{"report_id":"f894bc03-9621-4dd6-9780-4325bf5bb694","version":0,"status":"done","tags":[],"date":"2026-10-15T04:05:18Z","url":{"schema":"http","addr":"ledger.net.cn/","fqdn":"ledger.net.cn","domain":"ledger.net.cn","tld":"net.cn"},"ip":{"addr":"211.149.167.228","port":0,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"final":{"url":{"schema":"https","addr":"ledger.net.cn/","fqdn":"ledger.net.cn","domain":"ledger.net.cn","tld":"net.cn"},"title":"Ledger | Secure Hardware Wallet for Crypto \u0026 NFT Assets","dom":{"size":36767,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (715)","md5":"bfe12cb05ee4d13dd09f3683bc9830ea","sha1":"be718d1c56f763a24e340dda0bceb3807084418c","sha256":"bcea628a1ea01270b9661989b4cb34e95336fd428e2161b53612cf4697c25024","sha512":"8fb6468fe30b942b21a88b64f233fc762da63697ca172d500debc753de444b7cf27ca241b2f81145bf4b38bd27c869411ac798af3a416599c552f38512a0640d","ssdeep":"384:w2xKjOPOK6zE6ia6TOnHNSmjlTPxzGjMVObKCO3kQVOCUODb3gPOe2SuwF2TgPO+:O1LkCwBxRTn1eoppui3H","tlshash":"34f2b811629c6e7e1203079f6066b3f9707f7cf0d2254569b67b0228e2c2cdead375a2","dom_hash":"domhash7ac10afe88e086b85bee82c25db3c7cc","first_seen":"2026-10-15T04:02:12.293006Z","last_seen":"2026-10-15T04:05:28.038073Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ledger.net.cn/","fqdn":"ledger.net.cn","domain":"ledger.net.cn","tld":"net.cn"},"ip":{"addr":"211.149.167.228","port":0,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-19T04:05:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"ledger.net.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"ledger.net.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ledger.net.cn","ip":{"addr":"211.149.167.228","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"domain_registered":"2026-03-19","domain_rank":0,"first_seen":"2026-09-27T16:32:52.153026Z","last_seen":"2026-10-15T04:02:10.304197Z","alert_count":40,"request_count":20,"received_data":3225614,"sent_data":11755,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ledger.net.cn/public/static/common/js/ey_global.js?v=v1.8.1","fqdn":"ledger.net.cn","domain":"ledger.net.cn","tld":"net.cn"},"ip":{"addr":"211.149.167.228","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c6810f2dde5a114de90b04901170515","sha1":"0a884be1b903ec30418e55d3ed6b24e64f59785c","sha256":"5dd48cc87c558b68f1995e84ad4da5b21b6425596ab94891eca3c9de33a67c34","sha512":"c5f68a64c4e099a56e06ed0c8d17849cdffd489f10a9d41befceab2af077c43ecde7a4fdcaaf7489e4910192b7e64bf68b7b30f2ebaca0cf3f6e58d2aa72ae60","ssdeep":"192:NbAAMcI1ytein2wEAeu7YVELULGWy8c010SLEQA+rrOzt7hwYP:NbgcZteinLEAeu7YVaKreztlwYP","tlshash":"1842ed3158204e2401f1f37cd65e1824eca620266685c3afbd9ecd8e1f61f9e21edb9d","size":12871,"data":"","first_seen":"2025-10-11T22:22:06.065369Z","last_seen":"2026-10-15T04:05:28.062354Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledger.net.cn/","fqdn":"ledger.net.cn","domain":"ledger.net.cn","tld":"net.cn"},"ip":{"addr":"211.149.167.228","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"857729ee4ea4fcaba36f81b9cb5ba76b","sha1":"ff5fafdd3f6edd5147c83fe6618122b97bea6731","sha256":"a435330e1bdef48251caf222b2f7bd92bb65472aff88b0aed57656dc4c80b80a","sha512":"d4a5a3e4404a25f151b318b458ddeaac22f30b0c80379c82fe31d5eaa28701f4112f94eceab79499dd676cab2f2949c8cd672bc32cf25deebf96259b9b5ffa07","ssdeep":"","tlshash":"2ff028f4e7bc35fb47273084189a26ea652c91f1f482acab7c4c81d126c1a021ef5a93","size":623,"data":"","first_seen":"2026-09-27T16:32:58.02139Z","last_seen":"2026-10-15T04:05:28.074458Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledger.net.cn/","fqdn":"ledger.net.cn","domain":"ledger.net.cn","tld":"net.cn"},"ip":{"addr":"211.149.167.228","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"610efff455af76a6aca4e229ffaa20a2","sha1":"4c8c1d24cc50b8395f7072fd0a1925e48119b0dd","sha256":"1c6f5df7011bdc4d1d4df9b7d7e88b5fd84c3ab6000e588bdbe10f5502d5425b","sha512":"f5177b049f11955321c6f370eff85d7fac10ec52eb26d42b95e7f65343b09ea3490b18c4932e75e738d53d8215a975a4f73703b7f17e5d07f3a93fafba3764a1","ssdeep":"","tlshash":"c58000008008203a0b0ce028aa8a2a000f00b8202200a28b0808b288808a38a00ce0a0","size":29,"data":"","first_seen":"2024-10-26T08:29:06.001867Z","last_seen":"2026-10-15T04:05:28.078602Z","times_seen":231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledger.net.cn/public/static/common/js/ey_footer.js?v=v1.8.1.0","fqdn":"ledger.net.cn","domain":"ledger.net.cn","tld":"net.cn"},"ip":{"addr":"211.149.167.228","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8452c550d99271a0b1944b2b71720a8","sha1":"e7ca441bc7e82a102d93cbd74af507cf534d1b14","sha256":"a69c88fe4e1334543a364a0aa2f536bce2cec3ebcff32f54e228ce9acc7cd518","sha512":"e9dbd5ad7b54524bcc43b8b6d8ceba8bb2314ecf3a26d24e8aa4bb01c692b672505244b08466499b4f253e9befac0766a44cb9475b8b8e2882394453f7d6c6f9","ssdeep":"768:G9dCoF6ebbV9Iy3neUoUF8M5j7GM5jRM5jb+Vz/f2U0t02+QnBDqC9IZemykv6eK:G9dCoF6ebbV9Iy3neUoUF8M5j6M5jRM7","tlshash":"832382b92989057308bff7b58aea4716fc362027ab49da14bc1c92501f79d50a07cfd7","size":46375,"data":"","first_seen":"2026-02-12T23:35:52.688049Z","last_seen":"2026-10-15T04:05:28.051096Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ledger.net.cn/template/pc/static2/picture/hero-wallet.png","fqdn":"ledger.net.cn","domain":"ledger.net.cn","tld":"net.cn"},"ip":{"addr":"211.149.167.228","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger.net.cn/","date":"2026-10-15T04:04:38.318Z","timestamp":1792037078318,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.net.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 17 Aug 2026 12:00:00 GMT","end":"Sun, 15 Nov 2026 11:59:59 GMT"},"fingerprint":{"sha1":"73:B9:FB:44:65:96:C1:5D:90:FC:4A:8D:45:5E:B5:4F:97:11:78:98","sha256":"55:3C:4E:F9:9A:4D:7A:39:E0:2E:F9:68:34:ED:10:8B:61:FB:22:BB:05:A1:50:88:57:3C:48:3C:45:81:D6:D7"}}},"request":{"raw":"GET /template/pc/static2/picture/hero-wallet.png HTTP/1.1\r\nHost: ledger.