{"report_id":"fb768687-4c62-475c-990f-4731d721b20d","version":6,"status":"done","tags":[],"date":"2026-02-09T00:18:42Z","url":{"schema":"https","addr":"www.start-ledgr.criptowalletpro.com/","fqdn":"www.start-ledgr.criptowalletpro.com","domain":"criptowalletpro.com","tld":"com"},"ip":{"addr":"162.241.148.10","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.start-ledgr.criptowalletpro.com/","fqdn":"www.start-ledgr.criptowalletpro.com","domain":"criptowalletpro.com","tld":"com"},"title":"Official Site® | Lédger.com/Start® – Ledger® Support","dom":{"size":11633,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (556)","md5":"5b5b6488862c6d8e33b18ef03ed492e9","sha1":"0097d7020e43f95ab4684ea748038f93eb626e18","sha256":"00100df1489eb79e6cacc7de9c0c67e54ee9c1288f34c02db1e5d30330dbb3b3","sha512":"9c14fbd13d6b3c27e3d57c73b9cd3fb0da512b7ef690454ab94d64aeae2b402ccb434b97fc7e44472bb5b464f5974092768128c74b4386e821357166b720f3b1","ssdeep":"192:ma+teIvc+/fr+4IfRX0VtIRuG8ADngsMbDoxjezZ2K+3QP:F+kINjlIf10VtsuG8AzgtDox6zZn/P","tlshash":"6c32631759f030170f930359796233bf5f56509bf2290e9631bcc6296fe2a828e3369b","dom_hash":"domhasha7a47dc4faa1c624779d133913a763a8","first_seen":"2025-12-23T04:15:13.227951Z","last_seen":"2026-02-09T00:18:42.858594Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.start-ledgr.criptowalletpro.com/","fqdn":"www.start-ledgr.criptowalletpro.com","domain":"criptowalletpro.com","tld":"com"},"ip":{"addr":"162.241.148.10","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-16T00:18:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.start-ledgr.criptowalletpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.start-ledgr.criptowalletpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.start-ledgr.criptowalletpro.com","ip":{"addr":"162.241.148.10","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"domain_registered":"2025-11-21","domain_rank":0,"first_seen":"2025-12-23T04:15:09.973548Z","last_seen":"2026-02-02T05:13:40.7311Z","alert_count":6,"request_count":3,"received_data":25580,"sent_data":1450,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"i.ibb.co","ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"2010-07-20","domain_rank":21643,"first_seen":"2018-11-25T10:13:48Z","last_seen":"2026-02-04T12:51:12.945545Z","alert_count":0,"request_count":2,"received_data":346335,"sent_data":957,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-02-08T22:25:44.117365Z","alert_count":0,"request_count":1,"received_data":84983,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.start-ledgr.criptowalletpro.com/","fqdn":"www.start-ledgr.criptowalletpro.com","domain":"criptowalletpro.com","tld":"com"},"ip":{"addr":"162.241.148.10","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-09T00:18:20.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.public-trezo-cdn.criptowalletpro.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:20:38 GMT","end":"Sun, 22 Mar 2026 09:20:37 GMT"},"fingerprint":{"sha1":"01:CF:5D:DA:C4:EB:29:30:EB:F5:27:1C:6E:5D:7E:12:94:B6:E6:F5","sha256":"30:46:14:C9:DC:B6:E7:7E:E2:BC:D2:00:94:64:F0:DA:26:A2:68:F6:E2:A1:8B:C9:38:A3:97:80:CC:14:3D:16"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.start-ledgr.criptowalletpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 22 Dec 2025 10:28:25 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 4369\r\ncontent-type: text/html\r\ndate: Mon, 09 Feb 2026 00:18:20 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12194,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (613), with CRLF, CR line terminators","md5":"1f6b5226ef3236a4d79cde5dc0b9cc9a","sha1":"746bbf3dcdc2c48215fcedd31b70c45a9779966b","sha256":"4b2473e0548f37e2f0e52b1eb763fc6f3f0ac467141eb969c75da522e78df341","sha512":"2cc1f812a75bd41f0709661d251a890878807826225fdbebe51bf00eff7774ee474b9be2b9e3d1c944251f43dc8b420a0191fdf27e1b6a87e6373dfaea46dbd7","ssdeep":"192:AaZGyWcgG2/Ty+IqRz74NROn9ZkCmut4No5w65xj6/DO:zQyhQtIqRz74DOn9Zx+No5x5BQO","tlshash":"6942531a56e060164bb35368762173ffff15904ba30a099275bd831f2fb2e918a375c6","first_seen":"2025-12-23T04:15:13.229536Z","last_seen":"2026-02-09T00:18:42.859672Z","times_seen":4,"resource_available":false,"data":null}},"time_used":755,"timings":{"blocked":296,"dns":1,"connect":136,"send":0,"wait":161,"receive":0,"ssl":156},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.start-ledgr.criptowalletpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.start-ledgr.criptowalletpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/35QjYG36/5df7a99bcc921212ec004cc48e5fe4a959b18bcd-1420x916.jpg","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.start-ledgr.criptowalletpro.com/","date":"2026-02-09T00:18:21.