{"report_id":"4f7bb3da-1f67-4a75-88bb-f19abb7046f0","version":6,"status":"done","tags":[],"date":"2026-01-07T14:42:57Z","url":{"schema":"http","addr":"trezoriostat.com","fqdn":"trezoriostat.com","domain":"trezoriostat.com","tld":"com"},"ip":{"addr":"144.31.228.146","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"trezoriostat.com/","fqdn":"trezoriostat.com","domain":"trezoriostat.com","tld":"com"},"title":"Trezor Suite | Download and install Trezor Wallet™","dom":{"size":71628,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (44845)","md5":"4f65084c33cca3eb0830562cf853e6e1","sha1":"48b67fd2d61df6ea55c000ceb2b51ec0ac913f8b","sha256":"c4ffb73305288d6c405338d805242695ffb9dc959ecb608a7be3d57d297732d5","sha512":"b374182b57454369ac6629bafae56e95f3c3adce32822b6a66048df47fa72e99b4d02e5a71795a782f60a2090be464dc71b54a3127b1928db89b301d0161c3fe","ssdeep":"1536:MxXx/c64Jysq7vyc0tHL99997JJJJHJJJJiJJJJJJJJJAJJJRJJJJ3oF8c:Cx0tHHEF","tlshash":"4063b978770c3e2ca81b97e4f794bb68523da142fd5b9068b17c106567c7dc8b82be84","dom_hash":"domhash4a8f6cf7d5f3895b5e5af79fdec94be4","first_seen":"2026-01-07T14:43:07.365425Z","last_seen":"2026-01-24T23:04:59.443897Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"trezoriostat.com","fqdn":"trezoriostat.com","domain":"trezoriostat.com","tld":"com"},"ip":{"addr":"144.31.228.146","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-11T14:42:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"trezoriostat.com","ip":{"addr":"144.31.228.146","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-11-24","domain_rank":0,"first_seen":"2026-01-07T14:42:58.480976Z","last_seen":"2026-01-07T14:42:58.480976Z","alert_count":57,"request_count":19,"received_data":2358831,"sent_data":8524,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trezoriostat.com/assets/index-BehufAHu.js","fqdn":"trezoriostat.com","domain":"trezoriostat.com","tld":"com"},"ip":{"addr":"144.31.228.146","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c23f39aaea9abcca2d8143806dc6293f","sha1":"b17653a9f5777a6ac371a7a79418d0810641fb57","sha256":"c988adca26c60abc606eb24f491ab22156347dde3eabab6dc240f2432d9f2e0f","sha512":"49dccacf6f76595688ec02705f870ecba5cb35925fe34e219c8086653d7ace528cbd1c53790439315152939984a765ee27546bcb767eacdaeb069aef8eb16a93","ssdeep":"12288:WVCMmw59LIRey0iJykqTle2AG6f4Zqy/tdR8kPp:WVZ0ey0+3qT8fOttz8kPp","tlshash":"8ca45cdc3199b56967b346e140bf010bb23c2917780d8860f128edae7a7254661bbffd","size":487073,"data":"","first_seen":"2026-01-07T14:43:07.368315Z","last_seen":"2026-01-24T23:04:59.455238Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"trezoriostat.com/assets/index-BehufAHu.js","fqdn":"trezoriostat.com","domain":"trezoriostat.com","tld":"com"},"ip":{"addr":"144.31.228.146","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezoriostat.com/","date":"2026-01-07T14:42:35.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezoriostat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 21:07:34 GMT","end":"Sun, 22 Feb 2026 21:07:33 GMT"},"fingerprint":{"sha1":"57:E2:50:C7:16:83:FD:63:E6:6F:8F:3E:19:C6:9E:D2:74:68:6E:8C","sha256":"10:51:3E:66:E0:19:25:6B:80:9E:07:0D:35:8B:02:B1:AE:58:E5:11:E1:2C:1F:54:E1:14:67:69:84:4B:76:F3"}}},"request":{"raw":"GET /assets/index-BehufAHu.js HTTP/1.1\r\nHost: trezoriostat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezoriostat.