{"report_id":"411983f3-6e74-4e14-b484-bd3c18bb7bac","version":6,"status":"done","tags":[],"date":"2026-02-03T20:45:18Z","url":{"schema":"https","addr":"start-io-trezor.stormkit.dev/","fqdn":"start-io-trezor.stormkit.dev","domain":"stormkit.dev","tld":"dev"},"ip":{"addr":"91.98.218.209","port":0,"asn":0,"as":"","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"start-io-trezor.stormkit.dev/","fqdn":"start-io-trezor.stormkit.dev","domain":"stormkit.dev","tld":"dev"},"title":"Trezor.io/Start | Starting Up Your® Device","dom":{"size":15935,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (501)","md5":"ab21f4469089979335bd7702b85903ca","sha1":"25801a08c45cbfcd46cba0a032d609d7bb60c3b9","sha256":"0124c03eb3f6c81a8683a521930081148da877ba55e97a2849d4baeb0c3b2e5d","sha512":"9b012646c76536ec73149c75268daa33e34847339c362df0a3691b3c571845ea483644c92544d6e6782ba14e62befc312b009a755d3fa147081efcfc8e95d7d5","ssdeep":"192:hve1Mkx/1dJCjwwCSbPPRIJcOoMBDl5158uB5P7NFKZkxF7f6+Z8dStg7i7eL/YR:hv0MkxNbQ24iR8eox5ZYTgh9PvAcml","tlshash":"5a62836d774ab7324e2302c15a5877e99336f24852221ec1b05a81f4dfaf9f37526b88","dom_hash":"domhash00c0a7fd248420d650a46e752caeddce","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"start-io-trezor.stormkit.dev/","fqdn":"start-io-trezor.stormkit.dev","domain":"stormkit.dev","tld":"dev"},"ip":{"addr":"91.98.218.209","port":0,"asn":0,"as":"","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-10T20:45:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"start-io-trezor.stormkit.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"start-io-trezor.stormkit.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"start-io-trezor.stormkit.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"start-io-trezor.stormkit.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"start-io-trezor.stormkit.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"start-io-trezor.stormkit.dev","ip":{"addr":"91.98.218.209","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"domain_registered":"2019-06-21","domain_rank":0,"first_seen":"2026-02-03T20:45:18.65474Z","last_seen":"2026-02-03T20:45:18.65474Z","alert_count":10,"request_count":2,"received_data":19483,"sent_data":960,"comment":"","tags":null,"fingerprints":null},{"fqdn":"i.ibb.co","ip":{"addr":"23.237.219.162","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2010-07-20","domain_rank":21643,"first_seen":"2018-11-25T10:13:48Z","last_seen":"2026-01-28T11:42:59.280069Z","alert_count":0,"request_count":1,"received_data":2917484,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"start-io-trezor.stormkit.dev/","fqdn":"start-io-trezor.stormkit.dev","domain":"stormkit.dev","tld":"dev"},"ip":{"addr":"91.98.218.209","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-03T20:44:54.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"start-io-trezor.stormkit.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 11:28:29 GMT","end":"Sat, 02 May 2026 11:28:28 GMT"},"fingerprint":{"sha1":"E2:01:04:A5:48:C2:F7:DF:D9:E9:2D:F0:F8:9E:EE:7C:8E:3C:D6:C8","sha256":"DE:75:09:1E:9E:29:F9:B1:96:11:9B:52:9E:60:39:63:65:0C:FA:59:19:D1:4E:0D:CA:61:E9:33:08:42:46:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: start-io-trezor.stormkit.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\netag: \"20-814f6cd6b3db25231e42e395d8f0cb422b929ab5\"\r\nlast-modified: Tue, 18 Nov 2025 10:48:28 GMT\r\nserver: Stormkit\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex\r\nx-sk-version: 78199\r\ndate: Tue, 03 Feb 2026 20:44:54 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16004,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (507)","md5":"73cb8fcf1b20f620293b43518cf09d50","sha1":"b8cb989ccfcc9c3b1636d128ea199de632373c1b","sha256":"85b9ec250c705f4e31de07279a2727911e2836656c0342e9bd73bac28b4ef7f4","sha512":"7649eeefba8582ec8a1dc145bad9f54c922700a12b03783e62ba033d98df3811b27252cab69851bb280eb8922d2aed61f9f5dd94f33824b2f39bcf3c66823712","ssdeep":"192:fhe1V9xJTjLwySWPPRIJcOoMBDl5158uB5P7NFKZkxF7f6+Z8dStg7i7eL/5zf6f:Z0VJp23iR8IBx5aYZiF9PvkcmO","tlshash":"3472846d774ab7324e2302c15a5873e99336f24853621ec1b05a81f4dfaf9f37526b88","first_seen":"2026-02-03T20:45:20.018463Z","last_seen":"2026-02-04T02:08:44.268835Z","times_seen":4,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":100,"dns":37,"connect":24,"send":0,"wait":51,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"start-io-trezor.stormkit.