{"report_id":"d73c1cde-4ff1-4688-a2c5-0e152e243746","version":0,"status":"done","tags":[],"date":"2026-07-15T08:34:55Z","url":{"schema":"https","addr":"ledgertp.com/en/download/","fqdn":"ledgertp.com","domain":"ledgertp.com","tld":"com"},"ip":{"addr":"81.28.12.12","port":0,"asn":199524,"as":"G-Core Labs S.A.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"ledgertp.com/en/download/","fqdn":"ledgertp.com","domain":"ledgertp.com","tld":"com"},"title":"Ledger Wallet Download Crypto Asset Management","dom":{"size":26764,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (474)","md5":"e2101396025376d5a2aa10fd9ccc7c17","sha1":"e653ab1070a7fd9efcbc9f0a810c198f8aafec54","sha256":"fa6f37f044838b511889804251b367072c7ed8c9e0a2c14500b28acb1ae35e13","sha512":"d38f4fe7b6770ea59016d870ccf1f4f957aaed84f7402742c240b983ea4926f048d9feb091ebc3d3ffcd4f1f7f1f1e8c951aa1f28c20a8101d3d07700e18a34f","ssdeep":"192:pFFqjT3T3N6RJdkhceIwHBVeEmwSnrvx6JTs4mhvI1RuTEFvC7IZNY2s7IWhA3Ra:sSGeEmhnrJXhGpI7D7HMrPfD8mq9","tlshash":"4fc24077e1f1613a024752d9246d6b6a6a63a407e41ac45a72fc039efff2dcbc813607","dom_hash":"domhashe6e17cad867bb9f85d61473630f548e3","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"ledgertp.com/en/download/","fqdn":"ledgertp.com","domain":"ledgertp.com","tld":"com"},"ip":{"addr":"81.28.12.12","port":0,"asn":199524,"as":"G-Core Labs S.A.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-19T08:34:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"ledgertp.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"ledgertp.com","ip":{"addr":"81.28.12.12","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-07-07","domain_rank":0,"first_seen":"2026-07-12T15:46:47.515395Z","last_seen":"2026-07-12T15:46:47.515395Z","alert_count":54,"request_count":18,"received_data":22577993,"sent_data":9579,"comment":"","tags":null,"fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-12T22:19:35.511658Z","alert_count":0,"request_count":5,"received_data":283117,"sent_data":2858,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-12T22:22:25.184057Z","alert_count":0,"request_count":1,"received_data":13319,"sent_data":532,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ledgertp.com/en/download/","fqdn":"ledgertp.com","domain":"ledgertp.com","tld":"com"},"ip":{"addr":"81.28.12.12","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"7c2ad4e394be1ef8fb5f9601b8cc11fa","sha1":"bfa9d7d6918e926ca77af89bc42cd901d481c87e","sha256":"e951704f092eded547d9992d3cd071daaf54d6379699f8e1a982bbe8567c80eb","sha512":"e71058153f29f359a742b581eebd56f26e84834f72f2c458d29af4a2745942ba0f8eb0485e3b5611590f5ca548dba9f3752861a480a3477a7f1a321c83d0686b","ssdeep":"","tlshash":"b30126ae61bdb5b606232084168f5baa360251c3a082ec953e6cc2c97ff14019de6b93","size":750,"data":"","first_seen":"2026-07-15T08:34:35.548789Z","last_seen":"2026-07-15T08:34:59.896363Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ledgertp.com/assets/download-hero-device.png","fqdn":"ledgertp.com","domain":"ledgertp.com","tld":"com"},"ip":{"addr":"81.28.12.12","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgertp.com/en/download/","date":"2026-07-15T08:34:27.018Z","timestamp":1784104467018,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgertp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:22 GMT","end":"Sun, 11 Oct 2026 12:53:21 GMT"},"fingerprint":{"sha1":"51:EC:3F:C4:F3:E6:7E:1B:CB:D6:B0:A8:B3:41:8F:50:E5:9F:AC:E1","sha256":"45:C2:C1:1A:60:27:4A:03:73:74:E4:82:F3:E0:F4:58:27:90:03:5B:AC:63:72:01:8E:65:DB:C4:B9:FD:DD:DA"}}},"request":{"raw":"GET /assets/download-hero-device.png HTTP/1.1\r\nHost: ledgertp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgertp.com/en/download/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 15 Jul 2026 08:34:27 GMT\r\ncontent-type: image/png\r\nx-id-fe: am3-hw-edge-gpig-gc96\r\nlast-modified: Sat, 13 Jun 2026 14:44:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2d6ce6-7457a\"\r\nexpires: Fri, 14 Aug 2026 05:00:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ntraceparent: 00-baefb04078cb535f61d3356957126602-2e10d2cfc34cd700-01\r\nx-id: am3-hw-edge-gpig-gc96\r\nage: 12835\r\ncache: HIT\r\nx-cached-since: 2026-07-15T05:00:32+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":476538,"size_decoded":464241,"mime_type":"image/png","magic":"PNG image data, 1042 x 1124, 8-bit/color RGBA, non-interlaced","md5":"ca30a43025439246d1a91bee7c94cb9c","sha1":"0e45d39b6ed88d796993432cc3c22584d83dff12","sha256":"df5fec652fc261736e0ac9c7298702936485a20bb2c1453c9b1fb86fbc941451","sha512":"47f1d72284b9756a0ceddabe31108a638a783f33f459a4eb9649454ce63c55dcf9a388b185958f8b9764ae7387f14b9874473d15fbceee940a223cc2ae7f77d9","ssdeep":"12288:sg1iYLJ9wTax7ULZLYQF1CBMxDuVMOVC2soVpo0m:sg1TLJ9P7ULCRBMptMpS","tlshash":"ffa42313be495a21ef1ba5b1dbed0107df51a1a61390eae32272d01c2f0b71885dbfc6","first_seen":"2026-07-15T08:34:35.522073Z","last_seen":"2026-07-15T08:34:59.88071Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"ledgertp.