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Jan 2026 14:42:35 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 24 Nov 2025 21:59:29 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6924d541-76ea1\"\r\nExpires: Thu, 08 Jan 2026 14:42:35 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":487073,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35019)","md5":"c23f39aaea9abcca2d8143806dc6293f","sha1":"b17653a9f5777a6ac371a7a79418d0810641fb57","sha256":"c988adca26c60abc606eb24f491ab22156347dde3eabab6dc240f2432d9f2e0f","sha512":"49dccacf6f76595688ec02705f870ecba5cb35925fe34e219c8086653d7ace528cbd1c53790439315152939984a765ee27546bcb767eacdaeb069aef8eb16a93","ssdeep":"12288:WVCMmw59LIRey0iJykqTle2AG6f4Zqy/tdR8kPp:WVZ0ey0+3qT8fOttz8kPp","tlshash":"8ca45cdc3199b56967b346e140bf010bb23c2917780d8860f128edae7a7254661bbffd","first_seen":"2026-01-07T14:43:07.368315Z","last_seen":"2026-01-24T23:04:59.455238Z","times_seen":2,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezoriostat.com/assets/index-BWSv9Hkv.css","fqdn":"trezoriostat.com","domain":"trezoriostat.com","tld":"com"},"ip":{"addr":"144.31.228.146","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezoriostat.com/","date":"2026-01-07T14:42:35.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezoriostat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 21:07:34 GMT","end":"Sun, 22 Feb 2026 21:07:33 GMT"},"fingerprint":{"sha1":"57:E2:50:C7:16:83:FD:63:E6:6F:8F:3E:19:C6:9E:D2:74:68:6E:8C","sha256":"10:51:3E:66:E0:19:25:6B:80:9E:07:0D:35:8B:02:B1:AE:58:E5:11:E1:2C:1F:54:E1:14:67:69:84:4B:76:F3"}}},"request":{"raw":"GET /assets/index-BWSv9Hkv.css HTTP/1.1\r\nHost: trezoriostat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezoriostat.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Jan 2026 14:42:35 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 24 Nov 2025 21:59:29 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6924d541-117a5\"\r\nExpires: Thu, 08 Jan 2026 14:42:35 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":71589,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ae74d95f07dddf4056127cbae9810b1a","sha1":"4d5229fb8dfb8e803595699ab02e03745781d6f8","sha256":"14888ca2cfd8310d9e9dada5b1d86ba28e5aa6de9cdeda59b7065702ba99e3ab","sha512":"d18d288f5b2a285632f8373b0c441883a04c1601b52a052865a7fca9ead7f033c2a98422747773bea55583ada231e51115389cfd98ec49f351a266a2ea3c9825","ssdeep":"1536:PhowY3k36CUB6vaGlCr378VQZkt5FNCo7x:PhojkPUSaGlCr378VQZkt5Ff7x","tlshash":"45636319b919613e3c2790f983ccb5aca11ef0c0de3a06b9be9a41216bd37f65db7504","first_seen":"2026-01-07T14:43:07.370677Z","last_seen":"2026-01-24T23:04:59.457571Z","times_seen":2,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":135,"dns":2,"connect":26,"send":0,"wait":102,"receive":2,"ssl":111},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezoriostat.com/assets/avatar-6.jpg","fqdn":"trezoriostat.com","domain":"trezoriostat.com","tld":"com"},"ip":{"addr":"144.31.228.146","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezoriostat.com/","date":"2026-01-07T14:42:35.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezoriostat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 21:07:34 GMT","end":"Sun, 22 Feb 2026 21:07:33 GMT"},"fingerprint":{"sha1":"57:E2:50:C7:16:83:FD:63:E6:6F:8F:3E:19:C6:9E:D2:74:68:6E:8C","sha256":"10:51:3E:66:E0:19:25:6B:80:9E:07:0D:35:8B:02:B1:AE:58:E5:11:E1:2C:1F:54:E1:14:67:69:84:4B:76:F3"}}},"request":{"raw":"GET /assets/avatar-6.jpg HTTP/1.1\r\nHost: trezoriostat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezoriostat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Jan 2026 14:42:36 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 