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"start-io-trezor.stormkit.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"start-io-trezor.stormkit.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"start-io-trezor.stormkit.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"start-io-trezor.stormkit.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/hJj8Sp3L/trezor-suite.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"23.237.219.162","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://start-io-trezor.stormkit.dev/","date":"2026-02-03T20:44:54.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 07:17:47 GMT","end":"Mon, 16 Mar 2026 07:17:46 GMT"},"fingerprint":{"sha1":"DD:3D:A5:50:70:7F:39:42:46:31:C9:98:9F:15:65:82:62:1B:CB:64","sha256":"F9:9D:18:4C:82:20:26:63:14:76:0A:30:CD:96:1F:CE:F9:77:EB:76:34:EC:DF:EE:6E:54:50:88:39:05:C5:C2"}}},"request":{"raw":"GET /hJj8Sp3L/trezor-suite.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://start-io-trezor.stormkit.dev/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 03 Feb 2026 20:44:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 2917115\r\nlast-modified: Tue, 28 Oct 2025 08:43:01 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2917115,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1366 x 8885, 8-bit/color RGBA, non-interlaced","md5":"8fe335ff657cc0e19dc6a9b10f25387e","sha1":"cd181d27740b49d74e34d0fd1923303880d80970","sha256":"1e38df8dbdb63a93a0f20174a268de55349e3826fc22da7af774ad140ab878c6","sha512":"0bf93fe164d41498cbd26dfcd774e642d747c487d667e70984bb7b61ea91092400cb575b15b8cb270aad0da6fe959199b90e768f8c40371128637545d83553e5","ssdeep":"24576:g1Wasa/Lshc6rwsTHdOFgwAMBXsfoiAmIwsIrY/e9K251wZr:gYC/L+UsrcqwAMBcfotmbXrY/e9K256t","tlshash":"d22533cae9902bf0e9a3f7363a9523cca35598055ab273cbe152563c018b7953440fbf","first_seen":"2025-11-17T14:09:42.961386Z","last_seen":"2026-06-26T13:48:37.767973Z","times_seen":43,"resource_available":false,"data":null}},"time_used":4119,"timings":{"blocked":346,"dns":1,"connect":167,"send":0,"wait":176,"receive":3250,"ssl":176},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"start-io-trezor.stormkit.dev/favicon.ico","fqdn":"start-io-trezor.stormkit.dev","domain":"stormkit.dev","tld":"dev"},"ip":{"addr":"91.98.218.209","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://start-io-trezor.stormkit.dev/","date":"2026-02-03T20:44:54.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"start-io-trezor.stormkit.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 11:28:29 GMT","end":"Sat, 02 May 2026 11:28:28 GMT"},"fingerprint":{"sha1":"E2:01:04:A5:48:C2:F7:DF:D9:E9:2D:F0:F8:9E:EE:7C:8E:3C:D6:C8","sha256":"DE:75:09:1E:9E:29:F9:B1:96:11:9B:52:9E:60:39:63:65:0C:FA:59:19:D1:4E:0D:CA:61:E9:33:08:42:46:2F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: start-io-trezor.stormkit.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://start-io-trezor.stormkit.dev/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\nserver: Stormkit\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex\r\nx-sk-version: 78199\r\ncontent-length: 1140\r\ndate: Tue, 03 Feb 2026 20:44:54 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":2863,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"1ff5aa9135df1c687d20effe13a7748f","sha1":"1547b4a233902f47f3c104c3b5d6d4f23aa69ec1","sha256":"dac3eb4a9ea67d8080c4616a152cf0cc36f8a37e688615149449f7630496c126","sha512":"08a8f2b3307c8928999e94abe98fd78c629028930cb56f455409fec067c45e8a610fa24159f62d990c5b3f789a1b0d7306429f154b726f524a70f685fc18b5d5","ssdeep":"","tlshash":"e6510cd09b4d1301d20f60ac294947f0969e843bcd4a9effbca2b370eccd51c069e2a4","first_seen":"2025-10-30T09:42:10.113253Z","last_seen":"2026-02-17T01:35:39.326943Z","times_seen":23,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"start-io-trezor.stormkit.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"start-io-trezor.stormkit.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"start-io-trezor.stormkit.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"start-io-trezor.stormkit.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"start-io-trezor.stormkit.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}