{"report_id":"26948b90-02d1-4b5f-9c64-9665cc0070bc","version":0,"status":"done","tags":[],"date":"2026-08-22T12:39:39Z","url":{"schema":"http","addr":"trezor.bid/","fqdn":"trezor.bid","domain":"trezor.bid","tld":"bid"},"ip":{"addr":"108.187.6.121","port":0,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"trezor.bid/","fqdn":"trezor.bid","domain":"trezor.bid","tld":"bid"},"title":"trezor","dom":{"size":180060,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8178)","md5":"49a9a392d391930d0677a9665b6d0e33","sha1":"038c5b2095b6c9d34792b4e589d5bf92d345f42b","sha256":"9cab95751344419399ab7354a74d1d8c8fef7574a8cd497a3d86b625eb1063ad","sha512":"e8ca0418b76a1a978c7c589f430504f81738805187be9de16af404ee16102bcbac1b68fc2253abb325ecadd8f0e3bbc5d860f4c4b58ab852a80fa6e9021cf602","ssdeep":"1536:Tp6Kmrw28RKs03mIdZ6kx32Hd4VmLGg0pAsxgwNsJqs6qmGmvdqmGmv47mHmtk7Y:Tp6KmreWmUx32Hd4ULGaZwQN0LnVs","tlshash":"cc04a7725d517726713f803eb182e609ffb8a0438549ebdcfea810646ece2d642b716d","dom_hash":"domhash1d84ecf17374f7e2c62c4434e9879a7b","first_seen":"2026-08-22T12:39:51.852055Z","last_seen":"2026-08-22T12:44:13.487944Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"trezor.bid/","fqdn":"trezor.bid","domain":"trezor.bid","tld":"bid"},"ip":{"addr":"108.187.6.121","port":0,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-26T12:39:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"trezor.bid","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"trezor.bid","ip":{"addr":"108.187.6.121","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-22T12:39:46.474522Z","last_seen":"2026-08-22T12:39:46.474522Z","alert_count":56,"request_count":14,"received_data":11426729,"sent_data":6454,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"Alibaba Cloud CDN","description":"Alibaba Cloud CDN is a global network of servers designed to deliver high-performance, low-latency content to users around the world. It is a cloud-based service provided by Alibaba Cloud, a subsidiary of the Alibaba Group, that enables businesses to accelerate the delivery of their web content, including images, videos, and static files, to end-users.","website":"https://www.alibabacloud.com/product/content-delivery-network","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["CDN"]}]},{"fqdn":"at.alicdn.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2008-06-25","domain_rank":96084,"first_seen":"2013-11-28T05:03:29Z","last_seen":"2026-08-21T13:55:07.246484Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":979,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trezor.bid/layer/layer.js","fqdn":"trezor.bid","domain":"trezor.bid","tld":"bid"},"ip":{"addr":"108.187.6.121","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"47db0e57d73194c6a41bab5b4d55e860","sha1":"9db378fa8d56979e86519f483993486dc476902b","sha256":"69025fc1818313fb94c9ca4975c6a45e8385a6fd0ab9d0c60c0ac93cd997566e","sha512":"851e8630a4e631b332027850905245cb68ea56fddab22a8b7504bb4689c1a26b955ddf1b0ef23d1b1a0ecd83d668e115c9e10caf823029046a97a9f7b5c858b7","ssdeep":"384:N1xCih92A3igrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:N1EiV3i+WtXItqF13k8","tlshash":"85a2b66a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","size":22105,"data":"","first_seen":"2023-04-07T19:23:28Z","last_seen":"2026-08-22T15:09:36.578034Z","times_seen":1275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezor.bid/static/tradeview/datafeeds/udf/dist/bundle.js","fqdn":"trezor.bid","domain":"trezor.bid","tld":"bid"},"ip":{"addr":"108.187.6.121","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6466bb5a15ac244de5626cc6d58dd7a","sha1":"2b799448750e1830e07bd2f89ae2d5f11fc95a83","sha256":"f9c9b8447d430ed9f3d69aca108c253fa5541a2fcc0a98e822edc28e3046a998","sha512":"413b0b8f0c194fd397afcdfbe54018830a885b66cff309dc900d7788d1dcadc389c75e3e93755c4ebae214d1c5f8abaa07885d22ad5fa447c7f66dcdba0924e2","ssdeep":"384:kpe0jAoNzmAHgWH4NRZsPA4iCA2PHDJMJ:oBiWH4jZsDPA2PHyJ","tlshash":"7252a6c97611312182936472e87f380ba139b515688a903c71c8e9de6efdb5dea17f3c","size":13540,"data":"","first_seen":"2023-03-10T14:26:47Z","last_seen":"2026-08-22T15:09:36.579658Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezor.bid/static/tradeview/charting_library/charting_library.min.js","fqdn":"trezor.bid","domain":"trezor.bid","tld":"bid"},"ip":{"addr":"108.187.6.121","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"38e628745bfe6be6bac3f336a6e806cc","sha1":"d58cb707ff7bab2304e888dc91d02fa260fd4e52","sha256":"dba3717e46ccf9687d725c825219349248e90bac7a805b5e77057863018c563e","sha512":"ea51203227931f43ad23c3d99061fb751a3bd5f9ed4cfb6aff31fb2a7507221b3f9d2741794297027c17a213e4138ebdc937b43fd08cd3809d1d9dbbf49634c4","ssdeep":"192:3gWbnhkcii1HMYE8qxwXTPDgFhQ+/JMH1aonM95si5Vp3830