204411\r\nLast-Modified: Mon, 24 Nov 2025 21:59:29 GMT\r\nConnection: keep-alive\r\nETag: \"6924d541-31e7b\"\r\nExpires: Thu, 08 Jan 2026 14:42:36 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":204411,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x1024, components 3","md5":"6ea733ac55d0dadccccf08c0d356d1b0","sha1":"244e7863168bedbea5bfefdb49eb7820a8d5cea1","sha256":"b0a395d1a2461d894a30f5bf006e841f7c633d4db417e24c5df07e89456152cf","sha512":"eb41d2301a5e753eccedb026c5b4626f81556d3d8e2adb415822037153be8aa0ad5fc4efe770650c8bdf7329486c187a7965e14dc39d3d987ea6a63f42d605bd","ssdeep":"3072:Xl4co9uMZpazwR5B4nrdCMNELp3ih31xpIKxCurhdT5+iVcl8ONBEKaRT1JDzuv6:1emzwN+CgELRkPxfrhdT5k5I5mtVMT","tlshash":"e6142318423fb1b09d7d4ee566d213e8d8d46e7c62ea6e7394dbb849384c88e0f445f2","first_seen":"2026-01-07T14:43:07.372813Z","last_seen":"2026-01-24T23:04:59.446266Z","times_seen":2,"resource_available":false,"data":null}},"time_used":490,"timings":{"blocked":386,"dns":0,"connect":0,"send":0,"wait":67,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezoriostat.com/assets/avatar-2.jpg","fqdn":"trezoriostat.com","domain":"trezoriostat.com","tld":"com"},"ip":{"addr":"144.31.228.146","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezoriostat.com/","date":"2026-01-07T14:42:35.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezoriostat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 21:07:34 GMT","end":"Sun, 22 Feb 2026 21:07:33 GMT"},"fingerprint":{"sha1":"57:E2:50:C7:16:83:FD:63:E6:6F:8F:3E:19:C6:9E:D2:74:68:6E:8C","sha256":"10:51:3E:66:E0:19:25:6B:80:9E:07:0D:35:8B:02:B1:AE:58:E5:11:E1:2C:1F:54:E1:14:67:69:84:4B:76:F3"}}},"request":{"raw":"GET /assets/avatar-2.jpg HTTP/1.1\r\nHost: trezoriostat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezoriostat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Jan 2026 14:42:35 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 243784\r\nLast-Modified: Mon, 24 Nov 2025 21:59:29 GMT\r\nConnection: keep-alive\r\nETag: \"6924d541-3b848\"\r\nExpires: Thu, 08 Jan 2026 14:42:35 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":243784,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x1024, components 3","md5":"c707fc8c6212b1011a901c3ee0ff0a8b","sha1":"f132f3b2c0f29330c1891cf94fb29e8221033867","sha256":"f50e16d2dd4998d7fa9074ef92f02645f6bd2b1e668f8e0efc2963d7b9146f81","sha512":"b0027670c5aea0210f8de84eba54546426390ec67872aaab0b765a11641591e7e4035b0c8c353f8fa2befbe44c7f7533e59dd1dbf7b83566c64799dcf6b38e29","ssdeep":"6144:syUyrFLiomJ2J7yxBgeuz3PknTV8Fbm/dW9EPmQ:rUeNr37iBgeEcJ8Fbm1WGPmQ","tlshash":"4334226936d7e610c3a65234264d073905edef34db6e9b9f0fb2a5ae4c31d6b78c2900","first_seen":"2026-01-07T14:43:07.375047Z","last_seen":"2026-01-24T23:04:59.445252Z","times_seen":2,"resource_available":false,"data":null}},"time_used":549,"timings":{"blocked":144,"dns":1,"connect":30,"send":0,"wait":109,"receive":139,"ssl":122},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezoriostat.com/assets/avatar-5.jpg","fqdn":"trezoriostat.com","domain":"trezoriostat.com","tld":"com"},"ip":{"addr":"144.31.228.146","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezoriostat.com/","date":"2026-01-07T14:42:35.