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgertp.com/assets/download-icons/windows.png","fqdn":"ledgertp.com","domain":"ledgertp.com","tld":"com"},"ip":{"addr":"81.28.12.12","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgertp.com/en/download/","date":"2026-07-15T08:34:27.020Z","timestamp":1784104467020,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgertp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:22 GMT","end":"Sun, 11 Oct 2026 12:53:21 GMT"},"fingerprint":{"sha1":"51:EC:3F:C4:F3:E6:7E:1B:CB:D6:B0:A8:B3:41:8F:50:E5:9F:AC:E1","sha256":"45:C2:C1:1A:60:27:4A:03:73:74:E4:82:F3:E0:F4:58:27:90:03:5B:AC:63:72:01:8E:65:DB:C4:B9:FD:DD:DA"}}},"request":{"raw":"GET /assets/download-icons/windows.png HTTP/1.1\r\nHost: ledgertp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgertp.com/en/download/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 15 Jul 2026 08:34:27 GMT\r\ncontent-type: image/png\r\nx-id-fe: am3-hw-edge-gpig-gc96\r\nlast-modified: Sat, 13 Jun 2026 14:45:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2d6cec-a1d4\"\r\nexpires: Fri, 14 Aug 2026 05:00:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ntraceparent: 00-906d0a3ecab05355496da9b77f98f075-4a020168b8fe7f7e-01\r\nx-id: am3-hw-edge-gpig-gc96\r\nage: 12835\r\ncache: HIT\r\nx-cached-since: 2026-07-15T05:00:32+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41428,"size_decoded":41961,"mime_type":"image/png","magic":"PNG image data, 234 x 224, 8-bit/color RGBA, non-interlaced","md5":"1f43e49958aea32e88a039a86f460735","sha1":"c64806e75aeb826ba02db24d4350352ef2516bf9","sha256":"d86972d256769d93791d549f50bed1bb027eeef043f6bb9fa9c9e517bb4641a4","sha512":"fa575a07937ff3ef306fe4f830f162cc080df7696f7a220fe1479258478abf4a6adb21fb374ee9666790189f4e1d2587e2883e893f61e158810c30d870184c8a","ssdeep":"768:WyGd15MATaK12OS+qxnlCyaHCYYpYR+Vslz7LN350IegrcBSNtzgoJNmXkyr:C1LTaK1SlCyYCDplslz4bIhZg3","tlshash":"ca13f26edd436734d4c59436ca02d450b4a2c9d3bb82aa57136db0f2f7122346ed9ece","first_seen":"2026-07-15T08:34:35.547172Z","last_seen":"2026-07-15T08:34:59.881915Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"ledgertp.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgertp.com/assets/download-mobile-showcase.png","fqdn":"ledgertp.com","domain":"ledgertp.com","tld":"com"},"ip":{"addr":"81.28.12.12","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgertp.com/en/download/","date":"2026-07-15T08:34:27.025Z","timestamp":1784104467025,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgertp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:22 GMT","end":"Sun, 11 Oct 2026 12:53:21 GMT"},"fingerprint":{"sha1":"51:EC:3F:C4:F3:E6:7E:1B:CB:D6:B0:A8:B3:41:8F:50:E5:9F:AC:E1","sha256":"45:C2:C1:1A:60:27:4A:03:73:74:E4:82:F3:E0:F4:58:27:90:03:5B:AC:63:72:01:8E:65:DB:C4:B9:FD:DD:DA"}}},"request":{"raw":"GET /assets/download-mobile-showcase.png HTTP/1.1\r\nHost: ledgertp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgertp.com/en/download/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 15 Jul 2026 08:34:27 GMT\r\ncontent-type: image/png\r\nx-id-fe: am3-hw-edge-gpig-gc96\r\nlast-modified: Sat, 13 Jun 2026 14:44:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2d6ceb-cc3be\"\r\nexpires: Fri, 14 Aug 2026 05:00:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ntraceparent: 00-9aa0f1d6057a184d35ac501feb8ab349-0976908495234670-01\r\nx-id: am3-hw-edge-gpig-gc96\r\nage: 12835\r\ncache: HIT\r\nx-cached-since: 2026-07-15T05:00:32+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":836542,"size_decoded":822558,"mime_type":"image/png","magic":"PNG image data, 1926 x 1288, 8-bit/color RGBA, non-interlaced","md5":"e525a9af4d33332d0328435ef2e4e81f","sha1":"afb3bca3a8ee935487b467c795fd70bb9b0001c9","sha256":"83251756805b2bacf1bbcce92b903a41a5f53c1efba327e3ac5a8c81a846fd57","sha512":"17e496b553b52ec39db4ae754a89dfde81c891872fe87826f1625af0eac6815dca29d3876eebbf5fa09bd2bf0113ea1ad13edc630632137deade9294bf08ceb5","ssdeep":"24576:d/U1nMyJPt8AxjzMyMclXiSpDeYij+OdWw9tXWvxPSEPf1FKpmsIbNdHwteDokK8:d/1eDoFHcfoPbPc","tlshash":"9b052327cfb8e9a4cb2e1f17d36769c7a2005b5242a15b2f07b5c024fb5f1a6176be40","first_seen":"2026-07-15T08:34:35.517794Z","last_seen":"2026-07-15T08:34:59.882656Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"ledgertp.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgertp.com/assets/download-earn-rewards.png","fqdn":"ledgertp.com","domain":"ledgertp.com","tld":"com"},"ip":{"addr":"81.28.12.12","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgertp.com/en/download/","date":"2026-07-15T08:34:27.031Z","timestamp":1784104467031,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgertp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:22 GMT","end":"Sun, 11 Oct 2026 12:53:21 GMT"},"fingerprint":{"sha1":"51:EC:3F:C4:F3:E6:7E:1B:CB:D6:B0:A8:B3:41:8F:50:E5:9F:AC:E1","sha256":"45:C2:C1:1A:60:27:4A:03:73:74:E4:82:F3:E0:F4:58:27:90:03:5B:AC:63:72:01:8E:65:DB:C4:B9:FD:DD:DA"}}},"request":{"raw":"GET /assets/download-earn-rewards.png HTTP/1.1\r\nHost: ledgertp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgertp.com/en/download/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 15 Jul 2026 08:34:27 GMT\r\ncontent-type: image/png\r\nx-id-fe: am3-hw-edge-gpig-gc96\r\nlast-modified: Sat, 13 Jun 2026 14:44:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2d6ce9-176720\"\r\nexpires: Fri, 14 Aug 2026 05:00:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ntraceparent: 00-c90f7635b51f6b7cc727b6a6cb87b63d-15e0b73e32c96ce9-01\r\nx-id: am3-hw-edge-gpig-gc96\r\nage: 12835\r\ncache: HIT\r\nx-cached-since: 2026-07-15T05:00:32+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1533728,"size_decoded":1515545,"mime_type":"image/png","magic":"PNG image data, 1438 x 1658, 8-bit/color RGBA, non-interlaced","md5":"f1c5ae2131ddb1362939af9f3e7cf9f4","sha1":"41146450b6e70959d21e114a9f8b5e7e0a68785f","sha256":"2833e345af1a0b3bf0eafa7532dd2e8f469af8b7daa2d7e75e0264fcb19bef8e","sha512":"94e815740d489914f70665298aed90eac2f10f3b486ed815849c8d28d0004db8fa4e6cbc34f184d4745d095d01e8401776b5311c720a980a02247d6b1810539b","ssdeep":"24576:91nQsiYiiOiB0wBhQ/8dXXzG6gKZi7gEKf+WLWEWGWZXn61VaiIGfBIuOjc:99NiNi1owXzG6ggE+qEWhcvaPQBIuOjc","tlshash":"882523d2fed8bd79d487821452c5d22cdf697a77c654212b8923c6cc2c13af2a3ad643","first_seen":"2026-07-15T08:34:35.519549Z","last_seen":"2026-07-15T08:34:59.883503Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"ledgertp.