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledger.net.cn/\r\nCookie: home_lang=cn; PHPSESSID=l36oavlgge3idkbjs7angsi1m7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"home_lang","value":"cn"},{"name":"PHPSESSID","value":"l36oavlgge3idkbjs7angsi1m7"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 03:56:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 16 Jul 2026 06:55:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a58804b-18054a\"\r\nexpires: Sat, 14 Nov 2026 03:56:32 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1574218,"size_decoded":1573686,"mime_type":"image/png","magic":"PNG image data, 1152 x 1140, 8-bit/color RGBA, non-interlaced","md5":"2a8701aca09c1d53c6c269df4e61ac4c","sha1":"67352c53aadd69dfbe255f71696cb6b17b1010d1","sha256":"0d90e15fc7f087e30343a1b7594b0abcc3f477c742dc949f74d3130ae3138a43","sha512":"4470a4cbe8be4cc7c33d9e875a3f5fd44aaefd11501fa85658707d4ebe079cc08d0af8d4993fa07d5d4b1e05db913b576063a58563fedf0704e08fbb752d1fc6","ssdeep":"24576:DXJieJ+nvjmsYeq9SSd44ePuW9pgABCocN1tc1W:DZNJ+vjm2q9SS6xv9CABQ6W","tlshash":"7025332f902cfc13180bc537661558eca2110c58fe42bed98ebf5d7165b6bcc8999ae3","first_seen":"2026-06-24T22:20:40.085211Z","last_seen":"2026-10-15T04:05:28.040924Z","times_seen":10,"resource_available":false,"data":null}},"time_used":730,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":730,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"ledger.net.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"ledger.net.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.net.cn/template/pc/static2/picture/starter-btc-flat.png","fqdn":"ledger.net.cn","domain":"ledger.net.cn","tld":"net.cn"},"ip":{"addr":"211.149.167.228","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger.net.cn/","date":"2026-10-15T04:04:38.320Z","timestamp":1792037078320,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.net.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 17 Aug 2026 12:00:00 GMT","end":"Sun, 15 Nov 2026 11:59:59 GMT"},"fingerprint":{"sha1":"73:B9:FB:44:65:96:C1:5D:90:FC:4A:8D:45:5E:B5:4F:97:11:78:98","sha256":"55:3C:4E:F9:9A:4D:7A:39:E0:2E:F9:68:34:ED:10:8B:61:FB:22:BB:05:A1:50:88:57:3C:48:3C:45:81:D6:D7"}}},"request":{"raw":"GET /template/pc/static2/picture/starter-btc-flat.png HTTP/1.1\r\nHost: ledger.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledger.net.cn/\r\nCookie: home_lang=cn; PHPSESSID=l36oavlgge3idkbjs7angsi1m7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"home_lang","value":"cn"},{"name":"PHPSESSID","value":"l36oavlgge3idkbjs7angsi1m7"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 03:56:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 16 Jul 2026 06:55:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a588044-d34b3\"\r\nexpires: Sat, 14 Nov 2026 03:56:32 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":865459,"size_decoded":865775,"mime_type":"image/png","magic":"PNG image data, 1400 x 544, 8-bit/color RGBA, non-interlaced","md5":"53d97c6e1d7c04f3509b280b61afd7ab","sha1":"28d855536cdce0170500b4323eea43a241bac30a","sha256":"8b9b0b527be3c1f58ec9bb02bb931a0b709b3ccb36b71074eb5f73d1567dda3c","sha512":"b1f6b1745f0e7a6250e0b7fc2efad23d97ab330baa578d222801c70a78aacb55ede1cf04be1fec52fdf27a2ec18cdee995be4f21b378c2f6fa74c6a776278241","ssdeep":"24576:mcgthlRPhlNQqQRZ85Ub6pPRu7apFnPpxkss/+e:m1HlRPPNQq23b6p5u72FnRSssV","tlshash":"45052369fcf261d2c46aee73b92d1138bf77245a87d4007c323999a26f04ab11fc3994","first_seen":"2026-06-24T22:20:40.069691Z","last_seen":"2026-10-15T04:05:28.043574Z","times_seen":10,"resource_available":false,"data":null}},"time_used":971,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":971,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"ledger.net.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"ledger.net.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.net.cn/template/pc/static2/picture/product-classic.webp","fqdn":"ledger.net.cn","domain":"ledger.net.cn","tld":"net.cn"},"ip":{"addr":"211.149.167.228","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger.net.cn/","date":"2026-10-15T04:04:38.327Z","timestamp":1792037078327,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.net.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 17 Aug 2026 12:00:00 GMT","end":"Sun, 15 Nov 2026 11:59:59 GMT"},"fingerprint":{"sha1":"73:B9:FB:44:65:96:C1:5D:90:FC:4A:8D:45:5E:B5:4F:97:11:78:98","sha256":"55:3C:4E:F9:9A:4D:7A:39:E0:2E:F9:68:34:ED:10:8B:61:FB:22:BB:05:A1:50:88:57:3C:48:3C:45:81:D6:D7"}}},"request":{"raw":"GET /template/pc/static2/picture/product-classic.webp HTTP/1.1\r\nHost: ledger.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledger.net.cn/\r\nCookie: home_lang=cn; PHPSESSID=l36oavlgge3idkbjs7angsi1m7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"home_lang","value":"cn"},{"name":"PHPSESSID","value":"l36oavlgge3idkbjs7angsi1m7"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 03:56:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12256\r\nlast-modified: Thu, 16 Jul 2026 06:54:56 GMT\r\netag: \"6a588040-2fe0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12256,"size_decoded":12528,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e39fd3b733c40012a9c69eb2634bef73","sha1":"4f2a973d04b2ab220c1659a1e21b0a283e9ac45b","sha256":"1fd0a903a0ab4d2ca78a995c5253e61297644f03f95401a7d894272fd63fcb87","sha512":"fc88d41bbeb6f5306b6906767a2577ec5ac3ef0b177b1a57f9aa270aad579418b03e896fe55e4fdd333fdfaeabd6419bd30136d07a5d1cbcd82ddd650d7cd1ba","ssdeep":"192:fwTElDq1kgc3INVXu0gC0Z9HBbkPjvUMCkzwL4iYG+J8pbXi5IYVFj9Wswj:fwTElO1kgLXvgCihbkrvUQzwMiYB8pTU","tlshash":"4e42c02153be2b42dd08a9791b4ab176a934ea65798072d393fc43009ba3f7d50fa941","first_seen":"2024-08-02T10:43:53Z","last_seen":"2026-10-15T04:05:28.045449Z","times_seen":360,"resource_available":false,"data":null}},"time_used":1452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":963,"receive":489,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"ledger.net.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"ledger.net.