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezoriostat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 21:07:34 GMT","end":"Sun, 22 Feb 2026 21:07:33 GMT"},"fingerprint":{"sha1":"57:E2:50:C7:16:83:FD:63:E6:6F:8F:3E:19:C6:9E:D2:74:68:6E:8C","sha256":"10:51:3E:66:E0:19:25:6B:80:9E:07:0D:35:8B:02:B1:AE:58:E5:11:E1:2C:1F:54:E1:14:67:69:84:4B:76:F3"}}},"request":{"raw":"GET /assets/avatar-5.jpg HTTP/1.1\r\nHost: trezoriostat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezoriostat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Jan 2026 14:42:36 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 265688\r\nLast-Modified: Mon, 24 Nov 2025 21:59:29 GMT\r\nConnection: keep-alive\r\nETag: \"6924d541-40dd8\"\r\nExpires: Thu, 08 Jan 2026 14:42:36 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":265688,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x1024, components 3","md5":"183503335659f266b0a7927254336c8c","sha1":"140b9684e47bc4463bee07d388e15ab991dc1356","sha256":"33bedc1e92d461b37875ebbd308af4b119a50cd369a5b612633d333cf58b32d8","sha512":"234b953d1a2a0f228cdd1414afc1c6b711ab4b5e2ca4126950b884c38ced6f7f17951853d2a2860fdc663fc312758842a3329381897d1b96f3b00219f750d7c3","ssdeep":"6144:GiQqxmslxdBP2diEOXkz+IuA8RYsYywWdz5HDZls3d:wqsqP28Er6bADmDbS","tlshash":"7a4423688b1760c29e913df32b8559f7dbfdfa547009d9a035f09b3fdc2d0998a41a82","first_seen":"2026-01-07T14:43:07.378042Z","last_seen":"2026-01-24T23:04:59.452649Z","times_seen":2,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":341,"dns":0,"connect":0,"send":0,"wait":73,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezoriostat.com/","fqdn":"trezoriostat.com","domain":"trezoriostat.com","tld":"com"},"ip":{"addr":"144.31.228.146","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-07T14:42:34.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezoriostat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 21:07:34 GMT","end":"Sun, 22 Feb 2026 21:07:33 GMT"},"fingerprint":{"sha1":"57:E2:50:C7:16:83:FD:63:E6:6F:8F:3E:19:C6:9E:D2:74:68:6E:8C","sha256":"10:51:3E:66:E0:19:25:6B:80:9E:07:0D:35:8B:02:B1:AE:58:E5:11:E1:2C:1F:54:E1:14:67:69:84:4B:76:F3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trezoriostat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Jan 2026 14:42:34 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6102,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"b026c25e8b716ced603f74db4a432733","sha1":"ed737b056b544d446be1aeacc11e03636a38b981","sha256":"4fc4c1eefa0f9a44380aa84452097f330abbf9097c81115943bb0d17e15cdeca","sha512":"d12b146c44a6a572fb363c395776f83eabfd72eb2cd19a91420541ffa49ae26f2985269aa64a617379023747f01538d62570c31b076a1f3be8e6244b588e4c28","ssdeep":"96:K6zXKnox2EvfHJMKXdnNSHXm00/yNePNFbGyNVxi8sLZ9nSMoZyihIWPG+sb8yoG:R/X1dnNs50/yNePzbGyNS8sLZ9nSMoZI","tlshash":"8cc1961fdaa96c13052112a064f931a6b177411b89947c8ab79c002e2fcedef95f73ce","first_seen":"2026-01-07T14:43:07.380459Z","last_seen":"2026-01-24T23:04:59.454Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1073,"timings":{"blocked":500,"dns":353,"connect":27,"send":0,"wait":73,"receive":0,"ssl":115},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezoriostat.com/assets/hero-bg_variant_1.jpg","fqdn":"trezoriostat.com","domain":"trezoriostat.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezoriostat.com/","date":"2026-01-07T14:42:35.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezoriostat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 21:07:34 GMT","end":"Sun, 22 Feb 2026 21:07:33 GMT"},"fingerprint":{"sha1":"57:E2:50:C7:16:83:FD:63:E6:6F:8F:3E:19:C6:9E:D2:74:68:6E:8C","sha256":"10:51:3E:66:E0:19:25:6B:80:9E:07:0D:35:8B:02:B1:AE:58:E5:11:E1:2C:1F:54:E1:14:67:69:84:4B:76:F3"}}},"request":{"raw":"GET /assets/hero-bg_variant_1.jpg HTTP/1.1\r\nHost: trezoriostat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezoriostat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T15:40:42.100018Z","times_seen":17857324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezoriostat.com/assets/avatar-6.jpg","fqdn":"trezoriostat.com","domain":"trezoriostat.