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledgertp.com/en/download/","date":"2026-07-15T08:34:27.346Z","timestamp":1784104467346,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ledgertp.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 09 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 542745\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-15T11:20:11.048846Z","times_seen":235244,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":36,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledgertp.com/en/download/","date":"2026-07-15T08:34:27.348Z","timestamp":1784104467348,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ledgertp.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 09 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 542745\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-15T11:20:11.048846Z","times_seen":235244,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":29,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledgertp.com/en/download/","date":"2026-07-15T08:34:27.351Z","timestamp":1784104467351,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ledgertp.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 84924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 12:24:54 GMT\r\nexpires: Mon, 12 Jul 2027 12:24:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 245373\r\nlast-modified: Tue, 09 Sep 2025 18:33:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":84924,"size_decoded":85737,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84924, version 1.0","md5":"f5b588b5cfef2173838149769c8a0269","sha1":"5312086a01f8e8299094ddee5819b9727a19cae2","sha256":"b8811a6cd6f7e0707dfc9e9e6f1daf5f6f450b51e887e163945a9ade91c2720f","sha512":"05d5271c633bbe102775c0b6df9c5e110dae3a2517061714bb5c26ec66a00f8e1b62961135ec96962e7ccaf3942d8e32bd86f42558cbac8ee16ff6c333117886","ssdeep":"1536:PABWz4rSN/GzH27xN5UR1OnX+uyRsd1osLZBi/JGyQI01xDj+C:PAG4rCGa7L5UR1OnX+fGd/VB03QI+xP","tlshash":"378302b4ae71b3968f1c7fe46396273c2a7bdf41053950aeae44e16787f00dba148784","first_seen":"2025-05-29T19:39:57.235915Z","last_seen":"2026-07-15T11:32:11.285035Z","times_seen":18335,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":44,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgertp.com/favicon/favicon.ico?v=8","fqdn":"ledgertp.com","domain":"ledgertp.com","tld":"com"},"ip":{"addr":"81.28.12.12","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgertp.com/en/download/","date":"2026-07-15T08:34:27.642Z","timestamp":1784104467642,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgertp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:22 GMT","end":"Sun, 11 Oct 2026 12:53:21 GMT"},"fingerprint":{"sha1":"51:EC:3F:C4:F3:E6:7E:1B:CB:D6:B0:A8:B3:41:8F:50:E5:9F:AC:E1","sha256":"45:C2:C1:1A:60:27:4A:03:73:74:E4:82:F3:E0:F4:58:27:90:03:5B:AC:63:72:01:8E:65:DB:C4:B9:FD:DD:DA"}}},"request":{"raw":"GET /favicon/favicon.ico?v=8 HTTP/1.1\r\nHost: ledgertp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgertp.com/en/download/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 15 Jul 2026 08:34:27 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 135738\r\nx-id-fe: am3-hw-edge-gpig-gc96\r\nlast-modified: Sat, 13 Jun 2026 14:45:08 GMT\r\netag: \"6a2d6cf4-2123a\"\r\ntraceparent: 00-94b026f9ce7fd2f612324f73afad3fc1-b546f7aa11b8e158-01\r\nx-id: am3-hw-edge-gpig-gc96\r\nage: 14862\r\ncache: HIT\r\nx-cached-since: 2026-07-15T04:26:45+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":135738,"size_decoded":136167,"mime_type":"image/x-icon","magic":"PNG image data, 1254 x 1254, 8-bit/color RGBA, non-interlaced","md5":"af76096dca99ed288a0f08806ebcbd98","sha1":"b6795f1fa66290710ee2bdc920c06ff907721c8c","sha256":"e4a382c6e53c3c6e8081f8cb5042fb6636a54e7af7ca91f938125650f916b5ee","sha512":"1413134c2f90507835e1d37235adf5ef1e352dd734b43abb94ca48e2c4e38ca6d83bf5e4a2576ca6f26bdcd66c2ba803cb0eceeaf0a50d758bb5c22e7cf9c6ba","ssdeep":"3072:dUnk05CDdxCda9M/GCXAF9cMA838ed9yelIBbh:d6kfCdakGCXAF9cnezzgbh","tlshash":"3ad35b43dad1343b6c47cd3c6e573a81bd62146731a08f368f8a602d2a4bbb5ed72c58","first_seen":"2026-06-24T22:20:40.077525Z","last_seen":"2026-07-15T08:40:02.702624Z","times_seen":7,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"ledgertp.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgertp.com/en/download/","fqdn":"ledgertp.com","domain":"ledgertp.com","tld":"com"},"ip":{"addr":"81.28.12.12","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-15T08:34:26.510Z","timestamp":1784104466510,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgertp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:22 GMT","end":"Sun, 11 Oct 2026 12:53:21 GMT"},"fingerprint":{"sha1":"51:EC:3F:C4:F3:E6:7E:1B:CB:D6:B0:A8:B3:41:8F:50:E5:9F:AC:E1","sha256":"45:C2:C1:1A:60:27:4A:03:73:74:E4:82:F3:E0:F4:58:27:90:03:5B:AC:63:72:01:8E:65:DB:C4:B9:FD:DD:DA"}}},"request":{"raw":"GET /en/download/ HTTP/1.1\r\nHost: ledgertp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 15 Jul 2026 08:34:26 GMT\r\ncontent-type: text/html\r\nx-id-fe: am3-hw-edge-gpig-gc96\r\nlast-modified: Tue, 07 Jul 2026 17:09:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4d32ad-68d0\"\r\ncontent-encoding: gzip\r\ntraceparent: 00-07ed8bde1caecdc4948e522c79bf86a4-4e86568a030146d5-01\r\nx-id: am3-hw-edge-gpig-gc96\r\nage: 12834\r\ncache: HIT\r\nx-cached-since: 2026-07-15T05:00:32+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26832,"size_decoded":6128,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (474)","md5":"9a2490cd0e1ca590635ce7d9d24399e5","sha1":"ff45489d6028e31d883a3a1113eff08d29222e2d","sha256":"cc253ae43c4029e772a99ed467922a5edf3fcc6663ff08bdabd67fa0a8d5e038","sha512":"f29d97a68d10b9a0fea68fda3e4252b4b5a82638b0ffc43fc246f782bc7240645329c141ec83574ae5dba345b7ab265c128e324fa4defb56e34e06d89610102b","ssdeep":"192:wnogRc13T3WTjRJdkhcfIwzSVEJpSnrvI6aTs4VhvIYRuTDFv87IZNX23CIrbA33:oK3VEJsnrQvhXG67/C4PrPfD8mqr","tlshash":"76c24077e1f1a13a024752d9346d676a6a63a403d41ac45a72fc039efff2dcac813647","first_seen":"2026-07-15T08:34:35.537337Z","last_seen":"2026-07-15T08:34:59.88609Z","times_seen":2,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":3,"connect":22,"send":0,"wait":25,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"ledgertp.