{"report_id":"498838dd-e959-47a4-8d6a-91cad565e215","version":0,"status":"done","tags":[],"date":"2026-06-09T14:22:08Z","url":{"schema":"http","addr":"trezor-app.org","fqdn":"trezor-app.org","domain":"trezor-app.org","tld":"org"},"ip":{"addr":"104.21.95.161","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"trezor-app.org/","fqdn":"trezor-app.org","domain":"trezor-app.org","tld":"org"},"title":"Trezor App | Secure Your Crypto Assets \u0026 Manage Hardware Wallet","dom":{"size":31622,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"7c1aa42346a6b481b83ef10749d7b9dc","sha1":"fb3709204c460646ef78dde244e2f8d53f824a70","sha256":"bfc1440113efa473890665c805fb774fec34731b25361c46f2d0b21fa4e90ccc","sha512":"60f557553f76858a4e6c2be492dd3b50aacd6e36e82a5ba7072ab9e537b05d9faf4d25dc8660f533163aeae4642d0fa1c07eefe84f8bdb4c7f221fa1579cf464","ssdeep":"768:2ZTpE9ZNlnhGYAO3wJ9ZlNyg7B5h6s5BLR:2ZpIPlNAOmZl9B5h6s5BF","tlshash":"c2e2b527b6e4313706d301d7799767d7afb2c457c226050972bc42481fb2ea683a3ade","dom_hash":"domhashe57cd0ae20c7c2e9041ea01454648826","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"trezor-app.org","fqdn":"trezor-app.org","domain":"trezor-app.org","tld":"org"},"ip":{"addr":"104.21.95.161","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-14T14:22:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"trezor-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"trezor-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"trezor-app.org","ip":{"addr":"104.21.95.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-25","domain_rank":0,"first_seen":"2026-06-09T14:22:08.593427Z","last_seen":"2026-06-09T14:22:08.593428Z","alert_count":18,"request_count":9,"received_data":805169,"sent_data":4476,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"trezor-app.org/","fqdn":"trezor-app.org","domain":"trezor-app.org","tld":"org"},"ip":{"addr":"104.21.95.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-09T14:21:43.997Z","timestamp":1781014903997,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor-app.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 15:26:27 GMT","end":"Fri, 14 Aug 2026 15:26:26 GMT"},"fingerprint":{"sha1":"7E:C6:C0:79:72:05:63:29:1B:14:BC:0C:8B:1C:67:9C:9A:93:C2:AB","sha256":"47:C8:55:A2:8C:2F:51:0D:5B:6B:F8:B0:80:42:2E:07:5C:A0:EA:47:F3:9A:6C:96:2B:C1:F2:06:57:DE:3F:DC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trezor-app.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 09 Jun 2026 14:21:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gR8F3GTOTAmhDgOi8FoVq8RdZzEwfkyuCiqDbQviVjD0w14N0r9%2BKb0lIeR5Cqn4xjNPYHxZt8O%2Bbu24IVzCrdDEMTgVtdl4%2BBT%2BbN55Dro6gbMtBHLdmV4KU%2Bq8a05z%2FA%3D%3D\"}]}\r\npriority: u=0,i\r\nlast-modified: Sun, 24 May 2026 14:46:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a090c8ce6d8db4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32260,"size_decoded":9914,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"1f30579582d5ba0de4a61987271a9b69","sha1":"c9aa882115735c5484451467f5275bf5758a18ed","sha256":"e508bf257c12c16071ed038f9ce2c45c85253e2d5ad99f8f6e77545460310d06","sha512":"fda35c5f809eb9b837f3784fb49f61ff6042cee83f103232abd231fda250074da2fd602bca3064f46b73501dd803225010d6b6f7d7ae29dd2447648797fbeccb","ssdeep":"768:eqTvLfQPqDsy6ybA5D3xsTz7u5poUxcpz:HTzoPq6y43xKu5poUxct","tlshash":"86e2a426b5c4703706b301dbb95767d6ffb68087c216050972bd438b1fb2e6583a3ada","first_seen":"2026-06-09T14:22:13.465376Z","last_seen":"2026-06-09T14:27:28.789008Z","times_seen":2,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":0,"dns":46,"connect":19,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"trezor-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"trezor-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezor-app.org/img/5.jpg","fqdn":"trezor-app.org","domain":"trezor-app.org","tld":"org"},"ip":{"addr":"104.21.95.