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezoriostat.com/","date":"2026-01-07T14:42:35.634Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/avatar-6.jpg HTTP/1.1\r\nHost: trezoriostat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezoriostat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T15:40:42.100018Z","times_seen":17857324,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezoriostat.com/assets/avatar-5.jpg","fqdn":"trezoriostat.com","domain":"trezoriostat.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezoriostat.com/","date":"2026-01-07T14:42:35.633Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/avatar-5.jpg HTTP/1.1\r\nHost: trezoriostat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezoriostat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T15:40:42.100018Z","times_seen":17857324,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezoriostat.com/assets/avatar-1.jpg","fqdn":"trezoriostat.com","domain":"trezoriostat.com","tld":"com"},"ip":{"addr":"144.31.228.146","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezoriostat.com/","date":"2026-01-07T14:42:35.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezoriostat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 21:07:34 GMT","end":"Sun, 22 Feb 2026 21:07:33 GMT"},"fingerprint":{"sha1":"57:E2:50:C7:16:83:FD:63:E6:6F:8F:3E:19:C6:9E:D2:74:68:6E:8C","sha256":"10:51:3E:66:E0:19:25:6B:80:9E:07:0D:35:8B:02:B1:AE:58:E5:11:E1:2C:1F:54:E1:14:67:69:84:4B:76:F3"}}},"request":{"raw":"GET /assets/avatar-1.jpg HTTP/1.1\r\nHost: trezoriostat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezoriostat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Jan 2026 14:42:35 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 216728\r\nLast-Modified: Mon, 24 Nov 2025 21:59:29 GMT\r\nConnection: keep-alive\r\nETag: \"6924d541-34e98\"\r\nExpires: Thu, 08 Jan 2026 14:42:35 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":216728,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x1024, components 3","md5":"28bc9bc7b2854ee74003435d416abfee","sha1":"2e4e0ce9d2c5a45d4c00bf34e12ebb036b2122ab","sha256":"161b26f13a7b0e9efd60753809f792de5150e45518c997a22e4fbbcaf5d13710","sha512":"4adb0098cb1017df935bfcc865e9fdfd9623d2f396058d782bbc632c7917d73d0ebf94e3e68053840f40ac230997ab970abb8bc4c2cffe54bd753e6e8a9576bf","ssdeep":"6144:2rMhoG5+0eQsDtKxYae6ODKcL3+icNczGw/GG:kYoG5+yYcma7EK7N2iwuG","tlshash":"662423db6e544e85b3b0577923e61030a2c56b83f6c27cb8cd12284f6ddcab7935d460","first_seen":"2026-01-07T14:43:07.383438Z","last_seen":"2026-01-24T23:04:59.449038Z","times_seen":2,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":143,"dns":5,"connect":26,"send":0,"wait":106,"receive":137,"ssl":120},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezoriostat.com/assets/avatar-3.jpg","fqdn":"trezoriostat.com","domain":"trezoriostat.com","tld":"com"},"ip":{"addr":"144.31.228.146","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezoriostat.com/","date":"2026-01-07T14:42:35.