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledgertp.com/en/download/","date":"2026-07-15T08:34:27.004Z","timestamp":1784104467004,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgertp.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 15 Jul 2026 08:34:27 GMT\r\ndate: Wed, 15 Jul 2026 08:34:27 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12635,"size_decoded":1486,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4b1d52c19ccef2398d1de007b3c9a55c","sha1":"c57fa2bcac927a7d60c526cb7ec2b6249019dfe7","sha256":"05f842619ec9f615de0b749034eadaea60e3554d798683fb01ee1eb27abd1e68","sha512":"9dfc4ab3832325eb1438bd85674e15ceb62771b94f06ea8e48a2e286453d571218df3f6727b8df4c1bdfa47218eb5fed0298601da289391a736a76a230d68c3b","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kCxHx:vXuM0p2+g7r","tlshash":"1e427892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T22:54:08.549336Z","last_seen":"2026-07-15T11:36:14.101886Z","times_seen":13643,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":34,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgertp.com/assets/download-icons/macos.png","fqdn":"ledgertp.com","domain":"ledgertp.com","tld":"com"},"ip":{"addr":"81.28.12.12","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgertp.com/en/download/","date":"2026-07-15T08:34:27.021Z","timestamp":1784104467021,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgertp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:22 GMT","end":"Sun, 11 Oct 2026 12:53:21 GMT"},"fingerprint":{"sha1":"51:EC:3F:C4:F3:E6:7E:1B:CB:D6:B0:A8:B3:41:8F:50:E5:9F:AC:E1","sha256":"45:C2:C1:1A:60:27:4A:03:73:74:E4:82:F3:E0:F4:58:27:90:03:5B:AC:63:72:01:8E:65:DB:C4:B9:FD:DD:DA"}}},"request":{"raw":"GET /assets/download-icons/macos.png HTTP/1.1\r\nHost: ledgertp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgertp.com/en/download/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 15 Jul 2026 08:34:27 GMT\r\ncontent-type: image/png\r\nx-id-fe: am3-hw-edge-gpig-gc96\r\nlast-modified: Sat, 13 Jun 2026 14:44:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2d6ceb-8584\"\r\nexpires: Fri, 14 Aug 2026 05:00:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ntraceparent: 00-43be734544ab5b2f2703f1cde6f7917d-21398b22cbfc13bc-01\r\nx-id: am3-hw-edge-gpig-gc96\r\nage: 12835\r\ncache: HIT\r\nx-cached-since: 2026-07-15T05:00:32+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":34180,"size_decoded":34713,"mime_type":"image/png","magic":"PNG image data, 178 x 200, 8-bit/color RGBA, non-interlaced","md5":"6934b8b7cc78a2c3dac4c503df461cd4","sha1":"11f27cd702e3d22cddfae116f4e275556531afdd","sha256":"46646889fe32d99b7545327c14fe70b2af01fd772ab5af8640a7d0950b48b6b1","sha512":"4fb2e4b1c809bc59c43b9b513aef40378edf9c93f0333e703e2044b74cec2bbafaee4841c5b9bf7f37825e6d8419db0dffc90c16162b484882b736c0875e4fbc","ssdeep":"768:v3tUihjfCin+7lnDV1CK+P5/lCS17I9eHgQGvxTzt+fsjidYR:1UiNaincn/CKqd7i97jxTBodYR","tlshash":"01e2f1c3ba0c38e625334c3ed3e9a69c586d253644cd11f780be4db2268746f06b4c89","first_seen":"2026-07-15T08:34:35.541134Z","last_seen":"2026-07-15T08:34:59.888133Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"ledgertp.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgertp.com/assets/download-connect-wallet.png","fqdn":"ledgertp.com","domain":"ledgertp.com","tld":"com"},"ip":{"addr":"81.28.12.12","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgertp.com/en/download/","date":"2026-07-15T08:34:27.028Z","timestamp":1784104467028,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgertp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:22 GMT","end":"Sun, 11 Oct 2026 12:53:21 GMT"},"fingerprint":{"sha1":"51:EC:3F:C4:F3:E6:7E:1B:CB:D6:B0:A8:B3:41:8F:50:E5:9F:AC:E1","sha256":"45:C2:C1:1A:60:27:4A:03:73:74:E4:82:F3:E0:F4:58:27:90:03:5B:AC:63:72:01:8E:65:DB:C4:B9:FD:DD:DA"}}},"request":{"raw":"GET /assets/download-connect-wallet.png HTTP/1.1\r\nHost: ledgertp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgertp.com/en/download/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 15 Jul 2026 08:34:27 GMT\r\ncontent-type: image/png\r\nx-id-fe: am3-hw-edge-gpig-gc96\r\nlast-modified: Sat, 13 Jun 2026 14:45:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2d6cec-605a9\"\r\nexpires: Fri, 14 Aug 2026 05:00:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ntraceparent: 00-bf7a3a01fdd42bbeda881341046accb0-886475b3441a2bd7-01\r\nx-id: am3-hw-edge-gpig-gc96\r\nage: 12835\r\ncache: HIT\r\nx-cached-since: 2026-07-15T05:00:32+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":394665,"size_decoded":363809,"mime_type":"image/png","magic":"PNG image data, 1416 x 1490, 8-bit/color RGBA, non-interlaced","md5":"b49fb06dc168d890c2c38bb35f2d2bd0","sha1":"651e1adf3ebf62dec0f5a25b9e4790e45ffe846a","sha256":"33e3669e5f46cd59c9511019495814f4fe5ce32c87b6c674dd3bdc4d37b41c22","sha512":"f1130a595d3edf402562b1e5e1fe5295aa6a614e33023f887c5b0cfac6ec42e009f6f6161e17eaf8bd5d829594ee797726ace43fbafb27d37d7ca576ed884556","ssdeep":"12288:TuLKq9l5k8pv8t4EKWxQeiLUff82PH5Qh0BcNzzznzz2:KPk8p0yx8rLPH5dBt","tlshash":"1184f0c7f8be8092f46c3329132f585957367a8f687c9cea40fdaada73394d46c21458","first_seen":"2026-07-15T08:34:35.532867Z","last_seen":"2026-07-15T08:34:59.88901Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"ledgertp.