{"report_id":"d611aa2f-267e-46ba-93a4-f8589373913f","version":0,"status":"done","tags":[],"date":"2026-09-17T03:31:13Z","url":{"schema":"http","addr":"ledgarapp.onlinedocsfilesreport.com/","fqdn":"ledgarapp.onlinedocsfilesreport.com","domain":"onlinedocsfilesreport.com","tld":"com"},"ip":{"addr":"65.86.32.27","port":0,"asn":394380,"as":"Leaseweb USA, Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"ledgarapp.onlinedocsfilesreport.com/","fqdn":"ledgarapp.onlinedocsfilesreport.com","domain":"onlinedocsfilesreport.com","tld":"com"},"title":"Hardware Wallet \u0026 Crypto Wallet - Security for Crypto | Ledger","dom":{"size":1063521,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (15942)","md5":"fdfb48b0b8aec872450440ced3e06fea","sha1":"0166057e7ad7ad7ee70aa6c618eb7ba9dad52f63","sha256":"a3eec274b59e2f90db492a223e47c8426a75ae069d6a00db20c3a8b03bc2a2a0","sha512":"62adf07f5f5b1323e807e9f6b4b03340527561216ddcaa84b35454a0888472d14a0488a46ac4993373c24e36b31a65d5fd685f500e4d5462d750b786295722ac","ssdeep":"24576:F4o2RV2RFEeW5AdEeW5A2xUR07zO5mG3CDqVXehocAUmU:B2V2FEsdEs4PytooQ","tlshash":"c63502354792ae556c67013453fb2b3d2cade433c7818efcb9ac72a35fc5a920a53126","dom_hash":"domhash935c3f87bb21d1af92e0b3ffa2a1d650","first_seen":"2026-09-15T08:49:51.023312Z","last_seen":"2026-09-17T03:31:15.067576Z","times_seen":5,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ledgarapp.onlinedocsfilesreport.com/","fqdn":"ledgarapp.onlinedocsfilesreport.com","domain":"onlinedocsfilesreport.com","tld":"com"},"ip":{"addr":"65.86.32.27","port":0,"asn":394380,"as":"Leaseweb USA, Inc.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-22T03:31:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"ledgarapp.onlinedocsfilesreport.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"ledgarapp.onlinedocsfilesreport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"ledgarapp.onlinedocsfilesreport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"ledgarapp.onlinedocsfilesreport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ledgarapp.onlinedocsfilesreport.com","ip":{"addr":"65.86.32.27","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"United States","country_code":"US"},"domain_registered":"2025-10-07","domain_rank":0,"first_seen":"2026-09-16T18:37:31.957516Z","last_seen":"2026-09-16T18:37:31.957516Z","alert_count":12,"request_count":3,"received_data":1203112,"sent_data":1582,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ledgarapp.onlinedocsfilesreport.com/","fqdn":"ledgarapp.onlinedocsfilesreport.com","domain":"onlinedocsfilesreport.com","tld":"com"},"ip":{"addr":"65.86.32.27","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-17T03:30:34.014Z","timestamp":1789615834014,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgarapp.onlinedocsfilesreport.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 13:25:50 GMT","end":"Sun, 13 Dec 2026 13:25:49 GMT"},"fingerprint":{"sha1":"AF:F6:84:55:7A:3B:94:77:1F:2D:FB:50:72:40:C1:A8:D5:32:AC:16","sha256":"75:63:38:37:61:26:1D:DD:30:5C:82:FC:AE:10:21:60:09:3D:9E:93:A1:C5:21:9D:1E:83:5F:16:6B:DF:2B:23"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ledgarapp.onlinedocsfilesreport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 17 Sep 2026 03:30:34 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nlast-modified: Tue, 11 Nov 2025 22:19:02 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1060284,"size_decoded":614658,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (15942)","md5":"699e004bd164740f70765b133cbf7f2d","sha1":"b50a0369721bfc6ba41f873225242ecaa2057eb4","sha256":"816e0ae0a2a68005ac78d413b18e5b34822ae2c243becf2c97b7af65d6580544","sha512":"0f539655da749f781abb24d6ad87f0e054d9582f4ca50897759239a3ea378371bde6afa221dad6fd2d39f40c7afd8896740199f128e9e547a77adf90f027c4dd","ssdeep":"24576:g4o2RV2RFEeW5AdEeW5A6xUR05WO5mG3CDqVXehocAUOl:A2V2FEsdEs/PytooL","tlshash":"7d25013653c2ae496c93413453fb273d2c6dd473c6818efcb9ad72a39f857920a1316a","first_seen":"2026-09-15T08:49:51.026142Z","last_seen":"2026-09-17T03:31:15.069738Z","times_seen":5,"resource_available":true,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":3,"connect":146,"send":0,"wait":146,"receive":0,"ssl":151},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"ledgarapp.onlinedocsfilesreport.