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.net.cn/template/pc/static2/fonts/ucc73fwrk3iltehus_nvmrmxcp50sjia1zl7.woff2","fqdn":"ledger.net.cn","domain":"ledger.net.cn","tld":"net.cn"},"ip":{"addr":"211.149.167.228","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledger.net.cn/","date":"2026-10-15T04:04:38.879Z","timestamp":1792037078879,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.net.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 17 Aug 2026 12:00:00 GMT","end":"Sun, 15 Nov 2026 11:59:59 GMT"},"fingerprint":{"sha1":"73:B9:FB:44:65:96:C1:5D:90:FC:4A:8D:45:5E:B5:4F:97:11:78:98","sha256":"55:3C:4E:F9:9A:4D:7A:39:E0:2E:F9:68:34:ED:10:8B:61:FB:22:BB:05:A1:50:88:57:3C:48:3C:45:81:D6:D7"}}},"request":{"raw":"GET /template/pc/static2/fonts/ucc73fwrk3iltehus_nvmrmxcp50sjia1zl7.woff2 HTTP/1.1\r\nHost: ledger.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledger.net.cn/template/pc/static2/css/d121b09081b243eab52c09067d167e80.css\r\nCookie: home_lang=cn; PHPSESSID=l36oavlgge3idkbjs7angsi1m7\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"home_lang","value":"cn"},{"name":"PHPSESSID","value":"l36oavlgge3idkbjs7angsi1m7"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 03:56:32 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48256\r\nlast-modified: Thu, 16 Jul 2026 06:54:55 GMT\r\netag: \"6a58803f-bc80\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48256,"size_decoded":48528,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-10-15T06:25:56.954025Z","times_seen":34416,"resource_available":false,"data":null}},"time_used":896,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":658,"receive":238,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"ledger.net.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"ledger.net.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.net.cn/template/pc/static2/fonts/ucc73fwrk3iltehus_nvmrmxcp50sjia1zl7.woff2","fqdn":"ledger.net.cn","domain":"ledger.net.cn","tld":"net.cn"},"ip":{"addr":"211.149.167.228","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledger.net.cn/","date":"2026-10-15T04:04:38.880Z","timestamp":1792037078880,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.net.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 17 Aug 2026 12:00:00 GMT","end":"Sun, 15 Nov 2026 11:59:59 GMT"},"fingerprint":{"sha1":"73:B9:FB:44:65:96:C1:5D:90:FC:4A:8D:45:5E:B5:4F:97:11:78:98","sha256":"55:3C:4E:F9:9A:4D:7A:39:E0:2E:F9:68:34:ED:10:8B:61:FB:22:BB:05:A1:50:88:57:3C:48:3C:45:81:D6:D7"}}},"request":{"raw":"GET /template/pc/static2/fonts/ucc73fwrk3iltehus_nvmrmxcp50sjia1zl7.woff2 HTTP/1.1\r\nHost: ledger.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledger.net.cn/template/pc/static2/css/d121b09081b243eab52c09067d167e80.css\r\nCookie: home_lang=cn; PHPSESSID=l36oavlgge3idkbjs7angsi1m7\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"home_lang","value":"cn"},{"name":"PHPSESSID","value":"l36oavlgge3idkbjs7angsi1m7"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 03:56:32 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48256\r\nlast-modified: Thu, 16 Jul 2026 06:54:55 GMT\r\netag: \"6a58803f-bc80\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48256,"size_decoded":48528,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-10-15T06:25:56.954025Z","times_seen":34416,"resource_available":false,"data":null}},"time_used":897,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":657,"receive":240,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"ledger.net.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"ledger.net.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.net.cn/template/pc/static2/css/d121b09081b243eab52c09067d167e80.css","fqdn":"ledger.net.cn","domain":"ledger.net.cn","tld":"net.cn"},"ip":{"addr":"211.149.167.228","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledger.net.cn/","date":"2026-10-15T04:04:38.300Z","timestamp":1792037078300,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.net.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 17 Aug 2026 12:00:00 GMT","end":"Sun, 15 Nov 2026 11:59:59 GMT"},"fingerprint":{"sha1":"73:B9:FB:44:65:96:C1:5D:90:FC:4A:8D:45:5E:B5:4F:97:11:78:98","sha256":"55:3C:4E:F9:9A:4D:7A:39:E0:2E:F9:68:34:ED:10:8B:61:FB:22:BB:05:A1:50:88:57:3C:48:3C:45:81:D6:D7"}}},"request":{"raw":"GET /template/pc/static2/css/d121b09081b243eab52c09067d167e80.css HTTP/1.1\r\nHost: ledger.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledger.net.cn/\r\nCookie: home_lang=cn; PHPSESSID=l36oavlgge3idkbjs7angsi1m7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"home_lang","value":"cn"},{"name":"PHPSESSID","value":"l36oavlgge3idkbjs7angsi1m7"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 03:56:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jul 2026 06:55:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a58806a-2c4c\"\r\nexpires: Thu, 15 Oct 2026 15:56:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11340,"size_decoded":1096,"mime_type":"text/css","magic":"ASCII text","md5":"42f53f35c0e7368b5f45647df46db20f","sha1":"ce7534378032b2fb52439fdaf31b2976ea99590e","sha256":"c69e975bc50b11a8f045e7fcaba00cf34a5e2924c96312f4112effa600f70a4e","sha512":"9aeb3101a320914e0b0db02e575d55a27e672c53753862f8e2b15846d9df0a72f4f0dc17ff6b4c5b12574dfb61d6a3f10b3fe1d0f88c93968a5768dee1912900","ssdeep":"192:9VN05u34iJDZVObKu3/RJ8gVr+nu3i4JlHVE9Au3R/JGGVxIFu3kuJHG:nvbI99fuVLa","tlshash":"9f327680852b2104e6871dd2b3ca3f325d9d6146b045d63e6ffe19995cefc62136170e","first_seen":"2026-09-13T12:33:38.816762Z","last_seen":"2026-10-15T04:05:28.049763Z","times_seen":5,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"ledger.net.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"ledger.net.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.net.cn/template/pc/static2/css/styles.css","fqdn":"ledger.net.cn","domain":"ledger.net.cn","tld":"net.cn"},"ip":{"addr":"211.149.167.228","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledger.net.cn/","date":"2026-10-15T04:04:38.302Z","timestamp":1792037078302,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.net.