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgertp.com/styles.css?v=11","fqdn":"ledgertp.com","domain":"ledgertp.com","tld":"com"},"ip":{"addr":"81.28.12.12","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledgertp.com/en/download/","date":"2026-07-15T08:34:27.007Z","timestamp":1784104467007,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgertp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:22 GMT","end":"Sun, 11 Oct 2026 12:53:21 GMT"},"fingerprint":{"sha1":"51:EC:3F:C4:F3:E6:7E:1B:CB:D6:B0:A8:B3:41:8F:50:E5:9F:AC:E1","sha256":"45:C2:C1:1A:60:27:4A:03:73:74:E4:82:F3:E0:F4:58:27:90:03:5B:AC:63:72:01:8E:65:DB:C4:B9:FD:DD:DA"}}},"request":{"raw":"GET /styles.css?v=11 HTTP/1.1\r\nHost: ledgertp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgertp.com/en/download/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 15 Jul 2026 08:34:27 GMT\r\ncontent-type: text/css\r\nx-id-fe: am3-hw-edge-gpig-gc96\r\nlast-modified: Tue, 07 Jul 2026 19:43:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4d56e0-b9d0\"\r\nexpires: Wed, 15 Jul 2026 17:00:32 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ntraceparent: 00-82e5165be7cc82473448b1868be8a772-da0415b8bc9a1d8e-01\r\nx-id: am3-hw-edge-gpig-gc96\r\nage: 12835\r\ncache: HIT\r\nx-cached-since: 2026-07-15T05:00:32+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47568,"size_decoded":8711,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"de161a32708409449cb5d5989458e98f","sha1":"00a40b4012bedbd0da80e044834a8ac1f58f2d72","sha256":"d1bc3719cd4faa93a39eadc9a878bff5b83265659b10f7ae06808dd2ca9f18f0","sha512":"75c75b1e68fddf02db2d8cce8b6f8982ee5bb60ae3d3e3dff8d958ddd0cfce68a7896096789b91784f050119d9fc4a33e20df3310384a948d12fa635c12e8e54","ssdeep":"768:sGCQCF0VXokSgK5mds58RGvrfjYSiEKC7jsf:sGCdF0VrSgKUds52GvrfFhKC74f","tlshash":"69235597a7b05e04342f8499a886eb88f36da013d10ec97d5bf5205cfd9d0ca95b6e0b","first_seen":"2026-06-24T22:20:40.08756Z","last_seen":"2026-07-15T08:40:02.707413Z","times_seen":7,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"ledgertp.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgertp.com/assets/logo.svg","fqdn":"ledgertp.com","domain":"ledgertp.com","tld":"com"},"ip":{"addr":"81.28.12.12","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgertp.com/en/download/","date":"2026-07-15T08:34:27.016Z","timestamp":1784104467016,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgertp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:22 GMT","end":"Sun, 11 Oct 2026 12:53:21 GMT"},"fingerprint":{"sha1":"51:EC:3F:C4:F3:E6:7E:1B:CB:D6:B0:A8:B3:41:8F:50:E5:9F:AC:E1","sha256":"45:C2:C1:1A:60:27:4A:03:73:74:E4:82:F3:E0:F4:58:27:90:03:5B:AC:63:72:01:8E:65:DB:C4:B9:FD:DD:DA"}}},"request":{"raw":"GET /assets/logo.svg HTTP/1.1\r\nHost: ledgertp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgertp.com/en/download/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 15 Jul 2026 08:34:27 GMT\r\ncontent-type: image/svg+xml\r\nx-id-fe: am3-hw-edge-gpig-gc96\r\nlast-modified: Sat, 13 Jun 2026 14:45:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2d6cee-7ca\"\r\ncontent-encoding: gzip\r\ntraceparent: 00-b882a3ead5781afa34b50a40961304d3-fddf12b9e92f6be0-01\r\nx-id: am3-hw-edge-gpig-gc96\r\nage: 12893\r\ncache: HIT\r\nx-cached-since: 2026-07-15T04:59:34+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1994,"size_decoded":1400,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9697fcd4708edaa5bcc289288bd0753a","sha1":"55b2228607fb1ff5ee549ac06f1318671b4f4f6f","sha256":"a63a48ac09fea71cbe037d4e111e47c40f0137f246d4b36fa83dd0dac32a48c2","sha512":"48cefbe4a5973eeb534b00fa6a5c3a3e6c1c290762c7da27b034454b384857fc92db7e173fa8c1339bf58f04e0590d15385c2cd8886920c0185c04adb879cbdf","ssdeep":"","tlshash":"fb4194d84ab002fdcc58e9fe0b58312c696651e5f409459df7e39e2eada845c8c4a2f2","first_seen":"2026-06-24T22:20:40.081888Z","last_seen":"2026-07-15T08:40:02.708076Z","times_seen":7,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"ledgertp.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgertp.com/assets/download-icons/linux.png","fqdn":"ledgertp.com","domain":"ledgertp.com","tld":"com"},"ip":{"addr":"81.28.12.12","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgertp.com/en/download/","date":"2026-07-15T08:34:27.022Z","timestamp":1784104467022,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgertp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:22 GMT","end":"Sun, 11 Oct 2026 12:53:21 GMT"},"fingerprint":{"sha1":"51:EC:3F:C4:F3:E6:7E:1B:CB:D6:B0:A8:B3:41:8F:50:E5:9F:AC:E1","sha256":"45:C2:C1:1A:60:27:4A:03:73:74:E4:82:F3:E0:F4:58:27:90:03:5B:AC:63:72:01:8E:65:DB:C4:B9:FD:DD:DA"}}},"request":{"raw":"GET /assets/download-icons/linux.png HTTP/1.1\r\nHost: ledgertp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgertp.com/en/download/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 15 Jul 2026 08:34:27 GMT\r\ncontent-type: image/png\r\nx-id-fe: am3-hw-edge-gpig-gc96\r\nlast-modified: Sat, 13 Jun 2026 14:44:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2d6ceb-7f46\"\r\nexpires: Fri, 14 Aug 2026 05:00:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ntraceparent: 00-f7e76785c9fdad195ee47f61d3b84318-de1f9082492e6fbf-01\r\nx-id: am3-hw-edge-gpig-gc96\r\nage: 