J13ndPWxPRnLYDML:9bhkclDkGVlu9PWVRnL00u3OH8A","tlshash":"f7323154fb6c6c3605c722f4c47f680b913ee27ad0a544ac38c491dc58fd446baabab9","size":11901,"data":"","first_seen":"2023-03-10T14:26:46Z","last_seen":"2026-08-22T15:09:36.588886Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezor.bid/static/tradeview/datafeeds/udf/dist/polyfills.js","fqdn":"trezor.bid","domain":"trezor.bid","tld":"bid"},"ip":{"addr":"108.187.6.121","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"770b6e32570470374f29dba33e0f95b6","sha1":"64f6aed78e689c5b601946dab613c3678c558dab","sha256":"7da37ef86ad23b00dd959e0c189d29870cf99c2cd5dcad12634ed3961f69161e","sha512":"ecc5b498c8fd0edb1e145e6afd7e9f8cc98e65694b2670b2791f5af44bf0f5041bbd9cf119191f419942e7cbec53498127ddbdf0bb2b36391c8bc61bc2537ae1","ssdeep":"192:/5C5b4rmkiNL70mrZm3KosuxV6/hk3haw5UPQ0wx9B4EhN0xhOU8L:xGegVrZLO3gyP6EhN0xhG","tlshash":"49128588f7e0b472036360b4917f450fb2b53925648e41b8f260d8ea6cbd44d962bf7c","size":9648,"data":"","first_seen":"2023-03-10T14:26:46Z","last_seen":"2026-08-22T15:09:36.586816Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezor.bid/1.2.0-beta.6.js","fqdn":"trezor.bid","domain":"trezor.bid","tld":"bid"},"ip":{"addr":"108.187.6.121","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f8538019f3eeb7f79099329547c3242","sha1":"be9b37b50bda0ed654038706fdfb63cbdf2d412e","sha256":"9a22946e2692cd92755b21acc3550b2447c021ef7c364cd0c9edbc94f334e16f","sha512":"809a429f3ba262c0eb01571bed62060afc5f2c557816a3cd1aa033874c2f9ac0cea09cd93df925c06f9e01003593d5b7e8860214b1565bbf409236127f364037","ssdeep":"49152:07Xjhuo/dP2YWWHraAwYxHmRyzwPjFDH8lf3X7tebjWsdwiw+uDBzPDNKlodFgfj:0vZVtw","tlshash":"a4c56b9a7292f09203e715b9906f0406f33b7749644e4934f674c8e7aca858db2b7f78","size":2589951,"data":"","first_seen":"2026-05-06T09:00:43.563983Z","last_seen":"2026-08-22T15:09:36.593254Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezor.bid/","fqdn":"trezor.bid","domain":"trezor.bid","tld":"bid"},"ip":{"addr":"108.187.6.121","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ab80f0ba3f4877c5d5f81258e0d5354","sha1":"e9bb3034fdf6eef134bc9cc3b88c64adb498fb2b","sha256":"8dc8bb5056c0bf23d6546d5e3483028304c5d35be33fa3c60078cbe7bbe2d595","sha512":"59bbb8bf66334f8a264dfd47f9402a01eb17eb0d8ef7095229afae2c5e0a4c34348d2cb51a13dee204c3db36950237429830fd13b4d1552d41503de447df2b0b","ssdeep":"","tlshash":"c711f5b92a1335a483efe035866bf58664787217200ac540fc4d9ba91fd9a3108f76ec","size":956,"data":"","first_seen":"2026-08-12T01:11:06.844269Z","last_seen":"2026-08-22T15:09:36.595289Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezor.bid/","fqdn":"trezor.bid","domain":"trezor.bid","tld":"bid"},"ip":{"addr":"108.187.6.121","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0c018705ba2f35944a235d8e93f4d8bb","sha1":"ea5ec349a8108478d8083f7bef54c2f7b6d1bc46","sha256":"9d6360f475ebcafa1ed65c572c1a19445b7fdead05998c913c8d2e99f9f69e4f","sha512":"c802ce6a7f1fa14890343e121f5f4bf0d56e32ed3f6eda5c9673525845fd2df4ca2732e4a897718f6284836e47cb765a4595ea701082748d3e07e843e6c06ea2","ssdeep":"","tlshash":"13f0821026f858758460f1329d8f627656332e1f1c4bb324750c03406f9fb1ea1f2afa","size":652,"data":"","first_seen":"2025-03-04T01:55:58.02057Z","last_seen":"2026-08-22T15:09:36.596796Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezor.bid/jquery.js","fqdn":"trezor.bid","domain":"trezor.bid","tld":"bid"},"ip":{"addr":"108.187.6.121","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9087a9859288a8b9e5275a823c2ace1e","sha1":"f2c621911b387b2a6399c08d05c7027653a9e072","sha256":"730fa28a30b20e876e67b0ceacc14ef814ade02fc3504d91435675f5e847f287","sha512":"e46f3420f05a12c3063df19a03689b6029d479230d03fddb5d2adc4abf655c795c3c1b3777fc3d6fc7a3cfbfee089ef19d5fdc925be73d5dbdc64524a1a253ab","ssdeep":"1536:GP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98HrA:Z+41hJiz6fhdlTqya98HrA","tlshash":"5f83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84342,"data":"","first_seen":"2023-03-07T13:00:08Z","last_seen":"2026-08-22T15:09:36.584731Z","times_seen":256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezor.bid/clipboard.min.js","fqdn":"trezor.bid","domain":"trezor.bid","tld":"bid"},"ip":{"addr":"108.187.6.121","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"accff5dc2cb43e6df205a847b60ad842","sha1":"47907b9c091df255c85d0c714afad8ff73d4498a","sha256":"95d4ec004897f09d8c4a0ae3c2cbab1fe950d75d86cffe049ccb1ff166747592","sha512":"e441e85996113dcae14fe2cb8769ad06316a0745ae4aed727889baf13d9c0464b26f74dcdd7b3abdf25f18463f11c9d33a71d719ee39e1fc0c4bb97052fc3808","ssdeep":"192:k0i1RWxek1XVTkAkI/qHnHZ4Ly98Dom53C5GU7oKZoQhoslw/3JAQZu5CpVHa4LV:FivWxeBI/vCc3kHiQ7l83JJu54z9f","tlshash":"ae32964cb28071b196db60ae902f424fb270942570ae90d4b639e8f5ad7ceed1567f3c","size":11037,"data":"","first_seen":"2024-08-20T08:35:39.529569Z","last_seen":"2026-08-22T15:09:36.585201Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"trezor.bid/static/tradeview/datafeeds/udf/dist/bundle.js","fqdn":"trezor.bid","domain":"trezor.bid","tld":"bid"},"ip":{"addr":"108.187.6.121","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezor.bid/","date":"2026-08-22T12:38:59.126Z","timestamp":1787402339126,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.mobi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 