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 17 Aug 2026 12:00:00 GMT","end":"Sun, 15 Nov 2026 11:59:59 GMT"},"fingerprint":{"sha1":"73:B9:FB:44:65:96:C1:5D:90:FC:4A:8D:45:5E:B5:4F:97:11:78:98","sha256":"55:3C:4E:F9:9A:4D:7A:39:E0:2E:F9:68:34:ED:10:8B:61:FB:22:BB:05:A1:50:88:57:3C:48:3C:45:81:D6:D7"}}},"request":{"raw":"GET /template/pc/static2/css/styles.css HTTP/1.1\r\nHost: ledger.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledger.net.cn/\r\nCookie: home_lang=cn; PHPSESSID=l36oavlgge3idkbjs7angsi1m7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"home_lang","value":"cn"},{"name":"PHPSESSID","value":"l36oavlgge3idkbjs7angsi1m7"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 03:56:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jul 2026 06:55:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a58806c-b9d0\"\r\nexpires: Thu, 15 Oct 2026 15:56:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47568,"size_decoded":8558,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"de161a32708409449cb5d5989458e98f","sha1":"00a40b4012bedbd0da80e044834a8ac1f58f2d72","sha256":"d1bc3719cd4faa93a39eadc9a878bff5b83265659b10f7ae06808dd2ca9f18f0","sha512":"75c75b1e68fddf02db2d8cce8b6f8982ee5bb60ae3d3e3dff8d958ddd0cfce68a7896096789b91784f050119d9fc4a33e20df3310384a948d12fa635c12e8e54","ssdeep":"768:sGCQCF0VXokSgK5mds58RGvrfjYSiEKC7jsf:sGCdF0VrSgKUds52GvrfFhKC74f","tlshash":"69235597a7b05e04342f8499a886eb88f36da013d10ec97d5bf5205cfd9d0ca95b6e0b","first_seen":"2026-06-24T22:20:40.08756Z","last_seen":"2026-10-15T04:05:28.050384Z","times_seen":16,"resource_available":true,"data":null}},"time_used":503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":503,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"ledger.net.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"ledger.net.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.net.cn/public/static/common/js/ey_footer.js?v=v1.8.1.0","fqdn":"ledger.net.cn","domain":"ledger.net.cn","tld":"net.cn"},"ip":{"addr":"211.149.167.228","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledger.net.cn/","date":"2026-10-15T04:04:38.311Z","timestamp":1792037078311,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.net.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 17 Aug 2026 12:00:00 GMT","end":"Sun, 15 Nov 2026 11:59:59 GMT"},"fingerprint":{"sha1":"73:B9:FB:44:65:96:C1:5D:90:FC:4A:8D:45:5E:B5:4F:97:11:78:98","sha256":"55:3C:4E:F9:9A:4D:7A:39:E0:2E:F9:68:34:ED:10:8B:61:FB:22:BB:05:A1:50:88:57:3C:48:3C:45:81:D6:D7"}}},"request":{"raw":"GET /public/static/common/js/ey_footer.js?v=v1.8.1.0 HTTP/1.1\r\nHost: ledger.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledger.net.cn/\r\nCookie: home_lang=cn; PHPSESSID=l36oavlgge3idkbjs7angsi1m7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"home_lang","value":"cn"},{"name":"PHPSESSID","value":"l36oavlgge3idkbjs7angsi1m7"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 03:56:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 10 Dec 2025 01:54:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6938d2ef-b56b\"\r\nexpires: Thu, 15 Oct 2026 15:56:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46443,"size_decoded":9046,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (2536), with CRLF line terminators","md5":"d8452c550d99271a0b1944b2b71720a8","sha1":"e7ca441bc7e82a102d93cbd74af507cf534d1b14","sha256":"a69c88fe4e1334543a364a0aa2f536bce2cec3ebcff32f54e228ce9acc7cd518","sha512":"e9dbd5ad7b54524bcc43b8b6d8ceba8bb2314ecf3a26d24e8aa4bb01c692b672505244b08466499b4f253e9befac0766a44cb9475b8b8e2882394453f7d6c6f9","ssdeep":"768:G9dCoF6ebbV9Iy3neUoUF8M5j7GM5jRM5jb+Vz/f2U0t02+QnBDqC9IZemykv6eK:G9dCoF6ebbV9Iy3neUoUF8M5j6M5jRM7","tlshash":"832382b92989057308bff7b58aea4716fc362027ab49da14bc1c92501f79d50a07cfd7","first_seen":"2026-02-12T23:35:52.688049Z","last_seen":"2026-10-15T04:05:28.051096Z","times_seen":82,"resource_available":true,"data":null}},"time_used":497,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":497,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"ledger.net.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"ledger.net.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.net.cn/template/pc/static2/picture/product-stax.webp","fqdn":"ledger.net.cn","domain":"ledger.net.cn","tld":"net.cn"},"ip":{"addr":"211.149.167.228","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger.net.cn/","date":"2026-10-15T04:04:38.321Z","timestamp":1792037078321,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.net.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 17 Aug 2026 12:00:00 GMT","end":"Sun, 15 Nov 2026 11:59:59 GMT"},"fingerprint":{"sha1":"73:B9:FB:44:65:96:C1:5D:90:FC:4A:8D:45:5E:B5:4F:97:11:78:98","sha256":"55:3C:4E:F9:9A:4D:7A:39:E0:2E:F9:68:34:ED:10:8B:61:FB:22:BB:05:A1:50:88:57:3C:48:3C:45:81:D6:D7"}}},"request":{"raw":"GET /template/pc/static2/picture/product-stax.webp HTTP/1.1\r\nHost: ledger.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledger.net.cn/\r\nCookie: home_lang=cn; PHPSESSID=l36oavlgge3idkbjs7angsi1m7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"home_lang","value":"cn"},{"name":"PHPSESSID","value":"l36oavlgge3idkbjs7angsi1m7"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 03:56:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 46612\r\nlast-modified: Thu, 16 Jul 2026 06:54:55 GMT\r\netag: \"6a58803f-b614\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46612,"size_decoded":46884,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4bd31bed6ee462202a71aac03ff6545f","sha1":"215db10d5e998892a2062949c0a0df27a3c564f5","sha256":"e0807ebec74366b946faee89826ae901517545f86aae8d080d52743684dab4a3","sha512":"62a17b5dd88c1176964029901dfdb02575d6f3cc25788f36bb8464e1308013cecaebb9be7ad0f48bba46b484426896a92cb9db024d8ec3110cbda16509cb236e","ssdeep":"768:VMXakcfYs7zfwUx/e5ih4BJOpwFTPPX3a09YMZlZH9Pz3SVQkx:VMXajT7zwUx/eIuQETXXx9YoHBC2kx","tlshash":"4423f1df66274643fbb3a3b477ce5d8243ab5aa81031bb70d2a711045b9391a06c73b7","first_seen":"2026-06-01T19:22:52.653467Z","last_seen":"2026-10-15T04:05:28.053746Z","times_seen":19,"resource_available":false,"data":null}},"time_used":1213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":969,"receive":244,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"ledger.net.