{"report_id":"50916bc2-530a-414c-944d-303a5214f675","version":6,"status":"done","tags":[],"date":"2026-03-07T01:02:04Z","url":{"schema":"https","addr":"www.trezor49.vip/#/home","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":0,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"final":{"url":{"schema":"https","addr":"www.trezor49.vip/#/home","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"title":"trezor","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.trezor49.vip/#/home","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":0,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-11T01:02:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-07T01:01:42Z","timestamp":1772845302,"ip_dst":{"addr":"Client IP","port":58648,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"134.122.135.171","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 25","source":"{\"timestamp\":\"2026-03-07T01:01:42.319206+0000\",\"flow_id\":2120506840310535,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"134.122.135.171\",\"src_port\":443,\"dest_ip\":\"172.18.0.37\",\"dest_port\":58648,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400024,\"rev\":4421,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 25\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2026-03-07T01:01:41.975623+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"www.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"ht.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"admin.trezor82.cz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"admin.trezor82.cz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.trezor49.vip","ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"domain_registered":"2026-03-02","domain_rank":0,"first_seen":"2026-03-07T01:02:09.168045Z","last_seen":"2026-03-07T01:02:09.168045Z","alert_count":30,"request_count":30,"received_data":6839422,"sent_data":13644,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"amCharts","description":"amCharts is a JavaScript-based interactive charts and maps programming library and tool.","website":"https://amcharts.com","common_platform_enumeration":"","icon":"amCharts.svg","categories":["JavaScript graphics"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"ht.trezor49.vip","ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"domain_registered":"2026-03-02","domain_rank":0,"first_seen":"2026-03-07T01:02:09.14929Z","last_seen":"2026-03-07T01:02:09.149291Z","alert_count":12,"request_count":12,"received_data":28627,"sent_data":6648,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"admin.trezor82.cz","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-02-04","domain_rank":0,"first_seen":"2026-03-07T01:02:09.15079Z","last_seen":"2026-03-07T01:02:09.150791Z","alert_count":2,"request_count":1,"received_data":0,"sent_data":560,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.bootcdn.net","ip":{"addr":"14.128.63.75","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2014-08-02","domain_rank":692530,"first_seen":"2019-03-12T16:59:36Z","last_seen":"2026-03-01T05:56:41.478731Z","alert_count":0,"request_count":1,"received_data":46519,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-01T22:28:03.022415Z","alert_count":0,"request_count":1,"received_data":3793,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.trezor49.vip/static/Kline/charting_library/charting_library.min.js","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b4daca49ae2c0225a9232dea2148df1","sha1":"fd3711c6a439061420442f2a57b0b3a2968d3625","sha256":"eed6506775e8d1fca20b61a590e91c42c82550d2befee83f5d08f163bae4b296","sha512":"259daa40d4b442672f4cbb730e8f148b3488ccd2d18db890875edc411bd093eda9a8fb8933dd2896915ddbdb0585d8bf3755c576d61375e780d68b3afec254ff","ssdeep":"192:9o937kYFUdQ+lr6lw2rfnJ8NRLP6tyPPv1id3Kuv/ISJhv+HIhJPh3F6R:StkYFUG+lD2rfnaNRLP6ty9iJKQ/ISJ0","tlshash":"90123258ed2479320acb40f4427f290f9235d278d84a44ed3c94e6ec59fd847a96fbb8","size":9902,"data":"","first_seen":"2023-03-07T13:00:08Z","last_seen":"2026-07-22T05:19:33.31693Z","times_seen":198,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/libs/swiper-5.3.8/package/js/swiper.min.js","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"5faa037573ac81b834e6ae2f8d037eb8","sha1":"686df7c00c0face2a7855f2ff3c1b4a23b50c902","sha256":"e13f9bfd7e1c909c8d88b17650b1926ddfc66a9009f9447ea0729d2572a157eb","sha512":"948fd57feaa1665462384790747b2d4573c6b644b2b0a99f3161b9cad7c0d13e25a217c44e57aa7b79e895075fb1539705f2f4003440af82f532249352705cc2","ssdeep":"1536:uE2qXxfeSGcfkqi2ZrWK8ievlK/CiiSsWRLK7A3d6UKBjY4vHgZsUgeAq5qpBgTX:VNkopdepFscUKi+HgZsUgeAq5qMT82","tlshash":"56d3194eb39061a551e36257535e8241a3b72809b80ad0ac35b688d79dbde4c13bfffc","size":139797,"data":"","first_seen":"2023-03-07T14:36:18Z","last_seen":"2026-07-26T07:43:10.394084Z","times_seen":303,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/libs/popper.min.js","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb572267def5eeb9c320e89ac4896691","sha1":"6f9bf6cbf9d34323fa0173181af910a02d7e970f","sha256":"3eb02ee1a4115989f36a398cce144d32dcbb104647363728188f53ccad635ce2","sha512":"3e1ef1b8a9838c17f8ef5fbd283d73aab403506ab1aae6640ea8bc889f5ed74726cb4bef118de085c0ff7d112ce21c75da4f4f827a599766fee2b7855f8fff0a","ssdeep":"768:R2oVnfhIiL13D+4bOSawrU3Xv0OdFTR2oLNhDR0MGiDi+XrJRs+dAOurfCSO7DRD:d5xT+4bOkruFTRPxhVR9M+deC/qmo/yb","tlshash":"f0e262887ad171358637f36ad96fc90df336166b1386600235bca0991f71da0927aefc","size":33835,"data":"","first_seen":"2023-03-26T01:50:35Z","last_seen":"2026-07-22T05:19:33.333535Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/libs/amcharts.min.js","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ca5ce1959014a4221b3e11819b72e63","sha1":"55250b3b1b08ee71404e196ff8f40610d0c9b96c","sha256":"2da5f3fa2ff085aaafe5ade6a6009087869dc4a667fb798a0efa1de0a0f1e49d","sha512":"0922fd3301071245ebdc6dc504778f3708c4c09d5a30ac9c068ec51dde4556d7715e3df650c978754b8ec9cf36e93beffc443aec0daa625af00ddeea90e90561","ssdeep":"1536:G4R7FTK6LoxkJQ4YYYrZm3QiqCMy0dgJb8SJdHAoX+OUo+LJb2AKSfdtF8DfF+Ci:N9c5yfJxj7w","tlshash":"04e3a499f794ba21478361e8882f140ee33b259d882850ecb6b5c5e36c7554a133ffbd","size":144071,"data":"","first_seen":"2023-03-10T08:16:23Z","last_seen":"2026-07-22T05:19:33.334031