05:57:15 GMT","end":"Thu, 19 Nov 2026 05:57:14 GMT"},"fingerprint":{"sha1":"85:71:50:95:CD:5B:D4:F0:04:8F:A8:BF:99:24:CF:2F:D9:55:C5:BE","sha256":"BB:65:BE:DF:CD:3F:4C:86:46:39:D5:33:AE:AC:19:98:44:0F:87:E0:E2:65:F8:3E:9C:6A:9E:15:14:4E:F4:2A"}}},"request":{"raw":"GET /static/tradeview/datafeeds/udf/dist/bundle.js HTTP/1.1\r\nHost: trezor.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezor.bid/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:38:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 10 Aug 2026 04:33:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a795483-34e4\"\r\nexpires: Sun, 23 Aug 2026 00:38:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13540,"size_decoded":4640,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13538), with CRLF line terminators","md5":"a6466bb5a15ac244de5626cc6d58dd7a","sha1":"2b799448750e1830e07bd2f89ae2d5f11fc95a83","sha256":"f9c9b8447d430ed9f3d69aca108c253fa5541a2fcc0a98e822edc28e3046a998","sha512":"413b0b8f0c194fd397afcdfbe54018830a885b66cff309dc900d7788d1dcadc389c75e3e93755c4ebae214d1c5f8abaa07885d22ad5fa447c7f66dcdba0924e2","ssdeep":"384:kpe0jAoNzmAHgWH4NRZsPA4iCA2PHDJMJ:oBiWH4jZsDPA2PHyJ","tlshash":"7252a6c97611312182936472e87f380ba139b515688a903c71c8e9de6efdb5dea17f3c","first_seen":"2023-03-10T14:26:47Z","last_seen":"2026-08-22T15:09:36.579658Z","times_seen":127,"resource_available":true,"data":null}},"time_used":1098,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1098,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"trezor.bid","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezor.bid/css/chunk-vendors.ccdedb03.css?v=202608121901","fqdn":"trezor.bid","domain":"trezor.bid","tld":"bid"},"ip":{"addr":"108.187.6.121","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezor.bid/","date":"2026-08-22T12:38:59.140Z","timestamp":1787402339140,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.mobi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 05:57:15 GMT","end":"Thu, 19 Nov 2026 05:57:14 GMT"},"fingerprint":{"sha1":"85:71:50:95:CD:5B:D4:F0:04:8F:A8:BF:99:24:CF:2F:D9:55:C5:BE","sha256":"BB:65:BE:DF:CD:3F:4C:86:46:39:D5:33:AE:AC:19:98:44:0F:87:E0:E2:65:F8:3E:9C:6A:9E:15:14:4E:F4:2A"}}},"request":{"raw":"GET /css/chunk-vendors.ccdedb03.css?v=202608121901 HTTP/1.1\r\nHost: trezor.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezor.bid/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:38:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 10 Aug 2026 04:33:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a795483-36d51\"\r\nexpires: Sun, 23 Aug 2026 00:38:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":224593,"size_decoded":39545,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8325e14dcab74128a519a39c5d564eec","sha1":"5362f85464e4b8ced7f50b4695279757cd4bae05","sha256":"0386fb80c5e751cdd436a50cfa23f261bbadb29ba8b236461fd0a45dbe979ac0","sha512":"f7c14adc986fea25c21c503dded5718c7ff290da7a3ee906aab9128fd3c257ac10e828d6515fe0bafec9c3bd5604978fe15ac643a745c56a0e1d8c8a6273f85d","ssdeep":"1536:j6vASf65WCXkc28Y7SrW3YeWXA1u9w4HCe/l4JrgW9cMERw4B78O6iZkJgYu8e2b:j6v7f65WCXkltKw/27eDLL6of","tlshash":"9424b5109b17247b622bda6d74c0ba896f24c323d8735b3bfd95780cc6e64991227e1f","first_seen":"2026-05-24T23:21:11.156513Z","last_seen":"2026-08-22T15:09:36.578633Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1457,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1457,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"trezor.bid","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezor.bid/layer/layer.js","fqdn":"trezor.bid","domain":"trezor.bid","tld":"bid"},"ip":{"addr":"108.187.6.121","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezor.bid/","date":"2026-08-22T12:38:59.125Z","timestamp":1787402339125,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.mobi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 05:57:15 GMT","end":"Thu, 19 Nov 2026 05:57:14 GMT"},"fingerprint":{"sha1":"85:71:50:95:CD:5B:D4:F0:04:8F:A8:BF:99:24:CF:2F:D9:55:C5:BE","sha256":"BB:65:BE:DF:CD:3F:4C:86:46:39:D5:33:AE:AC:19:98:44:0F:87:E0:E2:65:F8:3E:9C:6A:9E:15:14:4E:F4:2A"}}},"request":{"raw":"GET /layer/layer.js HTTP/1.1\r\nHost: trezor.