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"ledger.net.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.net.cn/template/pc/static2/picture/wallet-app-hero.webp","fqdn":"ledger.net.cn","domain":"ledger.net.cn","tld":"net.cn"},"ip":{"addr":"211.149.167.228","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger.net.cn/","date":"2026-10-15T04:04:38.328Z","timestamp":1792037078328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.net.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 17 Aug 2026 12:00:00 GMT","end":"Sun, 15 Nov 2026 11:59:59 GMT"},"fingerprint":{"sha1":"73:B9:FB:44:65:96:C1:5D:90:FC:4A:8D:45:5E:B5:4F:97:11:78:98","sha256":"55:3C:4E:F9:9A:4D:7A:39:E0:2E:F9:68:34:ED:10:8B:61:FB:22:BB:05:A1:50:88:57:3C:48:3C:45:81:D6:D7"}}},"request":{"raw":"GET /template/pc/static2/picture/wallet-app-hero.webp HTTP/1.1\r\nHost: ledger.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledger.net.cn/\r\nCookie: home_lang=cn; PHPSESSID=l36oavlgge3idkbjs7angsi1m7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"home_lang","value":"cn"},{"name":"PHPSESSID","value":"l36oavlgge3idkbjs7angsi1m7"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 03:56:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 154702\r\nlast-modified: Thu, 16 Jul 2026 06:54:59 GMT\r\netag: \"6a588043-25c4e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":154702,"size_decoded":154976,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"45a8cac301a013e50d19680078d59ad7","sha1":"e8e4473505f6294407d98e447a58d5d97c4f2dbe","sha256":"03866d9aad95a8e62b5e301058e75fae4e7264ffa140a4ea65b647e99811d3ac","sha512":"ab6eb703c3a0b7547f5c6c6726608fc81cbd3fc455dd7edcbaadbee970564655b853bd541dc84dadbcab14038f9d43e1c511fcc050ddd596ddf78e2b9b379705","ssdeep":"3072:IJf0esmH5ImXOEDumVL6rCxzYDjSdVyrpHW6AWtZ+uLVH2fVOtlNAwNYAk98:IJ8bmamJqwFajL91tZh129SNAwNY98","tlshash":"64e31355cc273e2cae8a79fde4fb2bcfc5051ed44b2a503490415b4e623c6156d8bacb","first_seen":"2026-06-24T22:20:40.094158Z","last_seen":"2026-10-15T04:05:28.054817Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":963,"receive":1230,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"ledger.net.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"ledger.net.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.net.cn/template/pc/static2/fonts/ucc73fwrk3iltehus_nvmrmxcp50sjia1zl7.woff2","fqdn":"ledger.net.cn","domain":"ledger.net.cn","tld":"net.cn"},"ip":{"addr":"211.149.167.228","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledger.net.cn/","date":"2026-10-15T04:04:38.882Z","timestamp":1792037078882,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.net.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 17 Aug 2026 12:00:00 GMT","end":"Sun, 15 Nov 2026 11:59:59 GMT"},"fingerprint":{"sha1":"73:B9:FB:44:65:96:C1:5D:90:FC:4A:8D:45:5E:B5:4F:97:11:78:98","sha256":"55:3C:4E:F9:9A:4D:7A:39:E0:2E:F9:68:34:ED:10:8B:61:FB:22:BB:05:A1:50:88:57:3C:48:3C:45:81:D6:D7"}}},"request":{"raw":"GET /template/pc/static2/fonts/ucc73fwrk3iltehus_nvmrmxcp50sjia1zl7.woff2 HTTP/1.1\r\nHost: ledger.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledger.net.cn/template/pc/static2/css/d121b09081b243eab52c09067d167e80.css\r\nCookie: home_lang=cn; PHPSESSID=l36oavlgge3idkbjs7angsi1m7\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"home_lang","value":"cn"},{"name":"PHPSESSID","value":"l36oavlgge3idkbjs7angsi1m7"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 03:56:32 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48256\r\nlast-modified: Thu, 16 Jul 2026 06:54:55 GMT\r\netag: \"6a58803f-bc80\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48256,"size_decoded":48528,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-10-15T06:25:56.954025Z","times_seen":34416,"resource_available":false,"data":null}},"time_used":897,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":655,"receive":242,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"ledger.net.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"ledger.net.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.net.cn/","fqdn":"ledger.net.cn","domain":"ledger.net.cn","tld":"net.cn"},"ip":{"addr":"211.149.167.228","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-15T04:04:36.920Z","timestamp":1792037076920,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.net.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 17 Aug 2026 12:00:00 GMT","end":"Sun, 15 Nov 2026 11:59:59 GMT"},"fingerprint":{"sha1":"73:B9:FB:44:65:96:C1:5D:90:FC:4A:8D:45:5E:B5:4F:97:11:78:98","sha256":"55:3C:4E:F9:9A:4D:7A:39:E0:2E:F9:68:34:ED:10:8B:61:FB:22:BB:05:A1:50:88:57:3C:48:3C:45:81:D6:D7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ledger.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 03:56:31 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: home_lang=cn; path=/; SameSite=Lax\nPHPSESSID=l36oavlgge3idkbjs7angsi1m7; path=/\nusers_id=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/\nsite_info=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\ncache-control: private\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"home_lang","value":"cn","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"home_lang=cn; path=/; SameSite=Lax"},{"name":"PHPSESSID","value":"l36oavlgge3idkbjs7angsi1m7","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=l36oavlgge3idkbjs7angsi1m7; path=/"},{"name":"users_id","value":"deleted","quoted":false,"path":"/","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"users_id=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/"},{"name":"site_info","value":"deleted","quoted":false,"path":"/","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"site_info=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36841,"size_decoded":9360,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (682), with