Z","times_seen":104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/js/vendor.e46f7f9f3d0269bdeb19.js","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"b49b0210e1875226309d85e753676550","sha1":"4e0d3ed3ffdf36ba278b2ea51ece04afe8139abe","sha256":"789f2f7f04b8ca1d8d7559586830560aa8ec20ac02db6ef7fd018dacfb8e8b26","sha512":"90d449fbec624ce624c2becddfba700529362098899ec91af60a539f8b1d235de478132a1ea17ee57584196b2353398d7bdc76ed3a9f6e8603e54b16c320a634","ssdeep":"24576:waaZrO5x0QXUG72NG/Edum6Dn9e4t4eCrqVQPQ6APfq:waaZrO5eQXUG7CGYjY9e4t5CuqQ6APfq","tlshash":"7275088df2d1b47147a760a0402f150bf23b696da40a80acf679d8ea6cbc94d513bf7d","size":1667459,"data":"","first_seen":"2026-03-07T01:02:16.282754Z","last_seen":"2026-03-07T01:26:36.545145Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/#/home","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"2c895b2a2e0105ecc545f35b9b0ed0ba","sha1":"e86a32086850493b477adc7844dc414f39ffead9","sha256":"8c80461fb5c77b3147062f19933fb6dd48770d160956c2153c04cadc1eb6aabb","sha512":"5b21498d9f4c23bf07d28949970df66f22fb17d1273ad945c62e2bd7a476a813adcb7b00fbd0ae83f3d776bebf4d282d6a0eb5e1d2fcbc1b6379c85b3dd497d4","ssdeep":"","tlshash":"00d0a71b72d708330cdb3cef9a97b3506c600502a81d4505705da2445f15b44d067381","size":245,"data":"","first_seen":"2025-03-06T04:57:40.152116Z","last_seen":"2026-07-22T05:19:33.347127Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/libs/skroll.min.js","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"c68530c7dbc64baca30b1cda39a0880b","sha1":"cc393b406c412fe3e2332aa63969129ae715ff11","sha256":"cadbdf90bb658eced8853fa02f088d60dbd89c3a9df68c89e3bcb35f18ab00d2","sha512":"778b90b872f0b1007786b364dd94be6393239ad0ef3079ccbc959ba7f3b60190d38f00e2df68951708e99982fcecd9ef4957554447863304426d215459b75b30","ssdeep":"96:z8PFR9CcA4kge9RrA5Sf5Q14f5zahcl0ZCIkBlkgdekLHkIeP9MCEAdyhxrdylGF:YdR9mMiRaYQQ4cj","tlshash":"c6d16dcda6a0104d49cb32b3d1cf5f54033990963ca299b8b375e18a5d736ce629bb9c","size":6177,"data":"","first_seen":"2023-03-10T08:16:23Z","last_seen":"2026-07-22T05:19:33.335463Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/js/custom.js","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"02865efe8789a5c9931e8b0b377305d1","sha1":"4a579d187823e3838043ad07de535e2ad6a28a8d","sha256":"9eceaf6a7fcadd6dc86aa949affb9eef5f4fc875ede998e7f6a502a1ab78217b","sha512":"8f89d2f2995e2bdefa98532958f43ef87814bcff692d5de4adfc2e21ffa38ca23eda987ce768ebb61286f3757fbbaa89c9fcebc36903d0c22b9dbb1eee34a474","ssdeep":"384:ugaVFwJ7fVjLzPT4iZnQ6npW9ShQodhbU8kBxuETH82UO:ZnpW9ShQodhbU8YdHhx","tlshash":"26e28558ed6d12b65e7223aacbba5103e66090133501bb263cdc62761f3581863fdff6","size":32885,"data":"","first_seen":"2023-03-26T01:50:36Z","last_seen":"2026-07-22T05:19:33.313333Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/libs/jquery.mCustomScrollbar.js","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"50c803e1483b1bbb1531fea61f849d98","sha1":"6643dec32d981aeeda46f85ee130d74f14732bfe","sha256":"72f572c5dd07fac37e4163060402399196415573f52a70526f0e8a848bf1cff3","sha512":"0d629ec0f1124ecef1b8825683be82bdfad7bfdc108759b9b49a23f8471c85ef65ebb132fee861e7786f0f5e4c2f28f1685260f7f8b516c54757274bad5b1122","ssdeep":"1536:nEorxUmVhC3gSFeqmmmV6e57Otjb08ntV8:XKgSK48","tlshash":"f893c7823f0c34eb42efd31e543f8249ee2dd17b8301b4d9b4e8996869d055593afa78","size":95406,"data":"","first_seen":"2023-03-07T01:42:51Z","last_seen":"2026-07-25T07:37:41.033456Z","times_seen":328,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5843dbdc71ff8014a5eafd346a262da","sha1":"127e1d971efab9341db8079f10663dc28e8e0a2f","sha256":"8e73a30d35c83ea6a597c3343324d2b7df097ad26e67b62efb5266ee12d317b5","sha512":"ac28dfa1a6fd09528e1ffc3f4fa19b0719c01f9033872e3eab51175b95c451179f1db22445b43ef9947e1810a5a37fdddeae7cdd7fe03b814a98e16e8642ab74","ssdeep":"","tlshash":"7e514241671662f381f60f36b12fb642713ad015140328b2b9bd9d90aba6deb5363d1e","size":2771,"data":"","first_seen":"2023-03-07T01:07:38Z","last_seen":"2026-07-26T06:00:48.512491Z","times_seen":16099,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/js/app.fc920122591b3539b680.js","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"42bc11a57ecd5a12208722c4143a4be8","sha1":"1949ee2a0f71abfc1c4f16eaabd0df970ad6a70f","sha256":"f2e37a802b2df0b15e1bd9c0471814f55499db843f9b94e858b08cfd74f48774","sha512":"8587e3b16c4a481763c7650dd907a2c8193f55a8c7f4c0dd91f1bf4ad5b60e27211b1f97e1c20ac823d5e1af55ef87d87e64c9616970ad4f6b5e6a5632976102","ssdeep":"12288:ie9w3Gip9RLj/AZnyZ/5g82JqTpuO9EysydwK6msNxEsyFHd4MDdPsupaP3VTa1R:1ip9RaEEIlvpaPA6HNHf20rsgkAGv","tlshash":"35954a36b0c8222d2077d104725f5eb8217e6b929110417a7e7e94e89fcf8987a3bf5d","size":1991420,"data":"","first_seen":"2026-03-07T01:02:16.285002Z","last_seen":"2026-03-07T01:26:36.546137Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/libs/jquery-3.4.1.min.js","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6b6350ee94a3ea74595c065cbf58af0","sha1":"b15f7cfa79519756dff1ad22553fd0ed09024343","sha256":"412b8ff9c5ab32b9019fcd84bcd4a54c0e265a14528474f4ee45b27a20abeaeb","sha512":"f5a9c6aee347c155e4dd796c51716b7447bc22ae44741fceb6bcfee02f955ad4063d38613f241108a3e1f3e1f540fcaed8d9848b9a0fb823c00955cf9a19efad","ssdeep":"1536:jTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmt:jgZm0H5HO5+gCKWZyPmHQ47GKR","tlshash":"a08319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88147,"data":"","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-07-25T16:23:32.513398Z","times_seen":5556,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/libs/bootstrap.min.js","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"87f286b5055b40e70fabe22e41971e26","sha1":"ad6c51220ed8619954709c043cf9981da2a6ac3a","sha256":"a12bc36f7735ba57765d1b7067ac88dd63aa08684f2545b0d558f449a116d466","sha512":"598a524448372587d89e5a062da78daf81d3f8e96f007bb32c663c0b0af6039eb1300684fbaa1accd2eddcd68d412ed3e8f8184cdfd9687dde09474977a66605","ssdeep":"768:EM7lRdQtk4nIiszRWlelFtYx8gCsRfyoRbMHZf0V27Q7pdl/l2+r7JsfLCUhITQL:EYRAxIigXF0mHOKrBWtEh1BLrp","tlshash":"c3737707b3a4793245abb036dc6f858af635669fa346411d717c80ec1f38858627aef8","size":74698,"data":"","first_seen":"2023-03-26T01:50:35Z","last_seen":"2026-07-22T05:19:33.343554Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/js/manifest.bc21c088fa1f9b0f9754.js","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"52d6c45a0eb5d4bb0fabeb7dd9b22011","sha1":"779be7026bbe5e56205778898193af374b958446","sha256":"62a34169317a8a3c202c332f3603f80de39e19e4d6507dda36d25ca7f465b477","sha512":"44f7fbbc7c2179e87d166a2a1a62f5d73dd550f2f1917a828d841fff128ce619550c4c80f83b8a23a8ce3dd3d81cb7faa832bb105078fd9eb1e9c05ce1b44e68","ssdeep":"","tlshash":"b63162ca33a2f8f513e758b8003f5155f1397811582ded88c34ad0a6bd32c658225bf9","size":1502,"data":"","first_seen":"2026-03-07T01:02:16.262169Z","last_seen":"2026-03-07T01:26:36.539263Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/#/home","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-07-26T06:27:44.077089Z","times_seen":99133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.bootcdn.net/ajax/libs/pako/1.0.9/pako.min.js","fqdn":"cdn.bootcdn.net","domain":"bootcdn.net","tld":"net"},"ip":{"addr":"14.128.63.75","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"99d196b019b1c2035542014be7358561","sha1":"2fe7fa28b970449af2117b0cafc7c6a0a57a96ca","sha256":"2a25910b08844294ca56e2e05b9a18594cec5edd4c0e7a113b6983cd51c987ac","sha512":"210140ffd744322c76b04c97bba05ec7c78010ef93c2f66b38e48408949bff8e6c43578c74d7a40699d4d7fb5589c6bd2fde27412a6d4bb911ea2d3c1ae6faf2","ssdeep":"768:7feBE5B3FA8/nVPg0kKWslV7hF/PGjMh+AEIzg49f3cG:zeE/9hF/+jNAEIEG3cG","tlshash":"9f23f6a630f651a82be118d8919b2b96217051322c0519f9e378dde43cb4dcfe17fa7e","size":45935,"data":"","first_seen":"2023-03-10T08:16:23Z","last_seen":"2026-07-22T05:19:33.327149Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/#/home","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"introduction_type":"Function","is_inline":false,"md5":"fcaea4b8885ca5c1fb3ddd5c490da5c6","sha1":"35745f87b37210d992a9ed534a593ae500b7adaa","sha256":"934c2008743c36db746a9d6ebd9f1b84ff11477edc55fbf7b599bbfa687f7272","sha512":"65e3bda5b8bd909b2fed0a25e3d6d3d7d2984601de4a906783c783097fcd8902ea1c2fa05d33619126415bc5000a72e8459eb81c971a85e2ddb374f9fd9231aa","ssdeep":"","tlshash":"889002c520d965518ad321a061261a46615a04f914a48c5091589c56287303092695bc","size":54,"data":"","first_seen":"2023-04-12T08:25:39Z","last_seen":"2026-07-26T05:28:42.202334Z","times_seen":23763,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/libs/amcharts-core.min.js","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"768caccf33a9240c6ade6f6af57b7e93","sha1":"ac42c7e02b428bf8ba3b4ef984b9159834e72651","sha256":"9390b348ff1da5a704cf3664eae6e8f8b6e73cbb547b0de39529bc4847291ac8","sha512":"a27a1560c3f30ba06d66d089c4cc9eb512b50a9545e1f7e3e7de2a25414e14bc98afe622b2940d470c3ce8cf66680c85b7b2964c0f5c601ff2c7b44c9e67123b","ssdeep":"6144:jOn5RLpCGjKNEarkbI79Chru8+3vonV+1c7SiAfMTXZIuN9tQ4p8PoyNRanj6K:7Ear1WX+3zimibNc4SPoyNR6","tlshash":"0815d688b795762143c3a1e8442f150be33b24aca42940ecf675d8e6acbd94d217bf7d","size":945584,"data":"","first_seen":"2023-03-10T08:16:23Z","last_seen":"2026-07-22T05:19:33.327628Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/#/home","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"5039b967fa921cb5c852f1edf8d9c5dd","sha1":"20cca3193591c91c9084a52a02382d1953e1dd1b","sha256":"c5661a0eef582314638f13386a6fac591c23cd456e97da98d95bb9c87f1d0c99","sha512":"273df8ff8531c3f53eccf3dce06917fa0a78c19f194b5c654a2d0ed7f4324fe173f1370365e14b7ff1719c519f77978a4dc80977722f88d6fe8f5c2d329ebebc","ssdeep":"","tlshash":"1411001e95332632083365468f8bbc08712a8097e4c6d8117a0ee68b9f3c06b847b7d9","size":1056,"data":"","first_seen":"2026-03-07T01:02:16.287183Z","last_seen":"2026-03-07T01:26:36.550136Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.trezor49.vip/static/css/jquery.mCustomScrollbar.min.css","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:41.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:50:18 GMT","end":"Sun, 31 May 2026 08:50:17 GMT"},"fingerprint":{"sha1":"96:84:64:5B:73:25:14:FD:7B:F7:6C:3C:40:F4:5B:24:A7:98:47:9A","sha256":"4B:2F:35:BD:05:76:C5:2A:7E:5A:79:27:1C:76:A5:AC:69:59:93:51:99:94:9C:33:0E:59:C7:53:F7:BC:7F:C8"}}},"request":{"raw":"GET /static/css/jquery.mCustomScrollbar.min.css HTTP/1.1\r\nHost: www.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 01:01:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 10 Feb 2026 08:01:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ae5c1-a757\"\r\nexpires: Sat, 07 Mar 2026 13:01:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42839,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (42839), with no line terminators","md5":"f59e3f4c0087b4d8ddc27bdd9c9ab92b","sha1":"fac9b521062feb5250c04d62128a8c3ddb312632","sha256":"247184981eb6f698a94e431a83d68c6b0df623cce57b6e29dc5a6c11e23aa195","sha512":"eaa92f05b0f29794c326d349882f1fa32115b81ea0c4c064acacbaed7a6a9c80f1caf2cb3c9ce64e3023d5d4497cd7665d6a83d7455b26878de29390a83c2f44","ssdeep":"768:hStyRbNWmYd7Z9t6vw7R01rnk6BcxL+zhRNxA5l2ng7ytcKaWDxQ:hStyRsmYd7Z9t6+R9","tlshash":"581317992a4336dffa4f447dbb81379a11fc37834552166cb0d75ca4ab88bf7a439402","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-07-26T04:54:02.385416Z","times_seen":15422,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":582,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"www.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/libs/bootstrap.min.js","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:41.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:50:18 GMT","end":"Sun, 31 May 2026 08:50:17 GMT"},"fingerprint":{"sha1":"96:84:64:5B:73:25:14:FD:7B:F7:6C:3C:40:F4:5B:24:A7:98:47:9A","sha256":"4B:2F:35:BD:05:76:C5:2A:7E:5A:79:27:1C:76:A5:AC:69:59:93:51:99:94:9C:33:0E:59:C7:53:F7:BC:7F:C8"}}},"request":{"raw":"GET /static/libs/bootstrap.min.js HTTP/1.1\r\nHost: www.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 01:01:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 10 Feb 2026 08:01:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ae5c1-123ca\"\r\nexpires: Sat, 07 Mar 2026 13:01:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74698,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1365), with CRLF line terminators","md5":"87f286b5055b40e70fabe22e41971e26","sha1":"ad6c51220ed8619954709c043cf9981da2a6ac3a","sha256":"a12bc36f7735ba57765d1b7067ac88dd63aa08684f2545b0d558f449a116d466","sha512":"598a524448372587d89e5a062da78daf81d3f8e96f007bb32c663c0b0af6039eb1300684fbaa1accd2eddcd68d412ed3e8f8184cdfd9687dde09474977a66605","ssdeep":"768:EM7lRdQtk4nIiszRWlelFtYx8gCsRfyoRbMHZf0V27Q7pdl/l2+r7JsfLCUhITQL:EYRAxIigXF0mHOKrBWtEh1BLrp","tlshash":"c3737707b3a4793245abb036dc6f858af635669fa346411d717c80ec1f38858627aef8","first_seen":"2023-03-26T01:50:35Z","last_seen":"2026-07-22T05:19:33.343554Z","times_seen":63,"resource_available":true,"data":null}},"time_used":1143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"www.