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 07:17:47 GMT","end":"Mon, 16 Mar 2026 07:17:46 GMT"},"fingerprint":{"sha1":"DD:3D:A5:50:70:7F:39:42:46:31:C9:98:9F:15:65:82:62:1B:CB:64","sha256":"F9:9D:18:4C:82:20:26:63:14:76:0A:30:CD:96:1F:CE:F9:77:EB:76:34:EC:DF:EE:6E:54:50:88:39:05:C5:C2"}}},"request":{"raw":"GET /35QjYG36/5df7a99bcc921212ec004cc48e5fe4a959b18bcd-1420x916.jpg HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.start-ledgr.criptowalletpro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 09 Feb 2026 00:18:21 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 130117\r\nlast-modified: Mon, 05 May 2025 06:17:50 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":130117,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 640x413, components 3","md5":"bf3060c3d47949215e537273158cf9e4","sha1":"6fcbb948e5ce9ba57ce81f55515395c424a39392","sha256":"99808f353e3aa25f52f076047d3251420afa56eb9bba994d4490acf9691191d3","sha512":"d7f440244521cfb74e27a9acd5f42f179afd97b24502570ad81c417197f0714156b3a783836fdd00e1c513b4a2061c0e6227cc979b4bea6775a558233c95eafc","ssdeep":"3072:MkMQp1jyi0/oQfZEzHzCRbbQQGW9r0A+GD1IfcZ+QLK2:3SNREz8gBW9r0Apv9j","tlshash":"31d31245e948cd91a3b0f626cc7b03883380ca85d99d876136db249743d4d77a2fe4ee","first_seen":"2025-12-23T04:15:13.234354Z","last_seen":"2026-02-09T00:18:42.860634Z","times_seen":4,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":82,"dns":0,"connect":0,"send":0,"wait":93,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.start-ledgr.criptowalletpro.com/styles.css","fqdn":"www.start-ledgr.criptowalletpro.com","domain":"criptowalletpro.com","tld":"com"},"ip":{"addr":"162.241.148.10","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.start-ledgr.criptowalletpro.com/","date":"2026-02-09T00:18:21.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.public-trezo-cdn.criptowalletpro.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:20:38 GMT","end":"Sun, 22 Mar 2026 09:20:37 GMT"},"fingerprint":{"sha1":"01:CF:5D:DA:C4:EB:29:30:EB:F5:27:1C:6E:5D:7E:12:94:B6:E6:F5","sha256":"30:46:14:C9:DC:B6:E7:7E:E2:BC:D2:00:94:64:F0:DA:26:A2:68:F6:E2:A1:8B:C9:38:A3:97:80:CC:14:3D:16"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: www.start-ledgr.criptowalletpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.start-ledgr.criptowalletpro.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 22 Dec 2025 10:28:23 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 3471\r\ncontent-type: text/css\r\ndate: Mon, 09 Feb 2026 00:18:21 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12042,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"f096e7560206b090b2505e5b670a3140","sha1":"5554902687c32899e48abbd547cd87720b6f6913","sha256":"e44f03ec01fc67630c8e0813027de51b23e9c84ec7510128705adc0e185787f5","sha512":"3e314bec4b9e23aedd9c4051d2848324a695512ae453ee601fec5fb9a53ca6a71cc4f566d6916191c33813c1acd31663c7ae9c41733c788013aad60d0c4daae8","ssdeep":"192:iKmh1SOWXtQC2aa5y9NULJpGkvj67w5E3CVbIXXJwXV9iQbSX279pXJ61wPX4:RSXW","tlshash":"c042244de6051103a373afb85fb25705ea949463ca4642fd7afd21888ff91b88562fcc","first_seen":"2025-12-23T04:15:13.230864Z","last_seen":"2026-02-09T00:18:42.862952Z","times_seen":4,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.start-ledgr.criptowalletpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.start-ledgr.criptowalletpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.start-ledgr.criptowalletpro.com/","date":"2026-02-09T00:18:21.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.start-ledgr.criptowalletpro.