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezor-app.org/","date":"2026-06-09T14:21:44.545Z","timestamp":1781014904545,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor-app.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 15:26:27 GMT","end":"Fri, 14 Aug 2026 15:26:26 GMT"},"fingerprint":{"sha1":"7E:C6:C0:79:72:05:63:29:1B:14:BC:0C:8B:1C:67:9C:9A:93:C2:AB","sha256":"47:C8:55:A2:8C:2F:51:0D:5B:6B:F8:B0:80:42:2E:07:5C:A0:EA:47:F3:9A:6C:96:2B:C1:F2:06:57:DE:3F:DC"}}},"request":{"raw":"GET /img/5.jpg HTTP/1.1\r\nHost: trezor-app.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezor-app.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 09 Jun 2026 14:21:44 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 12 Jan 2024 03:12:40 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: \"65a0ae28-330ff\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h4UHTMj5VodtQ4cnYlCca2juDc4OMR0DRTh4TqZo9jzNTX%2B3T9aN0WpUgj69RZofNoPOd6mhRXc50Ni0ZIR3W6wt%2FYNqlJrC1kvfGo7kOxQOxG7h3N0ArW9HwIWc%2F631Pw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a090c8d16daab4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":209151,"size_decoded":209456,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1380x920, components 3","md5":"8385a1146beddcc324c86b2e5aabfeb7","sha1":"5a03fc2938c2e6df66305dd0ad04f2ac18266c8f","sha256":"c2756f23d256ba829fb430d5ce3b9036acdf19f7930e38d7184ea9ea1ef8ef5c","sha512":"e80f7a80d00d67e3de2d92773477664e0ae2c6aa937cc178a578d99595d590717b6a66be3a1adae6d5343278f5132aa9c0293c693d9f42305cd64068dc6656f4","ssdeep":"3072:Kq98VaDOKqC99l5ah8ExX2tx2+2YphjOYUDuH3lqaqKjo7NB3i3sdJSD/IWz:KqIAl5a+ERR7gywHsaDaBy3sdJSD/IWz","tlshash":"d91423eb57586405cf3e357951f2af63e708bc136031a78c796a706222e9c637d9243e","first_seen":"2026-06-09T14:22:13.466439Z","last_seen":"2026-06-09T14:27:28.801847Z","times_seen":2,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"trezor-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"trezor-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezor-app.org/img/8.jpg","fqdn":"trezor-app.org","domain":"trezor-app.org","tld":"org"},"ip":{"addr":"104.21.95.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezor-app.org/","date":"2026-06-09T14:21:44.551Z","timestamp":1781014904551,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor-app.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 15:26:27 GMT","end":"Fri, 14 Aug 2026 15:26:26 GMT"},"fingerprint":{"sha1":"7E:C6:C0:79:72:05:63:29:1B:14:BC:0C:8B:1C:67:9C:9A:93:C2:AB","sha256":"47:C8:55:A2:8C:2F:51:0D:5B:6B:F8:B0:80:42:2E:07:5C:A0:EA:47:F3:9A:6C:96:2B:C1:F2:06:57:DE:3F:DC"}}},"request":{"raw":"GET /img/8.jpg HTTP/1.1\r\nHost: trezor-app.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezor-app.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 09 Jun 2026 14:21:44 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 12 Jan 2024 03:13:36 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: \"65a0ae60-1b7d8\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rra2ZwcQ8MZZx%2FxuBZZLxdDFUbbbUKnzuRm68TP%2BlKNrJPvjXRJWoaO6B2Iwpf%2FXczEc3wejYtsYsKPy1rnTV6aPKrpIS4oyoehD%2FRHtXw1dJ4c%2FPZ36QeD6XeKRdfcwkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a090c8d16dadb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112600,"size_decoded":112295,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1380x776, components 3","md5":"a52a2bd7f893bccb9ad550dd3bfe7283","sha1":"29a146cd289002307bcf66a17f160628c93c5a3e","sha256":"e5440dff21ae581983d4c3ce2eb60aa056ef60258ac5110b8e196a0e077a8e52","sha512":"6a310b2a183232cb1b5408c3b658b0cc648b60b66f2c6179c5af8e4577dbc25453d28e7fc58a3290e2fea5e1877699859806339056c671e1e5f5032edada5997","ssdeep":"1536:xEtLCF+s6oU8aggbbxAknaVm7r3k/+5k4bNTLd6tx2tmfPQRN676SaLRcMjxtK8E:xgLVBVVLl3U/+tB8ytSIRNrh9r2fp","tlshash":"05b3126205a2f555e0d9fbb859af5b3bbf013a444ad33b15838558ecb1b4a00c7e8cf2","first_seen":"2026-06-09T14:22:13.467555Z","last_seen":"2026-06-09T14:27:28.80304Z","times_seen":2,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"trezor-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"trezor-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezor-app.org/img/favicon.ico","fqdn":"trezor-app.org","domain":"trezor-app.org","tld":"org"},"ip":{"addr":"104.21.95.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezor-app.org/","date":"2026-06-09T14:21:44.872Z","timestamp":1781014904872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor-app.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 15:26:27 GMT","end":"Fri, 14 Aug 2026 15:26:26 GMT"},"fingerprint":{"sha1":"7E:C6:C0:79:72:05:63:29:1B:14:BC:0C:8B:1C:67:9C:9A:93:C2:AB","sha256":"47:C8:55:A2:8C:2F:51:0D:5B:6B:F8:B0:80:42:2E:07:5C:A0:EA:47:F3:9A:6C:96:2B:C1:F2:06:57:DE:3F:DC"}}},"request":{"raw":"GET /img/favicon.ico HTTP/1.1\r\nHost: trezor-app.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezor-app.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 09 Jun 2026 14:21:45 GMT\r\ncontent-type: image/x-icon\r\netag: W/\"65a09a04-1cee\"\r\nlast-modified: Fri, 12 Jan 2024 01:46:44 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=db78aqMQIgyOfUSsy8CVQRboqDfiTzf8%2B8N8RzbUz7SP8IT4U1oAffomJdgYYiOdOW%2B0d5qaXghK6BdqyRdQvMIhuIE1ww%2FA5i9TNuKU9dxkYRVBiDrEdxRLUFQZzJDlfw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a090c8d36dceb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7406,"size_decoded":2378,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 8 bits/pixel, 32x32, 8 bits/pixel","md5":"1b0821666c314f0232eca6a3e5330f94","sha1":"27884a551ad319dcf2dac97738c2af81ac79ae18","sha256":"1b40418d4ea21059619fc292cf68e570476b7fd1e8e1397ef8ee893463bb2363","sha512":"3b5effded20d757cb02a5db566bd9cb79e0a0e8632e3f0f752458bcaa490f15b2c293b1e8ae7fc0152e6635511898e8439f11594d19f96cdf6e1e097bc527a97","ssdeep":"96:7NxhhdkXuf5KnnnnnnneyccJfXJy9adVYA:7NcejyjfX1","tlshash":"1ce185a76317c345cf08d176ce5a07ac8376b4da4e3e020a74c245c1ceabc971f46e92","first_seen":"2026-06-09T14:22:13.468814Z","last_seen":"2026-06-09T14:27:28.804776Z","times_seen":2,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"trezor-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"trezor-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezor-app.org/styles.css","fqdn":"trezor-app.org","domain":"trezor-app.org","tld":"org"},"ip":{"addr":"104.21.95.