CRLF, LF line terminators","md5":"8b3ffd733609fb7535ff18d5fc081d49","sha1":"a3a59a2ffb41bfa53c0615df4156335a31035734","sha256":"77cff5f7b441bef4e1fe66249e63145e62bc3479568a9989defa4e9e04308e4a","sha512":"574cf66cd1fc7eeedaae49ab7b1b697658f347e43e9bafcc1f3f0330308b4da8eda40bf5edf7e6e57f93b472ed9b28eb99c9f8b8a03de6b3325a69228f4f0a2f","ssdeep":"384:12jKjO0OF6z26iP6TbnHNZ0jlTHxzG6MYOBJCO3TQVOvUODbBgcn36jXO6X1gcnA:x9LTbuULWAnAeo+pM2","tlshash":"ecf2a511629c7e3e0343026f5066b3f9617f7db1d1255566ba7b0228a2c2cceee275e3","first_seen":"2026-10-15T04:02:12.334563Z","last_seen":"2026-10-15T04:05:28.05724Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1099,"timings":{"blocked":5,"dns":3,"connect":500,"send":0,"wait":340,"receive":0,"ssl":250},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"ledger.net.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"ledger.net.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.net.cn/public/static/common/js/ey_global.js?v=v1.8.1","fqdn":"ledger.net.cn","domain":"ledger.net.cn","tld":"net.cn"},"ip":{"addr":"211.149.167.228","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledger.net.cn/","date":"2026-10-15T04:04:38.304Z","timestamp":1792037078304,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.net.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 17 Aug 2026 12:00:00 GMT","end":"Sun, 15 Nov 2026 11:59:59 GMT"},"fingerprint":{"sha1":"73:B9:FB:44:65:96:C1:5D:90:FC:4A:8D:45:5E:B5:4F:97:11:78:98","sha256":"55:3C:4E:F9:9A:4D:7A:39:E0:2E:F9:68:34:ED:10:8B:61:FB:22:BB:05:A1:50:88:57:3C:48:3C:45:81:D6:D7"}}},"request":{"raw":"GET /public/static/common/js/ey_global.js?v=v1.8.1 HTTP/1.1\r\nHost: ledger.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledger.net.cn/\r\nCookie: home_lang=cn; PHPSESSID=l36oavlgge3idkbjs7angsi1m7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"home_lang","value":"cn"},{"name":"PHPSESSID","value":"l36oavlgge3idkbjs7angsi1m7"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 03:56:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 10 Sep 2026 12:21:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa2a0ac-3271\"\r\nexpires: Thu, 15 Oct 2026 15:56:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12913,"size_decoded":4131,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"6c6810f2dde5a114de90b04901170515","sha1":"0a884be1b903ec30418e55d3ed6b24e64f59785c","sha256":"5dd48cc87c558b68f1995e84ad4da5b21b6425596ab94891eca3c9de33a67c34","sha512":"c5f68a64c4e099a56e06ed0c8d17849cdffd489f10a9d41befceab2af077c43ecde7a4fdcaaf7489e4910192b7e64bf68b7b30f2ebaca0cf3f6e58d2aa72ae60","ssdeep":"192:NbAAMcI1ytein2wEAeu7YVELULGWy8c010SLEQA+rrOzt7hwYP:NbgcZteinLEAeu7YVaKreztlwYP","tlshash":"1842ed3158204e2401f1f37cd65e1824eca620266685c3afbd9ecd8e1f61f9e21edb9d","first_seen":"2025-10-11T22:22:06.065369Z","last_seen":"2026-10-15T04:05:28.062354Z","times_seen":64,"resource_available":true,"data":null}},"time_used":502,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":502,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"ledger.net.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"ledger.net.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.net.cn/template/pc/static2/picture/product-flex.webp","fqdn":"ledger.net.cn","domain":"ledger.net.cn","tld":"net.cn"},"ip":{"addr":"211.149.167.228","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger.net.cn/","date":"2026-10-15T04:04:38.324Z","timestamp":1792037078324,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.net.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 17 Aug 2026 12:00:00 GMT","end":"Sun, 15 Nov 2026 11:59:59 GMT"},"fingerprint":{"sha1":"73:B9:FB:44:65:96:C1:5D:90:FC:4A:8D:45:5E:B5:4F:97:11:78:98","sha256":"55:3C:4E:F9:9A:4D:7A:39:E0:2E:F9:68:34:ED:10:8B:61:FB:22:BB:05:A1:50:88:57:3C:48:3C:45:81:D6:D7"}}},"request":{"raw":"GET /template/pc/static2/picture/product-flex.webp HTTP/1.1\r\nHost: ledger.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledger.net.cn/\r\nCookie: home_lang=cn; PHPSESSID=l36oavlgge3idkbjs7angsi1m7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"home_lang","value":"cn"},{"name":"PHPSESSID","value":"l36oavlgge3idkbjs7angsi1m7"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 03:56:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 93112\r\nlast-modified: Thu, 16 Jul 2026 06:54:55 GMT\r\netag: \"6a58803f-16bb8\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93112,"size_decoded":93385,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0b579c5f8a915df5cbb5002a208c1b6e","sha1":"ec2628584159c6e890566fae61a383b033f3006b","sha256":"baa73596d200c3163123cf48a4071f1522b530f34ed5b1a381086cb714ff9f9a","sha512":"f52bbfb50774a0cbfe8b9c2d2524a806d53d062827605be5f42718d7b368ce6c1a95c5378e17057085db277be3c1c216b3b5d32db2a646ea0649f01fc4b15214","ssdeep":"1536:BDxXp44da026vlf7XEKgnHK5S12Y/L+7mtdyuJt/CjfCcK6xR7x+isXGl:5xZ44a02m7X/gq5S12YDqXQ4fg61VsXI","tlshash":"e3931260074847c3f7c96331589b7afe4b697e8b96c6a383de91985307b0af98313535","first_seen":"2025-11-01T07:55:41.927686Z","last_seen":"2026-10-15T04:05:28.066739Z","times_seen":108,"resource_available":false,"data":null}},"time_used":1938,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":966,"receive":972,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"ledger.net.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"ledger.net.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.net.cn/template/pc/static2/picture/product-nano-gen.webp","fqdn":"ledger.net.cn","domain":"ledger.net.cn","tld":"net.cn"},"ip":{"addr":"211.149.167.228","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger.net.cn/","date":"2026-10-15T04:04:38.326Z","timestamp":1792037078326,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.net.