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/libs/amcharts.min.js","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:41.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:50:18 GMT","end":"Sun, 31 May 2026 08:50:17 GMT"},"fingerprint":{"sha1":"96:84:64:5B:73:25:14:FD:7B:F7:6C:3C:40:F4:5B:24:A7:98:47:9A","sha256":"4B:2F:35:BD:05:76:C5:2A:7E:5A:79:27:1C:76:A5:AC:69:59:93:51:99:94:9C:33:0E:59:C7:53:F7:BC:7F:C8"}}},"request":{"raw":"GET /static/libs/amcharts.min.js HTTP/1.1\r\nHost: www.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 01:01:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 10 Feb 2026 08:01:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ae5c1-232c7\"\r\nexpires: Sat, 07 Mar 2026 13:01:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":144071,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"5ca5ce1959014a4221b3e11819b72e63","sha1":"55250b3b1b08ee71404e196ff8f40610d0c9b96c","sha256":"2da5f3fa2ff085aaafe5ade6a6009087869dc4a667fb798a0efa1de0a0f1e49d","sha512":"0922fd3301071245ebdc6dc504778f3708c4c09d5a30ac9c068ec51dde4556d7715e3df650c978754b8ec9cf36e93beffc443aec0daa625af00ddeea90e90561","ssdeep":"1536:G4R7FTK6LoxkJQ4YYYrZm3QiqCMy0dgJb8SJdHAoX+OUo+LJb2AKSfdtF8DfF+Ci:N9c5yfJxj7w","tlshash":"04e3a499f794ba21478361e8882f140ee33b259d882850ecb6b5c5e36c7554a133ffbd","first_seen":"2023-03-10T08:16:23Z","last_seen":"2026-07-22T05:19:33.334031Z","times_seen":104,"resource_available":true,"data":null}},"time_used":1142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"www.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/img/safe-thumb.ce748e7.png","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:44.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:50:18 GMT","end":"Sun, 31 May 2026 08:50:17 GMT"},"fingerprint":{"sha1":"96:84:64:5B:73:25:14:FD:7B:F7:6C:3C:40:F4:5B:24:A7:98:47:9A","sha256":"4B:2F:35:BD:05:76:C5:2A:7E:5A:79:27:1C:76:A5:AC:69:59:93:51:99:94:9C:33:0E:59:C7:53:F7:BC:7F:C8"}}},"request":{"raw":"GET /static/img/safe-thumb.ce748e7.png HTTP/1.1\r\nHost: www.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 01:01:44 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 10 Feb 2026 08:01:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ae5c1-272c\"\r\nexpires: Mon, 06 Apr 2026 01:01:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10028,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced","md5":"ce748e7ccfa7f31555610d7f3b2edcb1","sha1":"f13f43b2d17c639f7e2c7dd94395fab59653829c","sha256":"b2fbb5eb0ee93f28b2bdda964c84dfaa8e45452456b8ec1b63d1e09b7d52cbc3","sha512":"f17877f4e77a99f7d027a6d3f80f166abbd59797447fa61e7b5ab5f0b65c86978c688f864abed149047165ae5268daa9a5b91fc43010ff282606455cf41346a0","ssdeep":"192:kp4H3P1J7nnW1IeqT436yqO0bVLxb3ha5a7suG5BcoAg4CryM:/fReq9yqtbVLxLTKXrA7Cr/","tlshash":"6922bf68bf06cfb0e62c446284671c379d1796b4c4a112ec6c29609c8dde3fbe52e7c6","first_seen":"2023-09-20T06:42:39Z","last_seen":"2026-07-22T05:19:33.334976Z","times_seen":46,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"www.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/img/home_bg.3183fa5.png","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:44.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:50:18 GMT","end":"Sun, 31 May 2026 08:50:17 GMT"},"fingerprint":{"sha1":"96:84:64:5B:73:25:14:FD:7B:F7:6C:3C:40:F4:5B:24:A7:98:47:9A","sha256":"4B:2F:35:BD:05:76:C5:2A:7E:5A:79:27:1C:76:A5:AC:69:59:93:51:99:94:9C:33:0E:59:C7:53:F7:BC:7F:C8"}}},"request":{"raw":"GET /static/img/home_bg.3183fa5.png HTTP/1.1\r\nHost: www.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 01:01:44 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 10 Feb 2026 08:01:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ae5c1-87fb1\"\r\nexpires: Mon, 06 Apr 2026 01:01:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":556977,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2880 x 1200, 8-bit/color RGBA, non-interlaced","md5":"3183fa5c610a5babaf3b1dff37f15ab2","sha1":"24a1d08f165295f4465bf6b48792fb74f937bf26","sha256":"e862ea55b2f358e1798606bad2fc2960244f86ed2c9af51254fa708aacdc416f","sha512":"a04e3b9a2835efb313d93abb88146a444aab0d6ccdf95c5d3c8b854906a036c47cd8001d194729c568168b4a176cc6cdb98c7b4c97ab296eca45df295398ffdc","ssdeep":"12288:3ezLOmRIfFlQAhWahMTd6RO/c6FgdqDnZvR7NpFVK7sgga/eUr:xRQCWX6RO9FFJZp7egg","tlshash":"77c4ad169380487aabd4de4567c708d1c05e7a3ffd1fca902b5326db7a87bdc1938a09","first_seen":"2023-09-20T06:42:39Z","last_seen":"2026-07-22T05:19:33.323747Z","times_seen":36,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"www.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ht.trezor49.vip/api/categoryList","fqdn":"ht.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:44.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ht.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:38:21 GMT","end":"Sun, 31 May 2026 08:38:20 GMT"},"fingerprint":{"sha1":"49:36:E2:1E:F6:D1:B4:77:4C:C7:82:15:30:6D:40:F6:B6:EB:DD:D8","sha256":"5C:3A:33:56:01:04:23:7A:B7:D8:D4:E4:74:D1:46:F6:FD:97:E2:B3:E9:68:14:D1:F8:96:6B:18:17:26:38:64"}}},"request":{"raw":"OPTIONS /api/categoryList HTTP/1.1\r\nHost: ht.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang,x-requested-with\r\nReferer: https://www.trezor49.vip/\r\nOrigin: https://www.trezor49.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Mar 2026 01:01:45 GMT\r\naccess-control-allow-origin: https://www.trezor49.vip\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization,lang,x-requested-with\r\naccess-control-max-age: 0\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T08:24:09.399753Z","times_seen":17542373,"resource_available":true,"data":null}},"time_used":1595,"timings":{"blocked":597,"dns":54,"connect":271,"send":0,"wait":395,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"ht.