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezor-app.org/","date":"2026-06-09T14:21:44.531Z","timestamp":1781014904531,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor-app.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 15:26:27 GMT","end":"Fri, 14 Aug 2026 15:26:26 GMT"},"fingerprint":{"sha1":"7E:C6:C0:79:72:05:63:29:1B:14:BC:0C:8B:1C:67:9C:9A:93:C2:AB","sha256":"47:C8:55:A2:8C:2F:51:0D:5B:6B:F8:B0:80:42:2E:07:5C:A0:EA:47:F3:9A:6C:96:2B:C1:F2:06:57:DE:3F:DC"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: trezor-app.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezor-app.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 09 Jun 2026 14:21:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 24 May 2026 14:41:14 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a130e0a-217b\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C2O7lYxMa0y4ZD%2BEhc8U7KweLRQgZzvWS877MxRjkBY%2BMQQuGPYMlyENNM%2BK8ysgukyy3aq2E51Qsy0oRxTYBysQBYjVBojHL4x8z3sJz3gY4ccYqzwls%2FKdrSCQR198oA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a090c8d14da6b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8571,"size_decoded":3025,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4dafdb66cc1ecb715612e1081ca3e46c","sha1":"45d1b4475fa195391ef4c65e894675a464512bfc","sha256":"15d56c981c22328ef82960e1ef4202edeb18d366c24dcf573ec9ad66255cd6f0","sha512":"c64f698f342a71d2c0198a8b139f72fd2f63554cf130aed22122fe7d4203d675323b1b50f6af52a49c3f5e622ee882b4f25954cc07a7bcdfad0ef3c97d23c29a","ssdeep":"192:xLIaz+sqAKX1+X8ih+Wk6RGKqWu7VBi0al:xiX1Fih+h69z","tlshash":"c3026499fb107115663bbf7af3d5e719b37894d28b0143b9bef04008aa852791262fcd","first_seen":"2026-06-09T14:22:13.469891Z","last_seen":"2026-06-09T14:27:28.794747Z","times_seen":2,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"trezor-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"trezor-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezor-app.org/img/mock.jpg","fqdn":"trezor-app.org","domain":"trezor-app.org","tld":"org"},"ip":{"addr":"104.21.95.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezor-app.org/","date":"2026-06-09T14:21:44.543Z","timestamp":1781014904543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor-app.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 15:26:27 GMT","end":"Fri, 14 Aug 2026 15:26:26 GMT"},"fingerprint":{"sha1":"7E:C6:C0:79:72:05:63:29:1B:14:BC:0C:8B:1C:67:9C:9A:93:C2:AB","sha256":"47:C8:55:A2:8C:2F:51:0D:5B:6B:F8:B0:80:42:2E:07:5C:A0:EA:47:F3:9A:6C:96:2B:C1:F2:06:57:DE:3F:DC"}}},"request":{"raw":"GET /img/mock.jpg HTTP/1.1\r\nHost: trezor-app.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezor-app.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 09 Jun 2026 14:21:44 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 12 Jan 2024 03:14:02 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: \"65a0ae7a-177e7\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bKIiteh%2BiQoDBAcNJ7h27%2Bz4tk3KM5Ay3FX5O3vpY35%2BtVkSnTJkxodT0lBQZV233rja%2By0C4WbrwGUd2qGyX3mKMPyirCLChg2iqhwLbjMFiHHYip%2BUoS6AeC6AGi15eg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a090c8d15da8b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96231,"size_decoded":95497,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1380x920, components 