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezor.bid/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:38:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 10 Aug 2026 04:33:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a795483-5665\"\r\nexpires: Sun, 23 Aug 2026 00:38:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22117,"size_decoded":8162,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22020), with CRLF line terminators","md5":"47db0e57d73194c6a41bab5b4d55e860","sha1":"9db378fa8d56979e86519f483993486dc476902b","sha256":"69025fc1818313fb94c9ca4975c6a45e8385a6fd0ab9d0c60c0ac93cd997566e","sha512":"851e8630a4e631b332027850905245cb68ea56fddab22a8b7504bb4689c1a26b955ddf1b0ef23d1b1a0ecd83d668e115c9e10caf823029046a97a9f7b5c858b7","ssdeep":"384:N1xCih92A3igrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:N1EiV3i+WtXItqF13k8","tlshash":"85a2b66a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","first_seen":"2023-04-07T19:23:28Z","last_seen":"2026-08-22T15:09:36.578034Z","times_seen":1275,"resource_available":true,"data":null}},"time_used":1099,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1099,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"trezor.bid","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezor.bid/static/tradeview/datafeeds/udf/dist/polyfills.js","fqdn":"trezor.bid","domain":"trezor.bid","tld":"bid"},"ip":{"addr":"108.187.6.121","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezor.bid/","date":"2026-08-22T12:38:59.129Z","timestamp":1787402339129,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.mobi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 05:57:15 GMT","end":"Thu, 19 Nov 2026 05:57:14 GMT"},"fingerprint":{"sha1":"85:71:50:95:CD:5B:D4:F0:04:8F:A8:BF:99:24:CF:2F:D9:55:C5:BE","sha256":"BB:65:BE:DF:CD:3F:4C:86:46:39:D5:33:AE:AC:19:98:44:0F:87:E0:E2:65:F8:3E:9C:6A:9E:15:14:4E:F4:2A"}}},"request":{"raw":"GET /static/tradeview/datafeeds/udf/dist/polyfills.js HTTP/1.1\r\nHost: trezor.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezor.bid/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:38:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 10 Aug 2026 04:33:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a795483-25b0\"\r\nexpires: Sun, 23 Aug 2026 00:38:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9648,"size_decoded":3817,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9646), with CRLF line terminators","md5":"770b6e32570470374f29dba33e0f95b6","sha1":"64f6aed78e689c5b601946dab613c3678c558dab","sha256":"7da37ef86ad23b00dd959e0c189d29870cf99c2cd5dcad12634ed3961f69161e","sha512":"ecc5b498c8fd0edb1e145e6afd7e9f8cc98e65694b2670b2791f5af44bf0f5041bbd9cf119191f419942e7cbec53498127ddbdf0bb2b36391c8bc61bc2537ae1","ssdeep":"192:/5C5b4rmkiNL70mrZm3KosuxV6/hk3haw5UPQ0wx9B4EhN0xhOU8L:xGegVrZLO3gyP6EhN0xhG","tlshash":"49128588f7e0b472036360b4917f450fb2b53925648e41b8f260d8ea6cbd44d962bf7c","first_seen":"2023-03-10T14:26:46Z","last_seen":"2026-08-22T15:09:36.586816Z","times_seen":126,"resource_available":true,"data":null}},"time_used":1096,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1096,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"trezor.bid","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezor.bid/1.2.0-beta.6.js","fqdn":"trezor.bid","domain":"trezor.bid","tld":"bid"},"ip":{"addr":"108.187.6.121","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezor.bid/","date":"2026-08-22T12:38:59.130Z","timestamp":1787402339130,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.mobi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 05:57:15 GMT","end":"Thu, 19 Nov 2026 05:57:14 GMT"},"fingerprint":{"sha1":"85:71:50:95:CD:5B:D4:F0:04:8F:A8:BF:99:24:CF:2F:D9:55:C5:BE","sha256":"BB:65:BE:DF:CD:3F:4C:86:46:39:D5:33:AE:AC:19:98:44:0F:87:E0:E2:65:F8:3E:9C:6A:9E:15:14:4E:F4:2A"}}},"request":{"raw":"GET /1.2.0-beta.6.js HTTP/1.1\r\nHost: trezor.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezor.bid/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:38:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 10 Aug 2026 04:33:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a795483-2784ff\"\r\nexpires: Sun, 23 Aug 2026 00:38:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2589951,"size_decoded":686942,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65520), with no line terminators","md5":"3623c0ba5a3aab53c95a17a735792667","sha1":"e4547b885574ecf0d92ccf19573a1a9cfdd8b95a","sha256":"07e5965a748f247cc2cb6b1064bc1950325268817a8c532a567efd6f0a0a362f","sha512":"bfa2355894eadccfef6ee60f9aa62b8a5eb53b85776e793b13503640e60c950eead03fd8791d9668b9f5af07e4f6666985988df90550983958a7b589efb37dcd","ssdeep":"12288:5SpZ9SemAIfKjAa1Qo/0GPIzgEJa+FGfWWmol+k/sUphh:07mtyjAauo/dP2FWWWm01phh","tlshash":"40254b9c7282b06146e7657a803f510bf33a394a244d8464f135ccdabd79a4da37bfb8","first_seen":"2026-05-06T09:00:43.52911Z","last_seen":"2026-08-22T15:09:36.581228Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1095,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1095,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"trezor.bid","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"at.alicdn.com/t/font_2302506_w05z3emunp.css","fqdn":"at.