgMPr6vx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49d02bf9bf9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7007,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a8460b3d9c4677f0e80c2385fe355b20","sha1":"5f0d8a324164968c59b10c13de0112874f7305fb","sha256":"2de0a23e511657b42c3408366b58f8fdfbb93e109d54e824f3ea5e2806f9d3e4","sha512":"d171e249442c319cb08e3555843cbf638c9c5854b5773d4983541725fd944c5ca072d5a425075295296a37c54fd4e7e8553f68e112e9618e46a430f2727c75ba","ssdeep":"192:A8NYFvI973LthDrQCPh96/hF9xAIo//lEz56vOmsCL68+xPdGWOaDauUyJRl:wFSLthDrQ696/Hh","tlshash":"b7e1101866732524a99b953533eb968433aca043cc0ede7d769ea254cfc83b470d2f8c","first_seen":"2026-02-27T18:41:25.922591Z","last_seen":"2026-02-27T19:06:16.816641Z","times_seen":3,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"use-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"use-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"use-ledger.com/script.js","fqdn":"use-ledger.com","domain":"use-ledger.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://use-ledger.com/","date":"2026-02-27T18:40:53.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use-ledger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:42:26 GMT","end":"Mon, 18 May 2026 19:40:14 GMT"},"fingerprint":{"sha1":"29:15:8A:CB:30:3B:6C:EC:74:24:E1:87:D9:3A:24:5A:A4:1D:F8:70","sha256":"F0:8F:58:0D:9F:33:09:F0:BC:24:26:E3:0B:94:BE:05:F2:2E:5C:AC:06:75:C6:03:CA:41:C5:95:BC:04:B5:C3"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: use-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://use-ledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 18:40:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Feb 2026 11:06:08 GMT\r\npriority: u=3,i=?0\r\netag: W/\"69a02920-4c9\"\r\nexpires: Sat, 28 Feb 2026 18:40:53 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P6Y855dYW1yhw7SPpQPidjiztSc3Qeaums%2B9WsrYnz5FHYci04urycZ%2FGHm%2BedU63o7096MZ1%2Boxci1lbBgx6WwsaTxGdSJxY1tBFUl4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49d02bf9c19a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1225,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"834d4cac789e5ee1f15d746bb3a2d37c","sha1":"4e0c96c9c9ac350db0d73a8252341d6ce65d54f1","sha256":"33f14f7264600422deb7e378e2515a159be2ed840dedfb57b6f568fab21b6f23","sha512":"67fef0849111acc5d2932e1f296db5c7e14891d8885a912336fc26982446af001ebd8fb6e2f36b66aa82711bf30827bcce78d6173019078767ed585146b0078d","ssdeep":"","tlshash":"75217b2a11b120394433b27a9b9f9395673130cbb04aed553e5d87492f41ba54df2acf","first_seen":"2026-02-27T18:41:25.92358Z","last_seen":"2026-02-27T19:06:16.820398Z","times_seen":3,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"use-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"use-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"use-ledger.com/images/1.webp","fqdn":"use-ledger.com","domain":"use-ledger.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://use-ledger.com/","date":"2026-02-27T18:40:53.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use-ledger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:42:26 GMT","end":"Mon, 18 May 2026 19:40:14 GMT"},"fingerprint":{"sha1":"29:15:8A:CB:30:3B:6C:EC:74:24:E1:87:D9:3A:24:5A:A4:1D:F8:70","sha256":"F0:8F:58:0D:9F:33:09:F0:BC:24:26:E3:0B:94:BE:05:F2:2E:5C:AC:06:75:C6:03:CA:41:C5:95:BC:04:B5:C3"}}},"request":{"raw":"GET /images/1.webp HTTP/1.1\r\nHost: use-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://use-ledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 18:40:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25278\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Feb 2026 11:06:08 GMT\r\npriority: u=4,i=?0\r\netag: \"69a02920-62be\"\r\nexpires: Sat, 28 Feb 2026 18:40:53 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6GrLXZBAD%2BAkMutW1%2BPSD7Y0DvXN2WLhjwZ4V4AvuPYOuh%2FRA428h0Nt%2Bq9ZajKpPphJTg%2BugpJTsEtzIL0OgSDnp2HG70EujoiNNaWm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49d02cbbf59a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25278,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 751x418, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2c02f3a62e22c6f2e51009cf5d91b2ef","sha1":"17fdfcf8f5e70af1b37b95aac9eb70873b5e8849","sha256":"ac0546260205d67d90144145f56550a638d29d1d4492427ff8379e674c015a5a","sha512":"819474690dd71d6902b0a766b21077040264b357ab99f6aae4d08f0fd9887d0e88b2fba57cc8c20b59b624b05fdfacaa3fcd8436eebe87ab97504a97ff00b62b","ssdeep":"384:uj0i2Bxmpj+kBzH96kpWV5gUV2R9tmkqTxa5mgPt0ZHv5+dsy+ri1KMK07LPEKJ4:g2fm9vkkpWp2FsTx7gl8Il+H07DDJqB5","tlshash":"9bb2e145c7ab3cc54beaaf59bc71439b828f93d540b9a9b75ef1d31a32e10841396dc0","first_seen":"2026-02-27T18:41:25.924494Z","last_seen":"2026-02-27T19:06:16.828107Z","times_seen":3,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"use-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"use-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"use-ledger.com/images/2.webp","fqdn":"use-ledger.com","domain":"use-ledger.