3","md5":"0dc860b1f6acf2f4427fd8af21da7dc9","sha1":"737d5dcc64bcba0c32042df4ab498855daf83129","sha256":"34358357d799eac18bd2e51390a323b40990615d70c7e066f2a87e175151949d","sha512":"1ad6c5c9b5be62a189af7bb3a3e99d9ce7734873bf36f1e694383ef827c952e9b36da8ce01dea23346efe1cd9cfc43886daeb60895b6b5e416630ef63302130f","ssdeep":"1536:qQb5Zw4sDaXAwbKSnoATNkosNljWQysMxKaU5HDFLnLMbu1Oy:3b5m4/AwbpLSo8ljcHM5nAu1p","tlshash":"70931251c0344eebd2f1f5f3b9d6f92885aaddab262b4eb4b0450acd3b471065c32b11","first_seen":"2026-06-09T14:22:13.470955Z","last_seen":"2026-06-09T14:27:28.78783Z","times_seen":2,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"trezor-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"trezor-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezor-app.org/img/6.jpg","fqdn":"trezor-app.org","domain":"trezor-app.org","tld":"org"},"ip":{"addr":"104.21.95.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezor-app.org/","date":"2026-06-09T14:21:44.547Z","timestamp":1781014904547,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor-app.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 15:26:27 GMT","end":"Fri, 14 Aug 2026 15:26:26 GMT"},"fingerprint":{"sha1":"7E:C6:C0:79:72:05:63:29:1B:14:BC:0C:8B:1C:67:9C:9A:93:C2:AB","sha256":"47:C8:55:A2:8C:2F:51:0D:5B:6B:F8:B0:80:42:2E:07:5C:A0:EA:47:F3:9A:6C:96:2B:C1:F2:06:57:DE:3F:DC"}}},"request":{"raw":"GET /img/6.jpg HTTP/1.1\r\nHost: trezor-app.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezor-app.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 09 Jun 2026 14:21:44 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 12 Jan 2024 03:12:42 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: \"65a0ae2a-3631f\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ShR674nwV7LdXc1MsXB85SwCrJEeYhi8CovSrVBhNsw9VWNfBDR8BO2fvzOnviuTs5%2FVvdX5wPtnrnXydynYu55BA1AsdxHx50jy6ILMR5RzP6zV1mD4Aj3CA322OR5STQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a090c8d16dabb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221983,"size_decoded":222386,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1380x920, components 3","md5":"1dd8cd60cca627c3c3178d12fdcb4042","sha1":"a3ce268c959bd752524e396cf6b8383858d6d2ae","sha256":"6bf19616d5c9da75b603f051d0907e09c6ef098464b12251bf3b03ff74101033","sha512":"8bfe7f2aa98c46b4dc1ff0e61e456c5b32abab32c0272cdbbb4b1e6bedcd893ad046f0847836329ec0b99dc9ee7fd1647c9cd4ebffdf02ff63c0db01fe92b7af","ssdeep":"6144:t+JKstp7hD4ErU4Mu/5+sz5yQhVVjOyCFn0Y+vs0I4AzOr:sl7p4E5MID42Vjyd0I0pr","tlshash":"582423f18ef04ee4e442e4b0c9d45916aa192f06edde1e2dbc0c55cc7fa2560fd4aa39","first_seen":"2026-06-09T14:22:13.471923Z","last_seen":"2026-06-09T14:27:28.802459Z","times_seen":2,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"trezor-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"trezor-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezor-app.org/img/7.jpg","fqdn":"trezor-app.org","domain":"trezor-app.org","tld":"org"},"ip":{"addr":"104.21.95.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezor-app.org/","date":"2026-06-09T14:21:44.549Z","timestamp":1781014904549,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor-app.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 15:26:27 GMT","end":"Fri, 14 Aug 2026 15:26:26 GMT"},"fingerprint":{"sha1":"7E:C6:C0:79:72:05:63:29:1B:14:BC:0C:8B:1C:67:9C:9A:93:C2:AB","sha256":"47:C8:55:A2:8C:2F:51:0D:5B:6B:F8:B0:80:42:2E:07:5C:A0:EA:47:F3:9A:6C:96:2B:C1:F2:06:57:DE:3F:DC"}}},"request":{"raw":"GET /img/7.jpg HTTP/1.1\r\nHost: trezor-app.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezor-app.