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezor.bid/","date":"2026-08-22T12:38:59.137Z","timestamp":1787402339137,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /t/font_2302506_w05z3emunp.css HTTP/1.1\r\nHost: at.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezor.bid/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T15:26:51.245135Z","times_seen":18037402,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezor.bid/","fqdn":"trezor.bid","domain":"trezor.bid","tld":"bid"},"ip":{"addr":"108.187.6.121","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-22T12:38:56.606Z","timestamp":1787402336606,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.mobi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 05:57:15 GMT","end":"Thu, 19 Nov 2026 05:57:14 GMT"},"fingerprint":{"sha1":"85:71:50:95:CD:5B:D4:F0:04:8F:A8:BF:99:24:CF:2F:D9:55:C5:BE","sha256":"BB:65:BE:DF:CD:3F:4C:86:46:39:D5:33:AE:AC:19:98:44:0F:87:E0:E2:65:F8:3E:9C:6A:9E:15:14:4E:F4:2A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trezor.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:38:58 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 12 Aug 2026 11:01:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7c529e-e37\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"Alibaba Cloud CDN","description":"Alibaba Cloud CDN is a global network of servers designed to deliver high-performance, low-latency content to users around the world. It is a cloud-based service provided by Alibaba Cloud, a subsidiary of the Alibaba Group, that enables businesses to accelerate the delivery of their web content, including images, videos, and static files, to end-users.","website":"https://www.alibabacloud.com/product/content-delivery-network","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3639,"size_decoded":1679,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (969), with CRLF, LF line terminators","md5":"5fadb1d39c40ef8f0271490b64ae5fc5","sha1":"0e9094ea22c5e289416db93b14cff97ab6eb0bb3","sha256":"46cdcc91eca33e9330f4c263856e0a1cfc575b24e0697e60aa3c653930ceb0d7","sha512":"da34b661f94f779a1b872fc8cc0a351c7c943bef47fa6c066776c72e98a10d44ef59a08ec8966ba95fbbe6bb9edc7decf1a71dc030fb219efe47e8338be76d39","ssdeep":"","tlshash":"1f714266ae04e1ac4971ea318d62f11ec4ab6b1f7421d88074fc067c0ff4bda8593d96","first_seen":"2026-08-19T23:05:39.529869Z","last_seen":"2026-08-22T15:09:36.591529Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2268,"timings":{"blocked":-1,"dns":111,"connect":252,"send":0,"wait":372,"receive":0,"ssl":311},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"trezor.bid","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezor.bid/jquery.js","fqdn":"trezor.bid","domain":"trezor.bid","tld":"bid"},"ip":{"addr":"108.187.6.121","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezor.bid/","date":"2026-08-22T12:38:59.122Z","timestamp":1787402339122,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.mobi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 05:57:15 GMT","end":"Thu, 19 Nov 2026 05:57:14 GMT"},"fingerprint":{"sha1":"85:71:50:95:CD:5B:D4:F0:04:8F:A8:BF:99:24:CF:2F:D9:55:C5:BE","sha256":"BB:65:BE:DF:CD:3F:4C:86:46:39:D5:33:AE:AC:19:98:44:0F:87:E0:E2:65:F8:3E:9C:6A:9E:15:14:4E:F4:2A"}}},"request":{"raw":"GET /jquery.js HTTP/1.1\r\nHost: trezor.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezor.bid/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:38:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 10 Aug 2026 04:33:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a795483-14976\"\r\nexpires: Sun, 23 Aug 2026 00:38:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":84342,"size_decoded":30316,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025), with CRLF line