12835\r\ncache: HIT\r\nx-cached-since: 2026-07-15T05:00:32+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32582,"size_decoded":32978,"mime_type":"image/png","magic":"PNG image data, 200 x 242, 8-bit/color RGBA, non-interlaced","md5":"9361493791c2735cc7e6c5aacf8a147e","sha1":"4e6f22385f66d092fe31d6b1901947069d1b77e6","sha256":"62d703f100a1b37ea2b6d73263d959639f0990813fd1fe31ac0b02a3d97dcc9b","sha512":"dea64abd8826421de561c7e254f3b9e496279ff64660ed024820a96858ebf44c0be8fb9e048ea78d405510c0219556a13ac257d417d7a0032528bc9a0e05de76","ssdeep":"768:OslJYL03LNrXkm5XAXrsOGrgayGQU5UJbA09gbI:UWXkOQXC0ayGQU5qoI","tlshash":"cae2f1db8ee6c3152935a14722327592e3756d183c5108ab559e6ba187e234c0fccbf5","first_seen":"2026-07-15T08:34:35.542538Z","last_seen":"2026-07-15T08:34:59.890728Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"ledgertp.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgertp.com/assets/download-smoother-connectivity.mp4","fqdn":"ledgertp.com","domain":"ledgertp.com","tld":"com"},"ip":{"addr":"81.28.12.12","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ledgertp.com/en/download/","date":"2026-07-15T08:34:27.033Z","timestamp":1784104467033,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgertp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:22 GMT","end":"Sun, 11 Oct 2026 12:53:21 GMT"},"fingerprint":{"sha1":"51:EC:3F:C4:F3:E6:7E:1B:CB:D6:B0:A8:B3:41:8F:50:E5:9F:AC:E1","sha256":"45:C2:C1:1A:60:27:4A:03:73:74:E4:82:F3:E0:F4:58:27:90:03:5B:AC:63:72:01:8E:65:DB:C4:B9:FD:DD:DA"}}},"request":{"raw":"GET /assets/download-smoother-connectivity.mp4 HTTP/1.1\r\nHost: ledgertp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgertp.com/en/download/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx\r\ndate: Wed, 15 Jul 2026 08:34:27 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 16332278\r\nx-id-fe: am3-hw-edge-gpig-gc96\r\nlast-modified: Sat, 13 Jun 2026 14:44:51 GMT\r\netag: \"6a2d6ce3-f935f6\"\r\ntraceparent: 00-e62523a332940e07f78bb51b8095ac22-6cf78e9dd85ebc2d-01\r\nx-id: am3-hw-edge-gpig-gc96\r\nage: 12835\r\ncache: HIT\r\nx-cached-since: 2026-07-15T05:00:32+00:00\r\ncontent-range: bytes 0-16332277/16332278\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1637962,"size_decoded":1638411,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"d3adcff76eb00cdf990a9a83ec77b137","sha1":"d665171c7fddafe361b495fd5de57b5adbe951ce","sha256":"2491014ac4d3fed2c6981181d0c75cd878cef1513c7360cdd136603a2c59be0c","sha512":"d5f7ce5a776c95eb802891bbeda4e2ad1d6dc1bef02e3775e5ab9fca57167aa9aa832eb65fb0bd5e2cd4bd3b08ae6b8e5972ebe6afa349bce873b69f12b1ef80","ssdeep":"24576:0y9BmOQTpqdGUJSZVGLgHqglGeX5ESlzFWCJQJVE5WCuEa:0siNqdG5ygHoeeIFWqS011a","tlshash":"c82523dd1fc3246ac4b6b4b49444256a127f26f28e4f13e3074605bd6dc1ea3be72ba1","first_seen":"2026-07-15T08:34:35.544037Z","last_seen":"2026-07-15T08:34:59.891371Z","times_seen":2,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"ledgertp.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledgertp.com/en/download/","date":"2026-07-15T08:34:27.350Z","timestamp":1784104467350,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ledgertp.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 09 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 542745\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-15T11:20:11.048846Z","times_seen":235244,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":22,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgertp.com/assets/download-smoother-connectivity.mp4","fqdn":"ledgertp.com","domain":"ledgertp.com","tld":"com"},"ip":{"addr":"81.28.12.12","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ledgertp.com/en/download/","date":"2026-07-15T08:34:27.367Z","timestamp":1784104467367,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgertp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:22 GMT","end":"Sun, 11 Oct 2026 12:53:21 GMT"},"fingerprint":{"sha1":"51:EC:3F:C4:F3:E6:7E:1B:CB:D6:B0:A8:B3:41:8F:50:E5:9F:AC:E1","sha256":"45:C2:C1:1A:60:27:4A:03:73:74:E4:82:F3:E0:F4:58:27:90:03:5B:AC:63:72:01:8E:65:DB:C4:B9:FD:DD:DA"}}},"request":{"raw":"GET /assets/download-smoother-connectivity.mp4 HTTP/1.1\r\nHost: ledgertp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=16252928-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgertp.com/en/download/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx\r\ndate: Wed, 15 Jul 2026 08:34:27 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 79350\r\nx-id-fe: am3-hw-edge-gpig-gc96\r\nlast-modified: Sat, 13 Jun 2026 14:44:51 GMT\r\netag: \"6a2d6ce3-f935f6\"\r\ntraceparent: 00-c554ad7390e4ffa60b9812ed613f7a44-b001ad6c0089e215-01\r\nx-id: am3-hw-edge-gpig-gc96\r\nage: 12835\r\ncache: HIT\r\nx-cached-since: 2026-07-15T05:00:32+00:00\r\ncontent-range: bytes 16252928-16332277/16332278\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":79350,"size_decoded":79803,"mime_type":"video/mp4","magic":"data","md5":"4fa0bcbfb6dffc73c0c35a004c3ddcc6","sha1":"d079dbd7a83a5651ac897009995a5614e309de28","sha256":"f1303a08b1f33f60aeae8643266028e80e938ddfc56f27d15e4e0f9efeb07d51","sha512":"3524601a104d544d688cd83840a4d1a232247f30aff3bc881b80c5fc5c9f8fb3dab6b744ea58c63f0eb16a95c9f83d13ae55a6dfb0b8fca641e8dc17f04aad89","ssdeep":"768:G6e2ml7/3i8mfcQ8ImYkM1aCqF5MJBoNvZv3dnf5vt/2cEhOi22c3TDJA4rrQ4ij:K9i8mfcx61aFFEoNx/dJt/hr32EPruB9","tlshash":"fe73fd8d73d3bd0fca252b74b8d043887b7ac9918b8f4347865a53ceae4539428ed1d9","first_seen":"2026-07-15T08:34:35.526006Z","last_seen":"2026-07-15T08:34:59.892023Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"ledgertp.