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 09 Jun 2026 14:21:44 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 12 Jan 2024 03:13:32 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"65a0ae5c-8d8f\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BCuX9VmpZHIkyeqcFp4lHrlegcqmHs0dWqohWCt1fWDxf2%2Fq3wogZgwZndkgFcW%2FG%2BHp9M5Ifu1DoNLOEfB8Ce9BVbebWj2K45bZvzhoM9WI%2BqvUAxQKjiRwWwVbQTkr4A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a090c8d16dacb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36239,"size_decoded":34661,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 740x740, components 3","md5":"1be35f6b25a4ab7c67e6af597255de81","sha1":"cce42e274201111836a8227455e2aeefe91b01e7","sha256":"d5c44d95aa9ba1680db2e0aecac080b6bc82d1743eb55030464529c5ff94ee62","sha512":"6611bc8a19323b6f0516f20e5f792786236ec568eefb87f50f761b6380414b15e9456a0be2bd4470014c44e9992b7855b5bee380d9c1a09eca9babc69db562bd","ssdeep":"768:sBJjq3bGWIvdnRq05dlwZXqhWPBlMDqM+FtFvut1kPbxb2e:GJjqrGZ605WjlttXJut1a8e","tlshash":"0bf2e1d166244b13da496771efd94300e2afad3745c2365bf88f458c2fee9b0a0a4dd0","first_seen":"2026-06-09T14:22:13.473053Z","last_seen":"2026-06-09T14:27:28.788446Z","times_seen":2,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"trezor-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"trezor-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezor-app.org/img/9.jpg","fqdn":"trezor-app.org","domain":"trezor-app.org","tld":"org"},"ip":{"addr":"104.21.95.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezor-app.org/","date":"2026-06-09T14:21:44.554Z","timestamp":1781014904554,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor-app.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 15:26:27 GMT","end":"Fri, 14 Aug 2026 15:26:26 GMT"},"fingerprint":{"sha1":"7E:C6:C0:79:72:05:63:29:1B:14:BC:0C:8B:1C:67:9C:9A:93:C2:AB","sha256":"47:C8:55:A2:8C:2F:51:0D:5B:6B:F8:B0:80:42:2E:07:5C:A0:EA:47:F3:9A:6C:96:2B:C1:F2:06:57:DE:3F:DC"}}},"request":{"raw":"GET /img/9.jpg HTTP/1.1\r\nHost: trezor-app.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezor-app.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 09 Jun 2026 14:21:44 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 12 Jan 2024 03:13:40 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"65a0ae64-122f0\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GOENToMijX7TpVhUeOlQNDJHMDP7rEC5fSI2MieLHDJAttm2hZM5AV2mPNk8juETWj3xly%2FlQhj%2BZD59iMKI4o6Uj7sGZV8nWxHSXNCg4HKEj50XNOQPSP%2BHegI5FShUhg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a090c8d17dafb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74480,"size_decoded":72657,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1380x862, components 3","md5":"a90e4eb37379ad5877289b3935288d66","sha1":"944778897794445097961c000d445da87eec6c6f","sha256":"3a1027341f145f5ae84976d7fc471c17cfb86a776d21ca067f342e5b8b68cb79","sha512":"338d8520df989da7f67473c523391594c8e239dd929d22dc685386e6012aeb5f0f696e45874e0b5ca41ed2fc1ce7594fb64ccbf4613a362bb3b2068550623e5b","ssdeep":"1536:UU3IorGJxpARP7NSlhZnLFvYI+WNcjagJdNHSROfe+h:l37o8RclnL9YYNcjXNHSA2Y","tlshash":"167302bb1708c576ce2e0f7e06ef1f49ff91651842f9a24a0401882d55731b9bcae6e5","first_seen":"2026-06-09T14:22:13.47401Z","last_seen":"2026-06-09T14:27:28.80406Z","times_seen":2,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"trezor-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"trezor-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