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 17 Aug 2026 12:00:00 GMT","end":"Sun, 15 Nov 2026 11:59:59 GMT"},"fingerprint":{"sha1":"73:B9:FB:44:65:96:C1:5D:90:FC:4A:8D:45:5E:B5:4F:97:11:78:98","sha256":"55:3C:4E:F9:9A:4D:7A:39:E0:2E:F9:68:34:ED:10:8B:61:FB:22:BB:05:A1:50:88:57:3C:48:3C:45:81:D6:D7"}}},"request":{"raw":"GET /template/pc/static2/picture/product-nano-gen.webp HTTP/1.1\r\nHost: ledger.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledger.net.cn/\r\nCookie: home_lang=cn; PHPSESSID=l36oavlgge3idkbjs7angsi1m7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"home_lang","value":"cn"},{"name":"PHPSESSID","value":"l36oavlgge3idkbjs7angsi1m7"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 03:56:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10590\r\nlast-modified: Thu, 16 Jul 2026 06:54:59 GMT\r\netag: \"6a588043-295e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10590,"size_decoded":10862,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2358d932633663611572d0a8d485bb3b","sha1":"f917763ee36ea28142121c19c1a79a6e490bffec","sha256":"04787b25f65a570ce56d7598b729d7c6c101d42d086e6baaeb469032ffa18a2d","sha512":"13a3d2f5effe2db6840bb6ec43b9441b7874a39bd08ef583398e500d90fb939664f822bfdbe0cf736ecc25540279ee95d958a7e37f37ecc4a2f09884376db022","ssdeep":"192:bwTi7Pv93tQD2MTM4qxJAPKHHmy8RslNhOQfEsbztXBQ2QFbm:bwTWv937MTrqwkHwSUqEiztW2Q5","tlshash":"6022afe883799a84fbc3d5365bd16dd477cc9e08d7d896c1a12282172a53edf02a9708","first_seen":"2024-08-02T10:43:53Z","last_seen":"2026-10-15T04:05:28.06924Z","times_seen":87,"resource_available":false,"data":null}},"time_used":1453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":964,"receive":489,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"ledger.net.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"ledger.net.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.net.cn/template/pc/static2/picture/wallet-cash-card.webp","fqdn":"ledger.net.cn","domain":"ledger.net.cn","tld":"net.cn"},"ip":{"addr":"211.149.167.228","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger.net.cn/","date":"2026-10-15T04:04:38.329Z","timestamp":1792037078329,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.net.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 17 Aug 2026 12:00:00 GMT","end":"Sun, 15 Nov 2026 11:59:59 GMT"},"fingerprint":{"sha1":"73:B9:FB:44:65:96:C1:5D:90:FC:4A:8D:45:5E:B5:4F:97:11:78:98","sha256":"55:3C:4E:F9:9A:4D:7A:39:E0:2E:F9:68:34:ED:10:8B:61:FB:22:BB:05:A1:50:88:57:3C:48:3C:45:81:D6:D7"}}},"request":{"raw":"GET /template/pc/static2/picture/wallet-cash-card.webp HTTP/1.1\r\nHost: ledger.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledger.net.cn/\r\nCookie: home_lang=cn; PHPSESSID=l36oavlgge3idkbjs7angsi1m7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"home_lang","value":"cn"},{"name":"PHPSESSID","value":"l36oavlgge3idkbjs7angsi1m7"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 03:56:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 43740\r\nlast-modified: Thu, 16 Jul 2026 06:54:56 GMT\r\netag: \"6a588040-aadc\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43740,"size_decoded":44012,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"54dae15c0a8ab746daa3773f3ff8eff9","sha1":"e7a89443d06fc7bacb3248a14a37267d68d7b5e6","sha256":"48e1d69b44ea4ca0bc66d366415a4a7a1e46993b71f6ef4e6c64a56fd4fd637c","sha512":"0ce25f7671b96e0d35c373011a021050f97ca9903db8c1596ee960260de5490f394b5e4e1728ccb4f696e4938739f806765fc0f206aeea7df0c0d6292ff523ef","ssdeep":"768:zTcrlkU90Xbf8OPz3CGXxSxdWhQ5Ju/PkRuNN1uTMySEPyWWouJu:sF90L8iz33XwzWSg/PkRGN1uTZSE/uJu","tlshash":"ab13cfa3e2b05f68db72887c3392b7c1e929826034f14e65106f25dfb653b71ced0966","first_seen":"2026-06-24T22:20:40.075205Z","last_seen":"2026-10-15T04:05:28.070046Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":961,"receive":493,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"ledger.net.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"ledger.net.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.net.cn/template/pc/static2/picture/wallet-defi-swap.webp","fqdn":"ledger.net.cn","domain":"ledger.net.cn","tld":"net.cn"},"ip":{"addr":"211.149.167.228","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger.net.cn/","date":"2026-10-15T04:04:38.330Z","timestamp":1792037078330,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.net.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 17 Aug 2026 12:00:00 GMT","end":"Sun, 15 Nov 2026 11:59:59 GMT"},"fingerprint":{"sha1":"73:B9:FB:44:65:96:C1:5D:90:FC:4A:8D:45:5E:B5:4F:97:11:78:98","sha256":"55:3C:4E:F9:9A:4D:7A:39:E0:2E:F9:68:34:ED:10:8B:61:FB:22:BB:05:A1:50:88:57:3C:48:3C:45:81:D6:D7"}}},"request":{"raw":"GET /template/pc/static2/picture/wallet-defi-swap.webp HTTP/1.1\r\nHost: ledger.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledger.net.cn/\r\nCookie: home_lang=cn; PHPSESSID=l36oavlgge3idkbjs7angsi1m7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"home_lang","value":"cn"},{"name":"PHPSESSID","value":"l36oavlgge3idkbjs7angsi1m7"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 03:56:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 64324\r\nlast-modified: Thu, 16 Jul 2026 06:55:08 GMT\r\netag: \"6a58804c-fb44\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64324,"size_decoded":64596,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b6e95e7b7c81fc926d3fb70e0343fe8a","sha1":"ef0a285dac623cae260f82750500b0bfb1f0e223","sha256":"ce15164dc4ce64f7ae08006fe425a40dd064e1136ee5997e5d8a952bb89cf208","sha512":"af1daa893a9abad2118a0f9047392be2e3f66d6dd5e9c729d4c69345029636bbc6e7f245d0c5ff784344403f281820acc657a0916fe9c3f7486c592183adcf22","ssdeep":"1536:aMcGEtFb639AVPQKgJRZ+8DHW6Omz7n1vQ7J:bfE6CJQF+8i6zz71vQ7J","tlshash":"d053021d6b7443db9b6d1be3621cc04a87358f32bfa6e94dd6cb1a465c3c9015a6f308","first_seen":"2026-06-24T22:20:40.096811Z","last_seen":"2026-10-15T04:05:28.071073Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":961,"receive":495,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"ledger.net.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"ledger.net.