terminators","md5":"9087a9859288a8b9e5275a823c2ace1e","sha1":"f2c621911b387b2a6399c08d05c7027653a9e072","sha256":"730fa28a30b20e876e67b0ceacc14ef814ade02fc3504d91435675f5e847f287","sha512":"e46f3420f05a12c3063df19a03689b6029d479230d03fddb5d2adc4abf655c795c3c1b3777fc3d6fc7a3cfbfee089ef19d5fdc925be73d5dbdc64524a1a253ab","ssdeep":"1536:GP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98HrA:Z+41hJiz6fhdlTqya98HrA","tlshash":"5f83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T13:00:08Z","last_seen":"2026-08-22T15:09:36.584731Z","times_seen":256,"resource_available":true,"data":null}},"time_used":738,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":738,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"trezor.bid","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezor.bid/static/tradeview/charting_library/charting_library.min.js","fqdn":"trezor.bid","domain":"trezor.bid","tld":"bid"},"ip":{"addr":"108.187.6.121","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezor.bid/","date":"2026-08-22T12:38:59.128Z","timestamp":1787402339128,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.mobi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 05:57:15 GMT","end":"Thu, 19 Nov 2026 05:57:14 GMT"},"fingerprint":{"sha1":"85:71:50:95:CD:5B:D4:F0:04:8F:A8:BF:99:24:CF:2F:D9:55:C5:BE","sha256":"BB:65:BE:DF:CD:3F:4C:86:46:39:D5:33:AE:AC:19:98:44:0F:87:E0:E2:65:F8:3E:9C:6A:9E:15:14:4E:F4:2A"}}},"request":{"raw":"GET /static/tradeview/charting_library/charting_library.min.js HTTP/1.1\r\nHost: trezor.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezor.bid/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:38:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 10 Aug 2026 04:33:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a795483-2e7d\"\r\nexpires: Sun, 23 Aug 2026 00:38:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11901,"size_decoded":3725,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2132), with CRLF line terminators","md5":"38e628745bfe6be6bac3f336a6e806cc","sha1":"d58cb707ff7bab2304e888dc91d02fa260fd4e52","sha256":"dba3717e46ccf9687d725c825219349248e90bac7a805b5e77057863018c563e","sha512":"ea51203227931f43ad23c3d99061fb751a3bd5f9ed4cfb6aff31fb2a7507221b3f9d2741794297027c17a213e4138ebdc937b43fd08cd3809d1d9dbbf49634c4","ssdeep":"192:3gWbnhkcii1HMYE8qxwXTPDgFhQ+/JMH1aonM95si5Vp3830J13ndPWxPRnLYDML:9bhkclDkGVlu9PWVRnL00u3OH8A","tlshash":"f7323154fb6c6c3605c722f4c47f680b913ee27ad0a544ac38c491dc58fd446baabab9","first_seen":"2023-03-10T14:26:46Z","last_seen":"2026-08-22T15:09:36.588886Z","times_seen":140,"resource_available":true,"data":null}},"time_used":1097,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1097,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"trezor.bid","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"at.alicdn.com/t/font_2302506_w05z3emunp.js","fqdn":"at.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezor.bid/","date":"2026-08-22T12:38:59.133Z","timestamp":1787402339133,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /t/font_2302506_w05z3emunp.js HTTP/1.1\r\nHost: at.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezor.bid/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T15:26:51.245135Z","times_seen":18037402,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezor.bid/css/app.b8775d8d.css?v=202608121901","fqdn":"trezor.bid","domain":"trezor.bid","tld":"bid"},"ip":{"addr":"108.187.6.121","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezor.bid/","date":"2026-08-22T12:38:59.139Z","timestamp":1787402339139,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.mobi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 05:57:15 GMT","end":"Thu, 19 Nov 2026 05:57:14 GMT"},"fingerprint":{"sha1":"85:71:50:95:CD:5B:D4:F0:04:8F:A8:BF:99:24:CF:2F:D9:55:C5:BE","sha256":"BB:65:BE:DF:CD:3F:4C:86:46:39:D5:33:AE:AC:19:98:44:0F:87:E0:E2:65:F8:3E:9C:6A:9E:15:14:4E:F4:2A"}}},"request":{"raw":"GET /css/app.b8775d8d.css?v=202608121901 HTTP/1.1\r\nHost: trezor.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezor.bid/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:38:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 10 Aug 2026 04:33:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a795483-8efaa\"\r\nexpires: Sun, 23 Aug 2026 00:38:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":585642,"size_decoded":104226,"mime_type":"text/css","magic":"ASCII text, with very long lines (53282), with CRLF line terminators","md5":"a8c0a0ab129e84fb9cf472f0fe91031e","sha1":"b2bcfd9bf7c76705f817ae562aa0c84c5a84f5d5","sha256":"44af9d11fa09937ccbfdab3d6b30090c47ef98a98c797d160e42cf8297feee40","sha512":"d7ab218990dcb716f315861ec9d8bbbd0c39a3401f85e4c43130ce9259ed39416d974947c21c12b79d55a5e5954a0ce5583f5b1792fa0a0ae325f9028d7b5c08","ssdeep":"6144:CgmvLYz3i6PSXh9dgdp7nWR7TH7VNOoGuA/0gE/:CgmvLYz3i6PSXhep7nWR7zZNOwAPE/","tlshash":"46c4c721721c242db47bd16374d0aa9e3055f763d22342aefea27639ce875933a3274d","first_seen":"2026-08-12T01:23:47.884785Z","last_seen":"2026-08-22T15:09:36.590757Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1459,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"trezor.bid","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezor.bid/js/app.561f0919.js?v=202608121901","fqdn":"trezor.bid","domain":"trezor.bid","tld":"bid"},"ip":{"addr":"108.187.6.121","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezor.bid/","date":"2026-08-22T12:38:59.142Z","timestamp":1787402339142,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.mobi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 