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ht.trezor49.vip/api/index/logo","fqdn":"ht.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:45.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ht.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:38:21 GMT","end":"Sun, 31 May 2026 08:38:20 GMT"},"fingerprint":{"sha1":"49:36:E2:1E:F6:D1:B4:77:4C:C7:82:15:30:6D:40:F6:B6:EB:DD:D8","sha256":"5C:3A:33:56:01:04:23:7A:B7:D8:D4:E4:74:D1:46:F6:FD:97:E2:B3:E9:68:14:D1:F8:96:6B:18:17:26:38:64"}}},"request":{"raw":"GET /api/index/logo HTTP/1.1\r\nHost: ht.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nauthorization: bearer null\r\nOrigin: https://www.trezor49.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Mar 2026 01:01:45 GMT\r\naccess-control-allow-origin: https://www.trezor49.vip\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Authorization\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1024,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5a41760d252d517b328c6ba2330c11bf","sha1":"85c48ac6c3386b8ef681276082abe6dca01576ee","sha256":"f6b4a393774c2b23148160ff720f49e7b5bf48b042bbdeafe6918ebc419c70aa","sha512":"c0c8a7bcfcb38b9fdeb3b455a5755561e7d11b1b442ea0264b37c7ddbdb6389cbcd879b789153e26c24bbb41257edf0d290cf0bac776c84f82e09095b0961826","ssdeep":"","tlshash":"15116d5bdf4db5b3674022c0291fb984e9bb360bf809a62e560f9c04895c2d9206e4b4","first_seen":"2026-03-07T01:02:16.251793Z","last_seen":"2026-03-07T01:26:36.52986Z","times_seen":2,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"ht.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ht.trezor49.vip/api/indexList","fqdn":"ht.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:45.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ht.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:38:21 GMT","end":"Sun, 31 May 2026 08:38:20 GMT"},"fingerprint":{"sha1":"49:36:E2:1E:F6:D1:B4:77:4C:C7:82:15:30:6D:40:F6:B6:EB:DD:D8","sha256":"5C:3A:33:56:01:04:23:7A:B7:D8:D4:E4:74:D1:46:F6:FD:97:E2:B3:E9:68:14:D1:F8:96:6B:18:17:26:38:64"}}},"request":{"raw":"GET /api/indexList HTTP/1.1\r\nHost: ht.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nauthorization: bearer null\r\nOrigin: https://www.trezor49.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Mar 2026 01:01:45 GMT\r\naccess-control-allow-origin: https://www.trezor49.vip\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Authorization\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17249,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8f45e99874f38538d4ca866e85222e5c","sha1":"5e561fc96a32f185b74523b043942b28fbb90775","sha256":"4a515f7b7cf0801aad7581aa64c8127e0a41d4f75227f36c6778415b71682334","sha512":"35d36beb041293fc8f8645647d8ef48fa1f77cf428fc92b8a925e0766addf325702b8ac0e0767442cfe10c272012a8f07bcab2d7ccd8f15bfa01490bd1654a80","ssdeep":"192:AkUiGaWL7IkmcuPOpKTberOuFpksN/PnBIWLdmrg+Dv+LNcDTry1cOtvit/etUV3:QxuPO3/BIWhKgVLNWvyOs0","tlshash":"dd726503b71d12bfe56037c15c9f75646dec304eba42ee5e476ace2c82a42be6317521","first_seen":"2026-03-07T01:02:16.252805Z","last_seen":"2026-03-07T01:02:16.252805Z","times_seen":1,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":476,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"ht.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/libs/jquery-3.4.1.min.js","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:41.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:50:18 GMT","end":"Sun, 31 May 2026 08:50:17 GMT"},"fingerprint":{"sha1":"96:84:64:5B:73:25:14:FD:7B:F7:6C:3C:40:F4:5B:24:A7:98:47:9A","sha256":"4B:2F:35:BD:05:76:C5:2A:7E:5A:79:27:1C:76:A5:AC:69:59:93:51:99:94:9C:33:0E:59:C7:53:F7:BC:7F:C8"}}},"request":{"raw":"GET /static/libs/jquery-3.4.1.min.js HTTP/1.1\r\nHost: www.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 01:01:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 10 Feb 2026 08:01:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ae5c1-15853\"\r\nexpires: Sat, 07 Mar 2026 13:01:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88147,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators","md5":"a6b6350ee94a3ea74595c065cbf58af0","sha1":"b15f7cfa79519756dff1ad22553fd0ed09024343","sha256":"412b8ff9c5ab32b9019fcd84bcd4a54c0e265a14528474f4ee45b27a20abeaeb","sha512":"f5a9c6aee347c155e4dd796c51716b7447bc22ae44741fceb6bcfee02f955ad4063d38613f241108a3e1f3e1f540fcaed8d9848b9a0fb823c00955cf9a19efad","ssdeep":"1536:jTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmt:jgZm0H5HO5+gCKWZyPmHQ47GKR","tlshash":"a08319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-07-25T16:23:32.513398Z","times_seen":5556,"resource_available":true,"data":null}},"time_used":1144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"www.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/js/custom.js","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:41.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:50:18 GMT","end":"Sun, 31 May 2026 08:50:17 GMT"},"fingerprint":{"sha1":"96:84:64:5B:73:25:14:FD:7B:F7:6C:3C:40:F4:5B:24:A7:98:47:9A","sha256":"4B:2F:35:BD:05:76:C5:2A:7E:5A:79:27:1C:76:A5:AC:69:59:93:51:99:94:9C:33:0E:59:C7:53:F7:BC:7F:C8"}}},"request":{"raw":"GET /static/js/custom.js HTTP/1.1\r\nHost: www.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 01:01:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 10 Feb 2026 08:01:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ae5c1-8075\"\r\nexpires: Sat, 07 Mar 2026 13:01:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32885,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"02865efe8789a5c9931e8b0b377305d1","sha1":"4a579d187823e3838043ad07de535e2ad6a28a8d","sha256":"9eceaf6a7fcadd6dc86aa949affb9eef5f4fc875ede998e7f6a502a1ab78217b","sha512":"8f89d2f2995e2bdefa98532958f43ef87814bcff692d5de4adfc2e21ffa38ca23eda987ce768ebb61286f3757fbbaa89c9fcebc36903d0c22b9dbb1eee34a474","ssdeep":"384:ugaVFwJ7fVjLzPT4iZnQ6npW9ShQodhbU8kBxuETH82UO:ZnpW9ShQodhbU8YdHhx","tlshash":"26e28558ed6d12b65e7223aacbba5103e66090133501bb263cdc62761f3581863fdff6","first_seen":"2023-03-26T01:50:36Z","last_seen":"2026-07-22T05:19:33.313333Z","times_seen":56,"resource_available":true,"data":null}},"time_used":1140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"www.