{"report_id":"fc588389-bb45-4440-babb-cecb81a90d28","version":6,"status":"done","tags":[],"date":"2026-03-26T21:17:42Z","url":{"schema":"http","addr":"ledger-customer-care.com","fqdn":"ledger-customer-care.com","domain":"ledger-customer-care.com","tld":"com"},"ip":{"addr":"87.121.79.166","port":0,"asn":207279,"as":"Markahost Telekomunikasyon Ve Ticaret Limited Sirketi","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"ledger-customer-care.com/","fqdn":"ledger-customer-care.com","domain":"ledger-customer-care.com","tld":"com"},"title":"Ledger Customer Care — Crypto Security \u0026 Finance","dom":{"size":25394,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2063)","md5":"f881d7483b347a587791284387155f36","sha1":"5826c39a575a2da7741159637e687d61ab3086a5","sha256":"5125bc146cf092e4f1d9246b2394ba8f2b80631a4fbf6a1fa4fd4104360de385","sha512":"1d0a042afe04e6ca018eaefdef043f5440e8af5455120079af4e67adeab4c3c91947a4fec0ea6aebd7d28cc04deb1b5ce7cce3ba526f14965dd937b3d8a2c813","ssdeep":"768:7FwVTEDBGVNQIxn9YjGVNQIxn9Yk/SDrglUaJjy:tGVNQIxn9YjGVNQIxn9Ys+rglUaO","tlshash":"b7b2c8b2e2b0a5363573c4c6aad86b6e7590d907c8390b54b6ec43188bcbde37d1275c","dom_hash":"domhash9bb632fe5a64f16aafcfe96c89a9dd9e","first_seen":"2026-03-26T21:17:46.325147Z","last_seen":"2026-03-26T21:23:46.902878Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ledger-customer-care.com","fqdn":"ledger-customer-care.com","domain":"ledger-customer-care.com","tld":"com"},"ip":{"addr":"87.121.79.166","port":0,"asn":207279,"as":"Markahost Telekomunikasyon Ve Ticaret Limited Sirketi","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-30T21:17:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ledger-customer-care.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ledger-customer-care.com","ip":{"addr":"87.121.79.166","port":443,"asn":207279,"as":"Markahost Telekomunikasyon Ve Ticaret Limited Sirketi","country":"Bulgaria","country_code":"BG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":26533,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ledger-customer-care.com/","fqdn":"ledger-customer-care.com","domain":"ledger-customer-care.com","tld":"com"},"ip":{"addr":"87.121.79.166","port":443,"asn":207279,"as":"Markahost Telekomunikasyon Ve Ticaret Limited Sirketi","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-26T21:17:19.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-customer-care.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 16:08:11 GMT","end":"Wed, 24 Jun 2026 16:08:10 GMT"},"fingerprint":{"sha1":"CA:53:D5:04:E8:8D:73:53:6D:20:83:03:97:C7:2A:28:44:18:BB:ED","sha256":"01:0E:69:6E:76:06:38:9A:E5:5F:AA:04:01:17:A5:D5:9D:C1:96:69:5E:60:CA:DD:10:48:84:71:19:57:90:BF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ledger-customer-care.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 26 Mar 2026 21:17:19 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://unpkg.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https: blob:; connect-src 'self' https://ip-api.com http://ip-api.com; frame-src 'self'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'; upgrade-insecure-requests;\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=(), microphone=(), camera=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=()\r\nExpect-CT: max-age=86400, enforce\r\nCross-Origin-Resource-Policy: same-origin\r\nCache-Control: public,max-age=1800\r\nETag: W/\"6329-ldqj3JZYMoo1o8SN32H4a77h86Q\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25385,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2063)","md5":"13257bf51367543b4dafed8ce1ffa86f","sha1":"a6b3c3ff77a45d40bfc63a5ce0b613f39c40fcb8","sha256":"ae994b3faf95826b2d108151f7386fb5ec2ed5a331d4ab188ba66bfcef1af71d","sha512":"155dbeb2b179a0745b6444ada133e01593c693bb28987eeb2af90bce17c2ab9c9cc82f71eef67f09e13a078bb1e057020de5616e23f55ddeb4281217570b19ba","ssdeep":"768:JFwVTED6GVNQIxn9YjGVNQIxn9YklS+rhlUaJjy:IGVNQIxn9YjGVNQIxn9YWtrhlUaO","tlshash":"78b2c7b2e2b0a5363573c4c6aad8676e7590d907c8390b54b6ec42188bcbde37d2275c","first_seen":"2026-03-26T21:17:46.327454Z","last_seen":"2026-03-26T21:23:46.903724Z","times_seen":2,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":54,"dns":12,"connect":16,"send":0,"wait":25,"receive":1,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ledger-customer-care.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