05:57:15 GMT","end":"Thu, 19 Nov 2026 05:57:14 GMT"},"fingerprint":{"sha1":"85:71:50:95:CD:5B:D4:F0:04:8F:A8:BF:99:24:CF:2F:D9:55:C5:BE","sha256":"BB:65:BE:DF:CD:3F:4C:86:46:39:D5:33:AE:AC:19:98:44:0F:87:E0:E2:65:F8:3E:9C:6A:9E:15:14:4E:F4:2A"}}},"request":{"raw":"GET /js/app.561f0919.js?v=202608121901 HTTP/1.1\r\nHost: trezor.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezor.bid/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:38:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Aug 2026 11:00:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7c5262-37fbe5\"\r\nexpires: Sun, 23 Aug 2026 00:38:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3668965,"size_decoded":1262270,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"4734820353230245dc4fadead91f3f44","sha1":"1fd5947daec6f0f5bd3e868ced41d5178d46abd3","sha256":"26fdd3ae890e49813631aa71e4f6bb8292b3d99e280192373ba8812561ba2f7b","sha512":"0456f0446b9626fc1cfeb35ad219c4e1467067cdf2d863d584d23c7922094835e3a7de3bf1c4896ea4bd5d3a6545a3437aa7ac64d1e8b37ab3170f130bd4cd53","ssdeep":"24576:mEcK77r5SkU/dUnAdA7p757qWFLbO7Sk3:H75SkU/dUnAdAF757qWFLbO7Sk3","tlshash":"06253baad146e2b8cd6b9292601e0674b3773ee8d105404cf7b8ced636c8964275ef7c","first_seen":"2026-08-19T23:05:39.511348Z","last_seen":"2026-08-22T15:09:36.58314Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"trezor.bid","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezor.bid/js/chunk-vendors.6142f832.js?v=202608121901","fqdn":"trezor.bid","domain":"trezor.bid","tld":"bid"},"ip":{"addr":"108.187.6.121","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezor.bid/","date":"2026-08-22T12:38:59.143Z","timestamp":1787402339143,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.mobi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 05:57:15 GMT","end":"Thu, 19 Nov 2026 05:57:14 GMT"},"fingerprint":{"sha1":"85:71:50:95:CD:5B:D4:F0:04:8F:A8:BF:99:24:CF:2F:D9:55:C5:BE","sha256":"BB:65:BE:DF:CD:3F:4C:86:46:39:D5:33:AE:AC:19:98:44:0F:87:E0:E2:65:F8:3E:9C:6A:9E:15:14:4E:F4:2A"}}},"request":{"raw":"GET /js/chunk-vendors.6142f832.js?v=202608121901 HTTP/1.1\r\nHost: trezor.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezor.bid/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:38:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 10 Aug 2026 04:33:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a795483-3f90a2\"\r\nexpires: Sun, 23 Aug 2026 00:38:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4165794,"size_decoded":1285614,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15095)","md5":"ed27604cacc59f5d73cba6fb898b0c95","sha1":"72821e3558a871762774b09a51bdf39d376003f0","sha256":"895ee382a66c0c049ec5bee36090b0e01cb53882462bd77d4a64515e920f9c0c","sha512":"44e060b5c38dae2a1b05265cb68206ca7d98b1ea02ac4fca7c43488a36d5bc8d2ff4bc95a45ddcfebd6bc9ce23d2dc41f5da60091d84419d95319b73fcdc1c62","ssdeep":"12288:KddR4z+Q5kvFpsA9SIdGTBarO/JoOVt+5E/HZERTKj5gG:KddR4z+94lvB3/JQEeR+lgG","tlshash":"ed353a5cb204a17c9ea667b8853b1016a37e55ae74858720f32ecce076710dcf36bdad","first_seen":"2026-06-29T06:22:15.924607Z","last_seen":"2026-08-22T15:09:36.583721Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"trezor.bid","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezor.bid/layer/theme/default/layer.css?v=3.1.1","fqdn":"trezor.bid","domain":"trezor.bid","tld":"bid"},"ip":{"addr":"108.187.6.121","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezor.bid/","date":"2026-08-22T12:39:00.241Z","timestamp":1787402340241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.mobi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 05:57:15 GMT","end":"Thu, 19 Nov 2026 05:57:14 GMT"},"fingerprint":{"sha1":"85:71:50:95:CD:5B:D4:F0:04:8F:A8:BF:99:24:CF:2F:D9:55:C5:BE","sha256":"BB:65:BE:DF:CD:3F:4C:86:46:39:D5:33:AE:AC:19:98:44:0F:87:E0:E2:65:F8:3E:9C:6A:9E:15:14:4E:F4:2A"}}},"request":{"raw":"GET /layer/theme/default/layer.css?v=3.1.1 HTTP/1.1\r\nHost: trezor.