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/js/app.fc920122591b3539b680.js","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:41.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:50:18 GMT","end":"Sun, 31 May 2026 08:50:17 GMT"},"fingerprint":{"sha1":"96:84:64:5B:73:25:14:FD:7B:F7:6C:3C:40:F4:5B:24:A7:98:47:9A","sha256":"4B:2F:35:BD:05:76:C5:2A:7E:5A:79:27:1C:76:A5:AC:69:59:93:51:99:94:9C:33:0E:59:C7:53:F7:BC:7F:C8"}}},"request":{"raw":"GET /static/js/app.fc920122591b3539b680.js HTTP/1.1\r\nHost: www.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 01:01:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 02 Mar 2026 09:58:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a55f42-1e62fc\"\r\nexpires: Sat, 07 Mar 2026 13:01:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1991420,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65284), with no line terminators","md5":"a34a82cf2e3ce36556db082afd00f85c","sha1":"98c1c8104c375b887ca21a041cbd0d18843abb3e","sha256":"9365c051476f2c3b4a3d22b900f655d0db2e3bc04c3ea1f8c54253e1a88e15aa","sha512":"a0cbeba22273843cf7385c8492efc2a3b767d5764651298ac359cabb40fac7837d0f47f7d952161e644742453ba3c8e63122f93b86122528fae1c41343355713","ssdeep":"12288:ie9w3Gip9r3Qj/AZnyZ/5g82JqTpuO9EysydwK6msNxEsyFHd4MDdPsupaW:1ip9rPEEIlvpaW","tlshash":"ab352821b0e8131d287bd208795fefb439ae6b42915041b93e6664e89f8fc843677f4d","first_seen":"2026-03-07T01:02:16.255718Z","last_seen":"2026-03-07T01:02:16.255718Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"www.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/img/trade-thumb.344e618.png","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:44.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:50:18 GMT","end":"Sun, 31 May 2026 08:50:17 GMT"},"fingerprint":{"sha1":"96:84:64:5B:73:25:14:FD:7B:F7:6C:3C:40:F4:5B:24:A7:98:47:9A","sha256":"4B:2F:35:BD:05:76:C5:2A:7E:5A:79:27:1C:76:A5:AC:69:59:93:51:99:94:9C:33:0E:59:C7:53:F7:BC:7F:C8"}}},"request":{"raw":"GET /static/img/trade-thumb.344e618.png HTTP/1.1\r\nHost: www.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 01:01:44 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 10 Feb 2026 08:01:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ae5c1-2aa5\"\r\nexpires: Mon, 06 Apr 2026 01:01:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10917,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced","md5":"344e618aa9b19f14a303b0c0242a2f5a","sha1":"9cae5cdf740481e5c8228f4c6654ec6c0a7a1142","sha256":"ba1d8e25851bd113a514bf5cfdf19c32a1f056c4ee3a99e7870eafcb6f451ff6","sha512":"cbaf65f5963d0da0ec01fc9873b1235fe752c6a38049b8d3c16d9d4a9a4729786ba91eb44a01f0557da6897db7d24684b204d3de7f694bb9e7eb26a4025b0952","ssdeep":"192:kpsWXf5KmKeqMy9c/L7ezpm2FFFBkp/eZBiCzw+v5C5hzlWHb7:zqKLa5e02LF6/sPRsh2b7","tlshash":"2332c02b5342dc0a600e1dc00cd4d0008fd63ecc51e7e870a19bd4616ca6befd865abf","first_seen":"2023-09-20T06:42:39Z","last_seen":"2026-07-22T05:19:33.334474Z","times_seen":46,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"www.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ht.trezor49.vip/api/services","fqdn":"ht.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:44.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ht.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:38:21 GMT","end":"Sun, 31 May 2026 08:38:20 GMT"},"fingerprint":{"sha1":"49:36:E2:1E:F6:D1:B4:77:4C:C7:82:15:30:6D:40:F6:B6:EB:DD:D8","sha256":"5C:3A:33:56:01:04:23:7A:B7:D8:D4:E4:74:D1:46:F6:FD:97:E2:B3:E9:68:14:D1:F8:96:6B:18:17:26:38:64"}}},"request":{"raw":"OPTIONS /api/services HTTP/1.1\r\nHost: ht.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang,x-requested-with\r\nReferer: https://www.trezor49.vip/\r\nOrigin: https://www.trezor49.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Mar 2026 01:01:45 GMT\r\naccess-control-allow-origin: https://www.trezor49.vip\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization,lang,x-requested-with\r\naccess-control-max-age: 0\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T08:24:09.399753Z","times_seen":17542373,"resource_available":true,"data":null}},"time_used":1639,"timings":{"blocked":608,"dns":55,"connect":276,"send":0,"wait":412,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"ht.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/css/app.bae7c2e2ac7d129ceda696f7840df81f.css","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:41.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:50:18 GMT","end":"Sun, 31 May 2026 08:50:17 GMT"},"fingerprint":{"sha1":"96:84:64:5B:73:25:14:FD:7B:F7:6C:3C:40:F4:5B:24:A7:98:47:9A","sha256":"4B:2F:35:BD:05:76:C5:2A:7E:5A:79:27:1C:76:A5:AC:69:59:93:51:99:94:9C:33:0E:59:C7:53:F7:BC:7F:C8"}}},"request":{"raw":"GET /static/css/app.bae7c2e2ac7d129ceda696f7840df81f.css HTTP/1.1\r\nHost: www.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 01:01:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 10 Feb 2026 08:01:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ae5c1-3ae26\"\r\nexpires: Sat, 07 Mar 2026 13:01:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":241190,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2ac8e78aef1c056f8572b690eb27a150","sha1":"c43f5afa593184e1391fce14725e41fb06bfd543","sha256":"7bd35b9f4264496f45e082bd65ac33e7f89224fdbafc7e1c8bdc340b699fd38a","sha512":"df32b45a9214f91e25e483c504b0d8587ecebf3b972e332c7e05b17ae25cdd9a509b3f3e3e08c695c2a7510205043d8f6f938a647f6f0188a42ae9eb12c28b05","ssdeep":"1536:K28Y7yrW3Y+2gVOdQ4nie/F4IugW9cME5jhm78OaiZkW1Yu8e2GIenlfiLIcdY9S:PcLj6lfsYxNqifSt","tlshash":"7e34a7218b172167612bde6cb6c0ba895f28c323d4325b7bfe95781cc7d35891267a0f","first_seen":"2025-06-14T14:22:21.373634Z","last_seen":"2026-06-18T13:46:54.002535Z","times_seen":14,"resource_available":false,"data":null}},"time_used":872,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":872,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"www.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/img/trade.4fbbd27.png","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:44.