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgertp.com/assets/download-smoother-connectivity.mp4","fqdn":"ledgertp.com","domain":"ledgertp.com","tld":"com"},"ip":{"addr":"81.28.12.12","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ledgertp.com/en/download/","date":"2026-07-15T08:34:27.481Z","timestamp":1784104467481,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgertp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:22 GMT","end":"Sun, 11 Oct 2026 12:53:21 GMT"},"fingerprint":{"sha1":"51:EC:3F:C4:F3:E6:7E:1B:CB:D6:B0:A8:B3:41:8F:50:E5:9F:AC:E1","sha256":"45:C2:C1:1A:60:27:4A:03:73:74:E4:82:F3:E0:F4:58:27:90:03:5B:AC:63:72:01:8E:65:DB:C4:B9:FD:DD:DA"}}},"request":{"raw":"GET /assets/download-smoother-connectivity.mp4 HTTP/1.1\r\nHost: ledgertp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=819200-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgertp.com/en/download/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx\r\ndate: Wed, 15 Jul 2026 08:34:27 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 15513078\r\nx-id-fe: am3-hw-edge-gpig-gc96\r\nlast-modified: Sat, 13 Jun 2026 14:44:51 GMT\r\netag: \"6a2d6ce3-f935f6\"\r\ntraceparent: 00-d79f590d1dd212fe0e2bc0fc6af5f8da-892ae36232dfbc46-01\r\nx-id: am3-hw-edge-gpig-gc96\r\nage: 12835\r\ncache: HIT\r\nx-cached-since: 2026-07-15T05:00:32+00:00\r\ncontent-range: bytes 819200-16332277/16332278\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":15513078,"size_decoded":15513532,"mime_type":"video/mp4","magic":"data","md5":"3f1eefa484e4a0769a8ca50d31351ddc","sha1":"c10ae96250aed77aba4cc6a13bba754957fd5f98","sha256":"411f10493ed4f1807eb40d573d89646599c142b307d3f2f9b5200a5ca8a19187","sha512":"c1adedb7de89aedb9342f714b3e88d66e4412e3e87470d2aa7ef63d62890ed0d51e379e81fd89caabfb968b8b263a246ac2d03281978d40dc2690c313ca0d119","ssdeep":"24576:tCuETVdBixy8oN/W55EPIAWOvho/WKh//SEBlwdIfCv4C:g1T4xoNW55EdhoxwdP4C","tlshash":"d32533c85ac21c138e215a79552972dab2948cb9414d07430b3f87af7c97de27cb2eb7","first_seen":"2026-07-15T08:34:59.892607Z","last_seen":"2026-07-15T08:34:59.892607Z","times_seen":1,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":460,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"ledgertp.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgertp.com/assets/download-desktop-showcase.png","fqdn":"ledgertp.com","domain":"ledgertp.com","tld":"com"},"ip":{"addr":"81.28.12.12","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgertp.com/en/download/","date":"2026-07-15T08:34:27.019Z","timestamp":1784104467019,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgertp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:22 GMT","end":"Sun, 11 Oct 2026 12:53:21 GMT"},"fingerprint":{"sha1":"51:EC:3F:C4:F3:E6:7E:1B:CB:D6:B0:A8:B3:41:8F:50:E5:9F:AC:E1","sha256":"45:C2:C1:1A:60:27:4A:03:73:74:E4:82:F3:E0:F4:58:27:90:03:5B:AC:63:72:01:8E:65:DB:C4:B9:FD:DD:DA"}}},"request":{"raw":"GET /assets/download-desktop-showcase.png HTTP/1.1\r\nHost: ledgertp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgertp.com/en/download/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 15 Jul 2026 08:34:27 GMT\r\ncontent-type: image/png\r\nx-id-fe: am3-hw-edge-gpig-gc96\r\nlast-modified: Sat, 13 Jun 2026 14:44:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2d6ce5-e2a7e\"\r\nexpires: Fri, 14 Aug 2026 05:00:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ntraceparent: 00-9b85d3716ed40ec369225b82fb7eb71a-fb9dd129d07433e1-01\r\nx-id: am3-hw-edge-gpig-gc96\r\nage: 12835\r\ncache: HIT\r\nx-cached-since: 2026-07-15T05:00:32+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":928382,"size_decoded":916649,"mime_type":"image/png","magic":"PNG image data, 1918 x 1294, 8-bit/color RGBA, non-interlaced","md5":"d7558cecfa58444c3d60f29e89a55fc4","sha1":"f74cdf9e6957b93e1251fabbd2601aaec9cd859d","sha256":"6c916abb0c46aed1e269bf0d05d79e8bfb43fffa57d2996b86a298ad414448bc","sha512":"aff0cd63105565dcd7a3a94ab173a242b70985ab7c6fed4aece7ca0790b04f474f54397b7f8b7d39049f577d9885af7271a2784eca23d3b64b9c43c476fce98b","ssdeep":"24576:ByVq36gt59XcZIk1yD4tAEKvEvKbAP7aP7:ByMXsZLyD41KvC7u7","tlshash":"2f15237b8f399670cb6d36039a655de6b50943260a29e70f8775d224eb8fb00036fe46","first_seen":"2026-07-15T08:34:35.539195Z","last_seen":"2026-07-15T08:34:59.893607Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"ledgertp.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgertp.com/assets/download-icons/ios.png","fqdn":"ledgertp.com","domain":"ledgertp.com","tld":"com"},"ip":{"addr":"81.28.12.12","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgertp.com/en/download/","date":"2026-07-15T08:34:27.026Z","timestamp":1784104467026,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgertp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:22 GMT","end":"Sun, 11 Oct 2026 12:53:21 GMT"},"fingerprint":{"sha1":"51:EC:3F:C4:F3:E6:7E:1B:CB:D6:B0:A8:B3:41:8F:50:E5:9F:AC:E1","sha256":"45:C2:C1:1A:60:27:4A:03:73:74:E4:82:F3:E0:F4:58:27:90:03:5B:AC:63:72:01:8E:65:DB:C4:B9:FD:DD:DA"}}},"request":{"raw":"GET /assets/download-icons/ios.png HTTP/1.1\r\nHost: ledgertp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgertp.com/en/download/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 15 Jul 2026 08:34:27 GMT\r\ncontent-type: image/png\r\nx-id-fe: am3-hw-edge-gpig-gc96\r\nlast-modified: Sat, 13 Jun 2026 14:44:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2d6ceb-11fd\"\r\nexpires: Fri, 14 Aug 2026 05:00:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ntraceparent: 00-96273d0e5a6afcd14a1f1940d2838538-aa69a0a4fb887fa5-01\r\nx-id: am3-hw-edge-gpig-gc96\r\nage: 12835\r\ncache: HIT\r\nx-cached-since: 2026-07-15T05:00:32+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":4605,"size_decoded":4640,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 221x220, components 3","md5":"886f32f566a88d7cae1733022882c750","sha1":"912ed2ecbb7b30a02524cf0161993effe0abcd00","sha256":"44dd659d28191e81b8e9606164ce40c4a3b9e91eae5a2379bcd8a58debf1df1d","sha512":"01ac8e84a03c308b015e2b50adcdf7d9780314eca4ecb372e045524f0423eae789949b4a6f63c99d4b21f9d5b0ebfe01a331554c9a869fab25662374dad8ce20","ssdeep":"96:A8Wz7dajWHaCL9tcr7gIGwWCfeh/YI56CqESYCsEv1D:A8a7FHaYcr7Lt8tYeLyv5","tlshash":"01915e1b6f7bafc9dc93087b1f0c8b74ded2d6184866076b10b50f56270958caef4988","first_seen":"2026-07-15T08:34:35.530717Z","last_seen":"2026-07-15T08:34:59.894294Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"ledgertp.