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Feb 2026 00:18:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 14850\r\ncf-ray: 9caf30619c5e56ba-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"619c057b-3a02\"\r\nlast-modified: Mon, 22 Nov 2021 21:02:51 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1553754\r\nexpires: Sat, 30 Jan 2027 00:18:21 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=zQYmIrP%2Fqt96zmJKxvNq8gCFNjQdOxTxyEPjUI0lbmWYqBYdX5PgHDoRaaKDD3OLR5qt6KXJwrK5Mxji0ONmaRD7Y1KsaB2KWUQQRA%2FYxWMwRfMJda2vbxT0dcqescth31lwTmGw\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83981,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65311)","md5":"3d5ef2bf867c4054a2f336cdbad9e1dc","sha1":"07228d1fa3245ee156a27a353f45758a3207849f","sha256":"a361e7885c36bacb3fd9cb068da207c3b9329962cac022d06e28923939f575e8","sha512":"168deb96b663fe4eee8d39c78380864760fb912b34bf82cb6a7c36aa4b18b91944ccefad71a10f428810d0a6a818ddbaff3ae7db42264750dfb8b5a73a8eda04","ssdeep":"1536:YlMVM6MVM9MVMKMVMRsVMNdhwJHQ9Kll3ITRUHrt+z:sdhgw9kITRULt+z","tlshash":"458376e8e44c05d56732c44baf55b378a1b6f73cd5810da9f02f590c29d26a822c6f7a","first_seen":"2023-04-09T08:23:50Z","last_seen":"2026-08-07T08:37:02.192204Z","times_seen":21533,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":16,"dns":1,"connect":1,"send":0,"wait":14,"receive":1,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/BV5PX4wT/ledger.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.start-ledgr.criptowalletpro.com/","date":"2026-02-09T00:18:21.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 07:17:47 GMT","end":"Mon, 16 Mar 2026 07:17:46 GMT"},"fingerprint":{"sha1":"DD:3D:A5:50:70:7F:39:42:46:31:C9:98:9F:15:65:82:62:1B:CB:64","sha256":"F9:9D:18:4C:82:20:26:63:14:76:0A:30:CD:96:1F:CE:F9:77:EB:76:34:EC:DF:EE:6E:54:50:88:39:05:C5:C2"}}},"request":{"raw":"GET /BV5PX4wT/ledger.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.start-ledgr.criptowalletpro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 09 Feb 2026 00:18:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 215489\r\nlast-modified: Mon, 05 May 2025 07:24:24 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":215489,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 593 x 409, 8-bit/color RGBA, non-interlaced","md5":"013efb25afc44d8d9b60b7958bf70caf","sha1":"a4528b16f7af888f8c36988cfee15852f544c247","sha256":"ca9a2535b5e86936e046dbe6153a1264cd6e7ef706ea3df6a656584c672e3fa2","sha512":"3d461f0e82ef30e6be2371df20d5848403e62f249d6bf4dda754af207aef85fea45ebdd36c0c1928a7e3d0f737428f7a3457e5ab9726a03dade603055665a0e6","ssdeep":"3072:BIgu4qPYuiNfm8+zXC8AclRqDx06Dt9dPnn26bkauVEE80j8sVfDzyPS/48SEO+P:BiauiNfc2aU0Un9IauVI08sVfNfSCVtn","tlshash":"fd242344546b6d848f3412d1eab37491ee707fd8da6c9030a3b9f03fdb8aa6718d9934","first_seen":"2025-12-23T04:15:13.233277Z","last_seen":"2026-02-09T00:18:42.864684Z","times_seen":4,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":83,"dns":3,"connect":22,"send":0,"wait":25,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.start-ledgr.criptowalletpro.com/favicon.ico","fqdn":"www.start-ledgr.criptowalletpro.com","domain":"criptowalletpro.com","tld":"com"},"ip":{"addr":"162.241.148.10","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.start-ledgr.criptowalletpro.com/","date":"2026-02-09T00:18:21.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.public-trezo-cdn.criptowalletpro.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 09:20:38 GMT","end":"Sun, 22 Mar 2026 09:20:37 GMT"},"fingerprint":{"sha1":"01:CF:5D:DA:C4:EB:29:30:EB:F5:27:1C:6E:5D:7E:12:94:B6:E6:F5","sha256":"30:46:14:C9:DC:B6:E7:7E:E2:BC:D2:00:94:64:F0:DA:26:A2:68:F6:E2:A1:8B:C9:38:A3:97:80:CC:14:3D:16"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.start-ledgr.criptowalletpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.start-ledgr.criptowalletpro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nlast-modified: Wed, 07 Sep 2022 18:49:43 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 358\r\ncontent-type: text/html\r\ndate: Mon, 09 Feb 2026 00:18:21 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":583,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"51618ac2b7cf5c4937213e965c00f20a","sha1":"7e704e57162ed18743bef9f95e2dea558954751b","sha256":"0b41f69e6564b9c89b1b344744c5b06eb4adc0e584028909286d2b936e1afed5","sha512":"d07af4309bf8156644d604676eec62cf78128dae1cd1808e865e02bf7302b3dea5b1eda42eecd6e8687c84b85a6a52c07bd45b120b8fe5940d8d80586a2d0fb0","ssdeep":"","tlshash":"0df0e1671c61c4437421c64a33e1de6c54583213d109e969b6de511ccb89bdc88d3a25","first_seen":"2023-03-12T18:04:12Z","last_seen":"2026-08-07T11:12:11.895668Z","times_seen":14057,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.start-ledgr.criptowalletpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"www.start-ledgr.criptowalletpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