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.net.cn/template/pc/static2/fonts/ucc73fwrk3iltehus_nvmrmxcp50sjia1zl7.woff2","fqdn":"ledger.net.cn","domain":"ledger.net.cn","tld":"net.cn"},"ip":{"addr":"211.149.167.228","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledger.net.cn/","date":"2026-10-15T04:04:38.877Z","timestamp":1792037078877,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.net.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 17 Aug 2026 12:00:00 GMT","end":"Sun, 15 Nov 2026 11:59:59 GMT"},"fingerprint":{"sha1":"73:B9:FB:44:65:96:C1:5D:90:FC:4A:8D:45:5E:B5:4F:97:11:78:98","sha256":"55:3C:4E:F9:9A:4D:7A:39:E0:2E:F9:68:34:ED:10:8B:61:FB:22:BB:05:A1:50:88:57:3C:48:3C:45:81:D6:D7"}}},"request":{"raw":"GET /template/pc/static2/fonts/ucc73fwrk3iltehus_nvmrmxcp50sjia1zl7.woff2 HTTP/1.1\r\nHost: ledger.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledger.net.cn/template/pc/static2/css/d121b09081b243eab52c09067d167e80.css\r\nCookie: home_lang=cn; PHPSESSID=l36oavlgge3idkbjs7angsi1m7\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"home_lang","value":"cn"},{"name":"PHPSESSID","value":"l36oavlgge3idkbjs7angsi1m7"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 03:56:32 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48256\r\nlast-modified: Thu, 16 Jul 2026 06:54:55 GMT\r\netag: \"6a58803f-bc80\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48256,"size_decoded":48528,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-10-15T06:25:56.954025Z","times_seen":34416,"resource_available":false,"data":null}},"time_used":661,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":659,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"ledger.net.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"ledger.net.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.net.cn/favicon.ico","fqdn":"ledger.net.cn","domain":"ledger.net.cn","tld":"net.cn"},"ip":{"addr":"211.149.167.228","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger.net.cn/","date":"2026-10-15T04:04:40.193Z","timestamp":1792037080193,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.net.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 17 Aug 2026 12:00:00 GMT","end":"Sun, 15 Nov 2026 11:59:59 GMT"},"fingerprint":{"sha1":"73:B9:FB:44:65:96:C1:5D:90:FC:4A:8D:45:5E:B5:4F:97:11:78:98","sha256":"55:3C:4E:F9:9A:4D:7A:39:E0:2E:F9:68:34:ED:10:8B:61:FB:22:BB:05:A1:50:88:57:3C:48:3C:45:81:D6:D7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ledger.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledger.net.cn/\r\nCookie: home_lang=cn; PHPSESSID=l36oavlgge3idkbjs7angsi1m7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"home_lang","value":"cn"},{"name":"PHPSESSID","value":"l36oavlgge3idkbjs7angsi1m7"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 03:56:33 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Sat, 25 Jul 2026 16:20:27 GMT\r\netag: \"6a64e24b-10be\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":4559,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"45fa2bb1d2ca67335ef64d41c16d390a","sha1":"6bb8618a4ee8c37298b8840ad48f2ce431d1c95a","sha256":"2996e62c2bee3c206a42874a30d0afeff628c13a0ae1b0e6008a0159275d04ee","sha512":"807da4eb88fa105412051def3c7daaa07216a2eea4998de058a4c016e09a0d1c0a528cfb4b37f3903996e9d2366549e3adc35ca16ae4c3aa94f99b0e667a6f58","ssdeep":"12:suknX5siVRu0Lh5Y5a/blQqblQqblQqLqkp666/CWOptJJJJJJJks8xlQq3fq3fR:suA7u01a5aTffVp666KWOK3x9SaveZ","tlshash":"909121343ee91125deaa5431fa81bc96ed50edac1ca9d5819cb3750e20f025105ff307","first_seen":"2026-03-20T16:11:26.562589Z","last_seen":"2026-10-15T04:05:28.07223Z","times_seen":46,"resource_available":false,"data":null}},"time_used":1763,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1763,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"ledger.net.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"ledger.net.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.net.cn/template/pc/static2/picture/logo.svg","fqdn":"ledger.net.cn","domain":"ledger.net.cn","tld":"net.cn"},"ip":{"addr":"211.149.167.228","port":443,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger.net.cn/","date":"2026-10-15T04:04:38.317Z","timestamp":1792037078317,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.net.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 17 Aug 2026 12:00:00 GMT","end":"Sun, 15 Nov 2026 11:59:59 GMT"},"fingerprint":{"sha1":"73:B9:FB:44:65:96:C1:5D:90:FC:4A:8D:45:5E:B5:4F:97:11:78:98","sha256":"55:3C:4E:F9:9A:4D:7A:39:E0:2E:F9:68:34:ED:10:8B:61:FB:22:BB:05:A1:50:88:57:3C:48:3C:45:81:D6:D7"}}},"request":{"raw":"GET /template/pc/static2/picture/logo.svg HTTP/1.1\r\nHost: ledger.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledger.net.cn/\r\nCookie: home_lang=cn; PHPSESSID=l36oavlgge3idkbjs7angsi1m7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"home_lang","value":"cn"},{"name":"PHPSESSID","value":"l36oavlgge3idkbjs7angsi1m7"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 03:56:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 16 Jul 2026 06:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a588040-7ca\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1994,"size_decoded":1247,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9697fcd4708edaa5bcc289288bd0753a","sha1":"55b2228607fb1ff5ee549ac06f1318671b4f4f6f","sha256":"a63a48ac09fea71cbe037d4e111e47c40f0137f246d4b36fa83dd0dac32a48c2","sha512":"48cefbe4a5973eeb534b00fa6a5c3a3e6c1c290762c7da27b034454b384857fc92db7e173fa8c1339bf58f04e0590d15385c2cd8886920c0185c04adb879cbdf","ssdeep":"","tlshash":"fb4194d84ab002fdcc58e9fe0b58312c696651e5f409459df7e39e2eada845c8c4a2f2","first_seen":"2026-06-24T22:20:40.081888Z","last_seen":"2026-10-15T04:05:28.072994Z","times_seen":16,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":492,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"ledger.net.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"ledger.net.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}