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://use-ledger.com/","date":"2026-02-27T18:40:53.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use-ledger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:42:26 GMT","end":"Mon, 18 May 2026 19:40:14 GMT"},"fingerprint":{"sha1":"29:15:8A:CB:30:3B:6C:EC:74:24:E1:87:D9:3A:24:5A:A4:1D:F8:70","sha256":"F0:8F:58:0D:9F:33:09:F0:BC:24:26:E3:0B:94:BE:05:F2:2E:5C:AC:06:75:C6:03:CA:41:C5:95:BC:04:B5:C3"}}},"request":{"raw":"GET /images/2.webp HTTP/1.1\r\nHost: use-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://use-ledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 18:40:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38218\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Feb 2026 11:06:08 GMT\r\npriority: u=4,i=?0\r\netag: \"69a02920-954a\"\r\nexpires: Sat, 28 Feb 2026 18:40:53 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fegCu3R9a4%2Fu11tl81CRaYyIFK0ezwqMA35bvcCwrQJUlbVekRZZQFNjZdyekoQ9D13Ih1wSmOMVOgGKybP4h04DvKByJBCTpLnjQSHf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49d02cbbfc9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38218,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 752x417, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"875aa9c149781f37fcb36b52d40b4985","sha1":"b1ed87d6a23820130094bfe275d2b856d8bfcad5","sha256":"08f37f13ca9f664caf58146b18d06e0b6943b132d710a0fa554421357ce97cd4","sha512":"543f15df3bc44170cb9bf2770638a9532e15a8e698b36b2e29dd31715ec65264d259b291fb56231d9f72a1e6c600bbc926e075be6b1a177b01346c1ea47eac3e","ssdeep":"768:nuFaCqgAxayCgioKKFtYe+Re3NoykswruHLnbtaB:AaCqEyvioK4YBe9kur5aB","tlshash":"dd03f1c3817d695faf7818f29cd4d0a83a62e552042cd7e2601bda0d514bd597ccacbe","first_seen":"2026-02-27T18:41:25.92545Z","last_seen":"2026-02-27T19:06:16.829352Z","times_seen":3,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"use-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"use-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"use-ledger.com/images/favicon.png","fqdn":"use-ledger.com","domain":"use-ledger.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://use-ledger.com/","date":"2026-02-27T18:40:53.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use-ledger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 18:42:26 GMT","end":"Mon, 18 May 2026 19:40:14 GMT"},"fingerprint":{"sha1":"29:15:8A:CB:30:3B:6C:EC:74:24:E1:87:D9:3A:24:5A:A4:1D:F8:70","sha256":"F0:8F:58:0D:9F:33:09:F0:BC:24:26:E3:0B:94:BE:05:F2:2E:5C:AC:06:75:C6:03:CA:41:C5:95:BC:04:B5:C3"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: use-ledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://use-ledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 18:40:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 138\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Feb 2026 11:06:08 GMT\r\npriority: u=6,i=?0\r\netag: \"69a02920-8a\"\r\nexpires: Sat, 28 Feb 2026 18:40:53 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=614y9yVAjBfKCm7pTyE69JQyLTFdFc2hice5qHP2hMZvagkAhO0Wp8fLnuKjjKetudblhwVFxaF1KC%2BEvcV8F9M87be%2FHNj1kw%2Bb4bCB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49d02d7dfa9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"072fc284b66358792c16a5f6d9eb5d5f","sha1":"1291835625b510f1b91e462718b87cb91021460b","sha256":"4b73011a43bb1b67affd1572ef04a7c39b2fd2d0cfe7c222f8e729354c7f8d97","sha512":"cba45f05dffdfe9bd983831fbd0d6a88d41b9c0a0d243ae95fa7924e2382f81864b714f0b1525b29f9dc20d6e5a93ac0d02205bc52c0ce953569ab543c80a6fb","ssdeep":"","tlshash":"cbc02bc026042c32c65417334d22d493fc30c5244e7202c3348180503c2540ce068f02","first_seen":"2026-01-12T14:07:20.228502Z","last_seen":"2026-06-08T06:40:12.527812Z","times_seen":91,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"use-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"use-ledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}