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezoriostat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 21:07:34 GMT","end":"Sun, 22 Feb 2026 21:07:33 GMT"},"fingerprint":{"sha1":"57:E2:50:C7:16:83:FD:63:E6:6F:8F:3E:19:C6:9E:D2:74:68:6E:8C","sha256":"10:51:3E:66:E0:19:25:6B:80:9E:07:0D:35:8B:02:B1:AE:58:E5:11:E1:2C:1F:54:E1:14:67:69:84:4B:76:F3"}}},"request":{"raw":"GET /assets/avatar-3.jpg HTTP/1.1\r\nHost: trezoriostat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezoriostat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Jan 2026 14:42:35 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 213649\r\nLast-Modified: Mon, 24 Nov 2025 21:59:29 GMT\r\nConnection: keep-alive\r\nETag: \"6924d541-34291\"\r\nExpires: Thu, 08 Jan 2026 14:42:35 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":213649,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x1024, components 3","md5":"184fcc4976f9c692557f4473825e793f","sha1":"b14f2efee760a4ae5e6ace2a232a1d8b583ffd72","sha256":"6f5e3e7ff1071e744a4626e1646e70e060a462ccc9b989072f1edb8376ee166d","sha512":"ec9f4a97662329c7589daacbeb256a27eedc21ddad4f30913448a9f64efa2e186ef63b6476307f9c58a7cc3645b2d8f549a4d913d0578579104f721605984fed","ssdeep":"6144:SbD4HyQKReMh8PAUHGg2N36Hl/C+FvdpB:8kS2gNUm36F7lpB","tlshash":"0d24129efab63b44e4542af2f3f006b48152686e42fc523c7c3175a47a7c66c2f586b4","first_seen":"2026-01-07T14:43:07.385671Z","last_seen":"2026-01-24T23:04:59.456401Z","times_seen":2,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":144,"dns":2,"connect":30,"send":0,"wait":116,"receive":158,"ssl":119},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezoriostat.com/assets/avatar-4.jpg","fqdn":"trezoriostat.com","domain":"trezoriostat.com","tld":"com"},"ip":{"addr":"144.31.228.146","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezoriostat.com/","date":"2026-01-07T14:42:35.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezoriostat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 21:07:34 GMT","end":"Sun, 22 Feb 2026 21:07:33 GMT"},"fingerprint":{"sha1":"57:E2:50:C7:16:83:FD:63:E6:6F:8F:3E:19:C6:9E:D2:74:68:6E:8C","sha256":"10:51:3E:66:E0:19:25:6B:80:9E:07:0D:35:8B:02:B1:AE:58:E5:11:E1:2C:1F:54:E1:14:67:69:84:4B:76:F3"}}},"request":{"raw":"GET /assets/avatar-4.jpg HTTP/1.1\r\nHost: trezoriostat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezoriostat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Jan 2026 14:42:35 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 260706\r\nLast-Modified: Mon, 24 Nov 2025 21:59:29 GMT\r\nConnection: keep-alive\r\nETag: \"6924d541-3fa62\"\r\nExpires: Thu, 08 Jan 2026 14:42:35 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":260706,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x1024, components 3","md5":"e621ed5c9f25287e0d7f5555859529cf","sha1":"510af30796e49efa75204a956ae8032ab08858aa","sha256":"9c0008dfc7be40f37380f571443ed7a80d0035db0cff7b9de2073639d5ca089f","sha512":"883f5882348f0ed363e4e01eaf4a8dcd58f03e4f349b97dd0421b543c9c19023df8e29fff5de25babbbac9c46057879928f2aedecc9d65da28590009da86dabb","ssdeep":"6144:AnHgpda+2LeZaW3ZGNZ5LYFx/SUVDCZUl2b:gHwt2LeZv3UNZSzVNA","tlshash":"42442355d3584adf9941a0bfcc4ea1d8aab40a2817cb7128900664d7ced9f37eff8478","first_seen":"2026-01-07T14:43:07.39244Z","last_seen":"2026-01-24T23:04:59.45142Z","times_seen":2,"resource_available":false,"data":null}},"time_used":600,"timings":{"blocked":151,"dns":3,"connect":30,"send":0,"wait":105,"receive":174,"ssl":123},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezoriostat.com/assets/hero-bg.jpg","fqdn":"trezoriostat.com","domain":"trezoriostat.com","tld":"com"},"ip":{"addr":"144.31.228.146","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezoriostat.com/","date":"2026-01-07T14:42:35.