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"ledgarapp.onlinedocsfilesreport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"ledgarapp.onlinedocsfilesreport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"ledgarapp.onlinedocsfilesreport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgarapp.onlinedocsfilesreport.com/recovery/assets/led.png","fqdn":"ledgarapp.onlinedocsfilesreport.com","domain":"onlinedocsfilesreport.com","tld":"com"},"ip":{"addr":"65.86.32.27","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgarapp.onlinedocsfilesreport.com/","date":"2026-09-17T03:30:35.317Z","timestamp":1789615835317,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgarapp.onlinedocsfilesreport.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 13:25:50 GMT","end":"Sun, 13 Dec 2026 13:25:49 GMT"},"fingerprint":{"sha1":"AF:F6:84:55:7A:3B:94:77:1F:2D:FB:50:72:40:C1:A8:D5:32:AC:16","sha256":"75:63:38:37:61:26:1D:DD:30:5C:82:FC:AE:10:21:60:09:3D:9E:93:A1:C5:21:9D:1E:83:5F:16:6B:DF:2B:23"}}},"request":{"raw":"GET /recovery/assets/led.png HTTP/1.1\r\nHost: ledgarapp.onlinedocsfilesreport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgarapp.onlinedocsfilesreport.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 17 Sep 2026 03:30:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 886\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nlast-modified: Tue, 11 Nov 2025 22:19:02 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":886,"size_decoded":1212,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"cfb1ce494d5eaa45bceb5ded5b835a2d","sha1":"c718c6342879ed54786b4f1d97096b57805774ae","sha256":"ff612e6bcb75b141d6b672f04339270738d51e512d7bea9aa01b806eefba06b6","sha512":"aa7b99d17245f8a1aa4a49d1bfd40a25f5be8f251fa7dc710bfcf052f8fb531de5d3fb635a4cfb47463222347541d5aee4e39b8e678bf6d803a14617475f8f2a","ssdeep":"","tlshash":"f21163f1a4753b2ad984cef24620a4b258483fca2bb273831bb1f7859aad3351844045","first_seen":"2025-06-24T09:52:16.956501Z","last_seen":"2026-09-17T03:31:15.071138Z","times_seen":15,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"ledgarapp.onlinedocsfilesreport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"ledgarapp.onlinedocsfilesreport.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"ledgarapp.onlinedocsfilesreport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"ledgarapp.onlinedocsfilesreport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgarapp.onlinedocsfilesreport.com/ledger-wallet-mechanism.mp4","fqdn":"ledgarapp.onlinedocsfilesreport.com","domain":"onlinedocsfilesreport.com","tld":"com"},"ip":{"addr":"65.86.32.27","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ledgarapp.onlinedocsfilesreport.com/","date":"2026-09-17T03:30:35.193Z","timestamp":1789615835193,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgarapp.onlinedocsfilesreport.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 13:25:50 GMT","end":"Sun, 13 Dec 2026 13:25:49 GMT"},"fingerprint":{"sha1":"AF:F6:84:55:7A:3B:94:77:1F:2D:FB:50:72:40:C1:A8:D5:32:AC:16","sha256":"75:63:38:37:61:26:1D:DD:30:5C:82:FC:AE:10:21:60:09:3D:9E:93:A1:C5:21:9D:1E:83:5F:16:6B:DF:2B:23"}}},"request":{"raw":"GET /ledger-wallet-mechanism.mp4 HTTP/1.1\r\nHost: ledgarapp.onlinedocsfilesreport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx\r\ndate: Thu, 17 Sep 2026 03:30:35 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 140903\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nlast-modified: Tue, 11 Nov 2025 22:19:02 GMT\r\nvary: Accept-Encoding\r\ncontent-range: bytes 0-140902/140903\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":140903,"size_decoded":141271,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"9f701288249e63e9be8ccd3e7a98c173","sha1":"1df5348233ef20d72f1a5a48aa504c93b101f41c","sha256":"249c56bc3ae76a4c1dcc6e250d9bb31c8175b30cb1c27d87210b0caa4af0e83f","sha512":"cc74eb0640d60f16e01d93d1df1674274087b2a6b6734953a27b868311cc1de10f632dc53d0672a5ecad0bbc86acd4d45cb2064e548443f87a6ba0c48a7c9b5c","ssdeep":"3072:xp3Q0X5VAAfmXOWp7vhI24yMDl37EsPVrjkJT/kzDl:xpgoWr+8T4yIEMVXq7kV","tlshash":"64d3f2ee8bd33e55ce343834b29d032aaf51f925da482fc3c2461082aa565566cdcfdd","first_seen":"2026-03-05T16:52:24.250294Z","last_seen":"2026-09-17T03:31:15.071752Z","times_seen":6,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":146,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"ledgarapp.onlinedocsfilesreport.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"ledgarapp.onlinedocsfilesreport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"ledgarapp.onlinedocsfilesreport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"ledgarapp.onlinedocsfilesreport.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}}]}