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:50:18 GMT","end":"Sun, 31 May 2026 08:50:17 GMT"},"fingerprint":{"sha1":"96:84:64:5B:73:25:14:FD:7B:F7:6C:3C:40:F4:5B:24:A7:98:47:9A","sha256":"4B:2F:35:BD:05:76:C5:2A:7E:5A:79:27:1C:76:A5:AC:69:59:93:51:99:94:9C:33:0E:59:C7:53:F7:BC:7F:C8"}}},"request":{"raw":"GET /static/img/trade.4fbbd27.png HTTP/1.1\r\nHost: www.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 01:01:44 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 10 Feb 2026 08:01:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ae5c1-368e\"\r\nexpires: Mon, 06 Apr 2026 01:01:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13966,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"4fbbd27b57382c869a54791bc5374fdf","sha1":"95e2ff055693c78a104e93f20167083293062935","sha256":"0756b3ad5e8d6afe02057dd98ccf31180687fe6b5edeccc61fb54f7d7e24f2c6","sha512":"0a9c4e29a469106a832dbe5a42da3b287336feb3bc46f712f02b4036e241c571c9085db3fab3176f344fa106c5c24441f942b6fe1e246ce01c14de9a4544475f","ssdeep":"192:X52iFcUOE2+s9fUdNVjYP+yFsaIJ8wcPXloDu6c5bmB+NGn2ft5o2TvvbAqK91s4:QdE2+cwbyfE8wmCq60bmQGn6o2/KdDX","tlshash":"7252d150cd7e986cbf6d364414e54a3d84c295d7db48c07aea2507c5ec04b2359d6dcb","first_seen":"2023-09-20T06:42:39Z","last_seen":"2026-07-22T05:19:33.32087Z","times_seen":45,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"www.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/img/analysis-thumb.ad12687.png","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:44.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:50:18 GMT","end":"Sun, 31 May 2026 08:50:17 GMT"},"fingerprint":{"sha1":"96:84:64:5B:73:25:14:FD:7B:F7:6C:3C:40:F4:5B:24:A7:98:47:9A","sha256":"4B:2F:35:BD:05:76:C5:2A:7E:5A:79:27:1C:76:A5:AC:69:59:93:51:99:94:9C:33:0E:59:C7:53:F7:BC:7F:C8"}}},"request":{"raw":"GET /static/img/analysis-thumb.ad12687.png HTTP/1.1\r\nHost: www.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 01:01:44 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 10 Feb 2026 08:01:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ae5c1-2dfb\"\r\nexpires: Mon, 06 Apr 2026 01:01:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11771,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced","md5":"ad12687d6f943a28ce564607a9440fa0","sha1":"fb5b80ebac555a0c66c0bee1bdd28d89d1351313","sha256":"8fe66d2a6135490129a2ef9c183da297eee96d06c5b265da50ef309c78dbd8c1","sha512":"634fb2eb82db1c6b9652976c3e9462cb1f461c508c068729bc9e20d5f45f2ee9d802d61a8ff54517eccb0754b6b5cf3561788778910123288435cce1e2045448","ssdeep":"192:kpu0lQA3Yp2WOmVIqhCSOhO0VoWvTdz1W5bY/SxgyupcV7zucVjqNpeK5Pqj0:9xA3QO9qkVj7diOSwpcVnSpeKu0","tlshash":"e832d18d6e2bb50c66dac241339a543adce749427dd29a0cb1ea4ed34c301a6a4493cf","first_seen":"2023-09-20T06:42:39Z","last_seen":"2026-07-22T05:19:33.328987Z","times_seen":45,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"www.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ht.trezor49.vip/api/indexList","fqdn":"ht.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:44.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ht.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:38:21 GMT","end":"Sun, 31 May 2026 08:38:20 GMT"},"fingerprint":{"sha1":"49:36:E2:1E:F6:D1:B4:77:4C:C7:82:15:30:6D:40:F6:B6:EB:DD:D8","sha256":"5C:3A:33:56:01:04:23:7A:B7:D8:D4:E4:74:D1:46:F6:FD:97:E2:B3:E9:68:14:D1:F8:96:6B:18:17:26:38:64"}}},"request":{"raw":"OPTIONS /api/indexList HTTP/1.1\r\nHost: ht.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang,x-requested-with\r\nReferer: https://www.trezor49.vip/\r\nOrigin: https://www.trezor49.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Mar 2026 01:01:45 GMT\r\naccess-control-allow-origin: https://www.trezor49.vip\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization,lang,x-requested-with\r\naccess-control-max-age: 0\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T08:24:09.399753Z","times_seen":17542373,"resource_available":true,"data":null}},"time_used":1653,"timings":{"blocked":619,"dns":51,"connect":286,"send":0,"wait":402,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"ht.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/libs/swiper-5.3.8/package/css/swiper.min.css","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:41.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:50:18 GMT","end":"Sun, 31 May 2026 08:50:17 GMT"},"fingerprint":{"sha1":"96:84:64:5B:73:25:14:FD:7B:F7:6C:3C:40:F4:5B:24:A7:98:47:9A","sha256":"4B:2F:35:BD:05:76:C5:2A:7E:5A:79:27:1C:76:A5:AC:69:59:93:51:99:94:9C:33:0E:59:C7:53:F7:BC:7F:C8"}}},"request":{"raw":"GET /static/libs/swiper-5.3.8/package/css/swiper.min.css HTTP/1.1\r\nHost: www.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 01:01:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 10 Feb 2026 08:01:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ae5c1-357a\"\r\nexpires: Sat, 07 Mar 2026 13:01:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13690,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13425), with CRLF line terminators","md5":"5eaa41b0ba32cbe56094525b97f776bb","sha1":"20bad4ebf046c9cd1b53e9601bd2d4a331655792","sha256":"26131597dbca0b6967b126410695c81499c6695a950f71e8fcd1bffa27f305b2","sha512":"bedd6543466f0609f0f5b6e3002347726f3cc572afc7f114a97c8a9f3f299151739494dca56de0d6f6a120919004aa5931da42703cf24429b877f41c9507ab6e","ssdeep":"384:NQUbeQS7Rgx9BU0m/XCcif65W/1mXA82FHpx:N5b67gbhm/XDif65W/1mXA82Fn","tlshash":"2f52236417003837f3774f6e46a1e6b59f60cc838a934d9db2c0dd44d6f98b9121eb95","first_seen":"2023-04-18T23:35:15Z","last_seen":"2026-07-25T08:22:33.809145Z","times_seen":179,"resource_available":false,"data":null}},"time_used":852,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":852,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"www.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/libs/jquery.mCustomScrollbar.js","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:41.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:50:18 GMT","end":"Sun, 31 May 2026 08:50:17 GMT"},"fingerprint":{"sha1":"96:84:64:5B:73:25:14:FD:7B:F7:6C:3C:40:F4:5B:24:A7:98:47:9A","sha256":"4B:2F:35:BD:05:76:C5:2A:7E:5A:79:27:1C:76:A5:AC:69:59:93:51:99:94:9C:33:0E:59:C7:53:F7:BC:7F:C8"}}},"request":{"raw":"GET /static/libs/jquery.mCustomScrollbar.js HTTP/1.1\r\nHost: www.