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezoriostat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 21:07:34 GMT","end":"Sun, 22 Feb 2026 21:07:33 GMT"},"fingerprint":{"sha1":"57:E2:50:C7:16:83:FD:63:E6:6F:8F:3E:19:C6:9E:D2:74:68:6E:8C","sha256":"10:51:3E:66:E0:19:25:6B:80:9E:07:0D:35:8B:02:B1:AE:58:E5:11:E1:2C:1F:54:E1:14:67:69:84:4B:76:F3"}}},"request":{"raw":"GET /assets/hero-bg.jpg HTTP/1.1\r\nHost: trezoriostat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezoriostat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T15:40:42.100018Z","times_seen":17857324,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezoriostat.com/assets/avatar-1.jpg","fqdn":"trezoriostat.com","domain":"trezoriostat.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezoriostat.com/","date":"2026-01-07T14:42:35.616Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/avatar-1.jpg HTTP/1.1\r\nHost: trezoriostat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezoriostat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T15:40:42.100018Z","times_seen":17857324,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":2,"connect":26,"send":0,"wait":0,"receive":0,"ssl":-1},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezoriostat.com/assets/avatar-3.jpg","fqdn":"trezoriostat.com","domain":"trezoriostat.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezoriostat.com/","date":"2026-01-07T14:42:35.622Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/avatar-3.jpg HTTP/1.1\r\nHost: trezoriostat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezoriostat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T15:40:42.100018Z","times_seen":17857324,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":2,"connect":26,"send":0,"wait":0,"receive":0,"ssl":-1},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezoriostat.com/assets/avatar-2.jpg","fqdn":"trezoriostat.com","domain":"trezoriostat.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezoriostat.com/","date":"2026-01-07T14:42:35.618Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/avatar-2.jpg HTTP/1.1\r\nHost: trezoriostat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezoriostat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T15:40:42.100018Z","times_seen":17857324,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":1,"connect":26,"send":0,"wait":0,"receive":0,"ssl":-1},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezoriostat.com/assets/hero-bg.jpg","fqdn":"trezoriostat.com","domain":"trezoriostat.com","tld":"com"},"ip":{"addr":"144.31.228.146","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezoriostat.com/","date":"2026-01-07T14:42:35.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezoriostat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 21:07:34 GMT","end":"Sun, 22 Feb 2026 21:07:33 GMT"},"fingerprint":{"sha1":"57:E2:50:C7:16:83:FD:63:E6:6F:8F:3E:19:C6:9E:D2:74:68:6E:8C","sha256":"10:51:3E:66:E0:19:25:6B:80:9E:07:0D:35:8B:02:B1:AE:58:E5:11:E1:2C:1F:54:E1:14:67:69:84:4B:76:F3"}}},"request":{"raw":"GET /assets/hero-bg.jpg HTTP/1.1\r\nHost: trezoriostat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezoriostat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Jan 2026 14:42:35 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 186247\r\nLast-Modified: Mon, 24 Nov 2025 21:59:29 GMT\r\nConnection: keep-alive\r\nETag: \"6924d541-2d787\"\r\nExpires: Thu, 08 Jan 2026 14:42:35 