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezor.bid/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:39:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 10 Aug 2026 04:33:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a795483-381f\"\r\nexpires: Sun, 23 Aug 2026 00:39:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14367,"size_decoded":3342,"mime_type":"text/css","magic":"ASCII text, with very long lines (14367), with no line terminators","md5":"3d2e0d91c5c0b96abb8dbdc2234aba77","sha1":"9d55e153b30fd7414fada5718e20918e9c7f65e7","sha256":"e3144d018a6a24f733c6fc2a2ee603fb583f0030585e9d4b71bec471b78e31fc","sha512":"42bf3eff281998d088ce012b9a5910f72951c91715595572bb968fbfc5fa2b1cddacef3ca683a1734eb41114b302b6a4dad8b7432c5877b3563a080a2547ae05","ssdeep":"96:mp+Ntha8qNEp+wRY1vUPXiK6nMLPD2OtLzXyPHL/LztJDzyv2OQ7KGx1jyd2/SWz:1WmLr2OtSrzzt42OQ7KGx1jCWR2b+RcU","tlshash":"2e5221e144811299b0278721d6dc7eba32f88d43e5630daef257381f874c6dba2b6647","first_seen":"2023-04-05T06:05:22Z","last_seen":"2026-08-22T15:09:36.584235Z","times_seen":6826,"resource_available":false,"data":null}},"time_used":1501,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1501,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"trezor.bid","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezor.bid/clipboard.min.js","fqdn":"trezor.bid","domain":"trezor.bid","tld":"bid"},"ip":{"addr":"108.187.6.121","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezor.bid/","date":"2026-08-22T12:38:59.124Z","timestamp":1787402339124,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.mobi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 05:57:15 GMT","end":"Thu, 19 Nov 2026 05:57:14 GMT"},"fingerprint":{"sha1":"85:71:50:95:CD:5B:D4:F0:04:8F:A8:BF:99:24:CF:2F:D9:55:C5:BE","sha256":"BB:65:BE:DF:CD:3F:4C:86:46:39:D5:33:AE:AC:19:98:44:0F:87:E0:E2:65:F8:3E:9C:6A:9E:15:14:4E:F4:2A"}}},"request":{"raw":"GET /clipboard.min.js HTTP/1.1\r\nHost: trezor.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezor.bid/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:38:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 10 Aug 2026 04:33:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a795483-2b1e\"\r\nexpires: Sun, 23 Aug 2026 00:38:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11038,"size_decoded":3981,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10808), with CRLF line terminators","md5":"accff5dc2cb43e6df205a847b60ad842","sha1":"47907b9c091df255c85d0c714afad8ff73d4498a","sha256":"95d4ec004897f09d8c4a0ae3c2cbab1fe950d75d86cffe049ccb1ff166747592","sha512":"e441e85996113dcae14fe2cb8769ad06316a0745ae4aed727889baf13d9c0464b26f74dcdd7b3abdf25f18463f11c9d33a71d719ee39e1fc0c4bb97052fc3808","ssdeep":"192:k0i1RWxek1XVTkAkI/qHnHZ4Ly98Dom53C5GU7oKZoQhoslw/3JAQZu5CpVHa4LV:FivWxeBI/vCc3kHiQ7l83JJu54z9f","tlshash":"ae32964cb28071b196db60ae902f424fb270942570ae90d4b639e8f5ad7ceed1567f3c","first_seen":"2024-08-20T08:35:39.529569Z","last_seen":"2026-08-22T15:09:36.585201Z","times_seen":41,"resource_available":true,"data":null}},"time_used":737,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":737,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"trezor.bid","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezor.bid/favicon.ico","fqdn":"trezor.bid","domain":"trezor.bid","tld":"bid"},"ip":{"addr":"108.187.6.121","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezor.bid/","date":"2026-08-22T12:39:09.805Z","timestamp":1787402349805,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.mobi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 05:57:15 GMT","end":"Thu, 19 Nov 2026 05:57:14 GMT"},"fingerprint":{"sha1":"85:71:50:95:CD:5B:D4:F0:04:8F:A8:BF:99:24:CF:2F:D9:55:C5:BE","sha256":"BB:65:BE:DF:CD:3F:4C:86:46:39:D5:33:AE:AC:19:98:44:0F:87:E0:E2:65:F8:3E:9C:6A:9E:15:14:4E:F4:2A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: trezor.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezor.bid/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:39:09 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 14029\r\nlast-modified: Wed, 12 Aug 2026 02:13:53 GMT\r\netag: \"6a7bd6e1-36cd\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14029,"size_decoded":14471,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"f10a649a1b079e26ed5a1fcb5e6b4948","sha1":"f0c2c44ec35e5a4ececf1701e585e1a01f767030","sha256":"09505a842b13b223c0b6e307bc6ad841f2be3a9ea3d75f2be982166114759567","sha512":"bb607f5bb641de1b3f1515c736e2694056d65e1a8aa4cc2c5385f2ca3813b6ffa71bc48a8d1c6c801ab05c33312f4e95f704026f17cdb358bac54be489f8b0b2","ssdeep":"192:4QNDC58qEvmV1XXkW9Kz70SrvQygyDpzKCE+2hSRIP6Bno3N9EWTFE7iCpt:6KVGXXo0IYzyDwQYm8N9jTlCpt","tlshash":"5652c0afd1f441924de547b2cc22f22e237788031c4e712ea4a67e54fa8777da20185f","first_seen":"2026-08-19T23:05:39.532291Z","last_seen":"2026-08-22T15:09:36.587435Z","times_seen":4,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":572,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"trezor.bid","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"trezor.bid","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}}]}