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgertp.com/assets/download-icons/android.png","fqdn":"ledgertp.com","domain":"ledgertp.com","tld":"com"},"ip":{"addr":"81.28.12.12","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgertp.com/en/download/","date":"2026-07-15T08:34:27.027Z","timestamp":1784104467027,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgertp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:22 GMT","end":"Sun, 11 Oct 2026 12:53:21 GMT"},"fingerprint":{"sha1":"51:EC:3F:C4:F3:E6:7E:1B:CB:D6:B0:A8:B3:41:8F:50:E5:9F:AC:E1","sha256":"45:C2:C1:1A:60:27:4A:03:73:74:E4:82:F3:E0:F4:58:27:90:03:5B:AC:63:72:01:8E:65:DB:C4:B9:FD:DD:DA"}}},"request":{"raw":"GET /assets/download-icons/android.png HTTP/1.1\r\nHost: ledgertp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgertp.com/en/download/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 15 Jul 2026 08:34:27 GMT\r\ncontent-type: image/png\r\nx-id-fe: am3-hw-edge-gpig-gc96\r\nlast-modified: Sat, 13 Jun 2026 14:44:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2d6ceb-a1c5\"\r\nexpires: Fri, 14 Aug 2026 05:00:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ntraceparent: 00-3133f959a80c743005a5b16995698fec-8dce86b3d1388001-01\r\nx-id: am3-hw-edge-gpig-gc96\r\nage: 12835\r\ncache: HIT\r\nx-cached-since: 2026-07-15T05:00:32+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41413,"size_decoded":41946,"mime_type":"image/png","magic":"PNG image data, 206 x 228, 8-bit/color RGBA, non-interlaced","md5":"cc4dacd1eb9a22bedc4b57b871108cca","sha1":"e1ca82bf15d425ea65ad98c8357101270c0edcef","sha256":"201fb24da3cb44d1451c3851669493ee5486ab621158f3c22c5bff5b4389af97","sha512":"9d44a7d4f56bbb97be40f91169d77b3dc9bef643e1c3cf44b918cf2b3fcb42ec9648fe2c7ee0519b0f5f25219abd5eccbc131cca0b25c553fb06734009901a23","ssdeep":"768:9cIv/WXyqHLASadFSEtzcX80i0lOAGLMMZhrMNw8M4:9rGXzKcfMILIMQVMNw8M4","tlshash":"c703f1b53d8ffee5a3bdd53056e99399a103f08017a1d55914a3c768984b318fbc34b8","first_seen":"2026-07-15T08:34:35.523827Z","last_seen":"2026-07-15T08:34:59.894967Z","times_seen":2,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"ledgertp.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgertp.com/assets/download-buy-strategy.png","fqdn":"ledgertp.com","domain":"ledgertp.com","tld":"com"},"ip":{"addr":"81.28.12.12","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgertp.com/en/download/","date":"2026-07-15T08:34:27.030Z","timestamp":1784104467030,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgertp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:22 GMT","end":"Sun, 11 Oct 2026 12:53:21 GMT"},"fingerprint":{"sha1":"51:EC:3F:C4:F3:E6:7E:1B:CB:D6:B0:A8:B3:41:8F:50:E5:9F:AC:E1","sha256":"45:C2:C1:1A:60:27:4A:03:73:74:E4:82:F3:E0:F4:58:27:90:03:5B:AC:63:72:01:8E:65:DB:C4:B9:FD:DD:DA"}}},"request":{"raw":"GET /assets/download-buy-strategy.png HTTP/1.1\r\nHost: ledgertp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgertp.com/en/download/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 15 Jul 2026 08:34:27 GMT\r\ncontent-type: image/png\r\nx-id-fe: am3-hw-edge-gpig-gc96\r\nlast-modified: Sat, 13 Jun 2026 14:45:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2d6cee-c3fc8\"\r\nexpires: Fri, 14 Aug 2026 05:00:32 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ntraceparent: 00-52235f655f8058a5fd489c89d731bb19-daf0e4004c34c458-01\r\nx-id: am3-hw-edge-gpig-gc96\r\nage: 12835\r\ncache: HIT\r\nx-cached-since: 2026-07-15T05:00:32+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":802760,"size_decoded":785661,"mime_type":"image/png","magic":"PNG image data, 1772 x 1300, 8-bit/color RGBA, non-interlaced","md5":"e6c7cd7be61fb533032a01f34209f380","sha1":"8aacf4d4b52e25abf4d6c9649ef9f9b5d30d2dae","sha256":"9e9f3f4bdcf53b315b29228acaf0fef7d16730cf28e4a4253e79efbe8207a58e","sha512":"023547eccade029b66a8fc0f715b541784d9758c827df1e0eb3cda13c882836d306aedd9ffc6678f008c70c6697d75e373010f40da54410ed00962b6cdeffe6b","ssdeep":"12288:70mFoNTvd0umRQxaIkPdPTo9tNPEgZoJ4J4idGvjchdgyv5KXzKRgM6:7HWd0uy4jmTc1tWiduILzvsmOH","tlshash":"7f051216d96476bf66015000235778d59b742e7322528f1e6bb2e03d2a1bfe4feb3d18","first_seen":"2026-07-15T08:34:35.534741Z","last_seen":"2026-07-15T08:34:59.895656Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"ledgertp.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"ledgertp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledgertp.com/en/download/","date":"2026-07-15T08:34:27.344Z","timestamp":1784104467344,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ledgertp.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 09 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 542745\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-15T11:20:11.048846Z","times_seen":235244,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":32,"send":0,"wait":18,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}