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":186247,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x1024, components 3","md5":"9662cf1ee0b1025210bf158d286e4873","sha1":"fa8598c5a4313df71a5c89f19a635b265798bf24","sha256":"57323287b8ac3cf3671980c99adbf11291ea03cbf6d7d774ed94d4fbc7a4cf44","sha512":"73edbe378a2c560ff06d2f5a35afc6764dc234cf07c8585c59b95fc3644b3d02e888acf7aae0574fbef535d8485ab870aa2c2b70d3b0b9a614d5d9b87f329a59","ssdeep":"3072:rXMnyXgcViTHx5QPMSMI5CNYLRApyoAZHg5jtqsZc+JZ+ErdgrntmsQ097y:rrgbH8PMSMuugRJoAMxx5L+S8npQ0c","tlshash":"430413fdea69303cba66c23ff45b14298ab4a867d1b53b11022317c6e19e1e7527c1c7","first_seen":"2026-01-07T14:43:07.395609Z","last_seen":"2026-01-24T23:04:59.458684Z","times_seen":2,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":132,"dns":1,"connect":26,"send":0,"wait":115,"receive":120,"ssl":115},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezoriostat.com/assets/avatar-4.jpg","fqdn":"trezoriostat.com","domain":"trezoriostat.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezoriostat.com/","date":"2026-01-07T14:42:35.628Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/avatar-4.jpg HTTP/1.1\r\nHost: trezoriostat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezoriostat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T15:40:42.100018Z","times_seen":17857324,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":2,"connect":27,"send":0,"wait":0,"receive":0,"ssl":-1},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezoriostat.com/assets/hero-bg_variant_1.jpg","fqdn":"trezoriostat.com","domain":"trezoriostat.com","tld":"com"},"ip":{"addr":"144.31.228.146","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezoriostat.com/","date":"2026-01-07T14:42:35.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezoriostat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 21:07:34 GMT","end":"Sun, 22 Feb 2026 21:07:33 GMT"},"fingerprint":{"sha1":"57:E2:50:C7:16:83:FD:63:E6:6F:8F:3E:19:C6:9E:D2:74:68:6E:8C","sha256":"10:51:3E:66:E0:19:25:6B:80:9E:07:0D:35:8B:02:B1:AE:58:E5:11:E1:2C:1F:54:E1:14:67:69:84:4B:76:F3"}}},"request":{"raw":"GET /assets/hero-bg_variant_1.jpg HTTP/1.1\r\nHost: trezoriostat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezoriostat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Jan 2026 14:42:35 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 199563\r\nLast-Modified: Mon, 24 Nov 2025 21:59:29 GMT\r\nConnection: keep-alive\r\nETag: \"6924d541-30b8b\"\r\nExpires: Thu, 08 Jan 2026 14:42:35 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":199563,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x1024, components 3","md5":"a8c471efeb3b5c69b97851fd3414bb96","sha1":"7fdb67f89a002a9ded808b672eaaf828a92541c3","sha256":"9bb674d55b3e26952c3a3a9191cbfcba443e378c18a62003932ab10b6d1f9b52","sha512":"3f2a30b59cbde8fc6b42b244ec6ebebc0c3f94b0ff6a4feb7923f3442682d4f9ef24d585d99847be89c0665feacad10795f0052ae5b68f0593fb24bcb4b231c2","ssdeep":"3072:O6TdQ8wThOlfaUsWUTwzDEpnS8Nk2UZX7Vk4cPT4zbYj/kRFUnXn+Likq:jdPlHvUTnS82X7VtCT0O/kXcn+Q","tlshash":"db14124077b34828c7a844599a84588735e3f3696d3ff0e03a166e447b97b1a1fd0afe","first_seen":"2026-01-07T14:43:07.39825Z","last_seen":"2026-01-24T23:04:59.44799Z","times_seen":2,"resource_available":false,"data":null}},"time_used":526,"timings":{"blocked":130,"dns":4,"connect":26,"send":0,"wait":107,"receive":144,"ssl":110},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"trezoriostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