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 01:01:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 10 Feb 2026 08:01:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ae5c1-174ae\"\r\nexpires: Sat, 07 Mar 2026 13:01:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95406,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (732), with CRLF line terminators","md5":"50c803e1483b1bbb1531fea61f849d98","sha1":"6643dec32d981aeeda46f85ee130d74f14732bfe","sha256":"72f572c5dd07fac37e4163060402399196415573f52a70526f0e8a848bf1cff3","sha512":"0d629ec0f1124ecef1b8825683be82bdfad7bfdc108759b9b49a23f8471c85ef65ebb132fee861e7786f0f5e4c2f28f1685260f7f8b516c54757274bad5b1122","ssdeep":"1536:nEorxUmVhC3gSFeqmmmV6e57Otjb08ntV8:XKgSK48","tlshash":"f893c7823f0c34eb42efd31e543f8249ee2dd17b8301b4d9b4e8996869d055593afa78","first_seen":"2023-03-07T01:42:51Z","last_seen":"2026-07-25T07:37:41.033456Z","times_seen":328,"resource_available":true,"data":null}},"time_used":1141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"www.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/js/manifest.bc21c088fa1f9b0f9754.js","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:41.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:50:18 GMT","end":"Sun, 31 May 2026 08:50:17 GMT"},"fingerprint":{"sha1":"96:84:64:5B:73:25:14:FD:7B:F7:6C:3C:40:F4:5B:24:A7:98:47:9A","sha256":"4B:2F:35:BD:05:76:C5:2A:7E:5A:79:27:1C:76:A5:AC:69:59:93:51:99:94:9C:33:0E:59:C7:53:F7:BC:7F:C8"}}},"request":{"raw":"GET /static/js/manifest.bc21c088fa1f9b0f9754.js HTTP/1.1\r\nHost: www.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 01:01:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 10 Feb 2026 08:01:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ae5c1-5de\"\r\nexpires: Sat, 07 Mar 2026 13:01:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1502,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1502), with no line terminators","md5":"52d6c45a0eb5d4bb0fabeb7dd9b22011","sha1":"779be7026bbe5e56205778898193af374b958446","sha256":"62a34169317a8a3c202c332f3603f80de39e19e4d6507dda36d25ca7f465b477","sha512":"44f7fbbc7c2179e87d166a2a1a62f5d73dd550f2f1917a828d841fff128ce619550c4c80f83b8a23a8ce3dd3d81cb7faa832bb105078fd9eb1e9c05ce1b44e68","ssdeep":"","tlshash":"b63162ca33a2f8f513e758b8003f5155f1397811582ded88c34ad0a6bd32c658225bf9","first_seen":"2026-03-07T01:02:16.262169Z","last_seen":"2026-03-07T01:26:36.539263Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"www.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/img/tech.930409a.png","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:44.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:50:18 GMT","end":"Sun, 31 May 2026 08:50:17 GMT"},"fingerprint":{"sha1":"96:84:64:5B:73:25:14:FD:7B:F7:6C:3C:40:F4:5B:24:A7:98:47:9A","sha256":"4B:2F:35:BD:05:76:C5:2A:7E:5A:79:27:1C:76:A5:AC:69:59:93:51:99:94:9C:33:0E:59:C7:53:F7:BC:7F:C8"}}},"request":{"raw":"GET /static/img/tech.930409a.png HTTP/1.1\r\nHost: www.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 01:01:44 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 10 Feb 2026 08:01:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ae5c1-5f60\"\r\nexpires: Mon, 06 Apr 2026 01:01:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24416,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"930409aceb2d06ababa68f3c87d34745","sha1":"ec030443abd7c6e11851ef2f6c269df88459f69e","sha256":"7426622ace5688b52c6b8e709809da6f55566fe4e88ac09a7bce89518b913912","sha512":"c695837167c479ae41eb57ba4e75854d0602c14a7e94f885ce929683062d74403ad3d09a3c0c043bc9a6a16d3d1ba1b0336dc6f59db8d4138b899b0f93cb1d17","ssdeep":"384:UVDY2NnWGf0mgtHMNog18/nimd661cPkxsyUghGZCPJRYZFhCQkxD2Z:TQT0mkMmnt4a+yUgPJaFhHkxDA","tlshash":"d6b2d033ffab8152c91df8471ceb0866a9355db455805b70830f494daeaa2e625ff10e","first_seen":"2023-09-20T06:42:39Z","last_seen":"2026-07-22T05:19:33.32424Z","times_seen":46,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"www.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ht.trezor49.vip/api/contact","fqdn":"ht.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:45.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ht.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:38:21 GMT","end":"Sun, 31 May 2026 08:38:20 GMT"},"fingerprint":{"sha1":"49:36:E2:1E:F6:D1:B4:77:4C:C7:82:15:30:6D:40:F6:B6:EB:DD:D8","sha256":"5C:3A:33:56:01:04:23:7A:B7:D8:D4:E4:74:D1:46:F6:FD:97:E2:B3:E9:68:14:D1:F8:96:6B:18:17:26:38:64"}}},"request":{"raw":"GET /api/contact HTTP/1.1\r\nHost: ht.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nauthorization: bearer null\r\nOrigin: https://www.trezor49.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Mar 2026 01:01:45 GMT\r\naccess-control-allow-origin: https://www.trezor49.vip\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Authorization\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":177,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7f4c4543dbc485b1e9296404c35adc17","sha1":"f6f7f9e767cbefc2ce25eb7dc5fbde85f02358af","sha256":"dd973b4aa855ea2ea64d7f5fe526b5c32fb5b7f601f91a57677cba31c9f05cae","sha512":"d47c6562bbdbb35ede286ef0ef4a60f12698b540dd9283398c98b82431be10e1b911920db2c2a206a939ae30e22d635d4ae1f7630e5d38e422413d7bbe950a6a","ssdeep":"","tlshash":"56c040615ca0845c3fc1d1c03db5f80855ac1f007afa717ec67443554f4dd15711d4d8","first_seen":"2026-03-07T01:02:16.264059Z","last_seen":"2026-03-07T01:26:36.530435Z","times_seen":2,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"ht.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ht.trezor49.vip/api/articleList?id=18","fqdn":"ht.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:45.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ht.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:38:21 GMT","end":"Sun, 31 May 2026 08:38:20 GMT"},"fingerprint":{"sha1":"49:36:E2:1E:F6:D1:B4:77:4C:C7:82:15:30:6D:40:F6:B6:EB:DD:D8","sha256":"5C:3A:33:56:01:04:23:7A:B7:D8:D4:E4:74:D1:46:F6:FD:97:E2:B3:E9:68:14:D1:F8:96:6B:18:17:26:38:64"}}},"request":{"raw":"GET /api/articleList?id=18 HTTP/1.1\r\nHost: ht.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nauthorization: bearer null\r\nOrigin: https://www.trezor49.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Mar 2026 01:01:45 GMT\r\naccess-control-allow-origin: https://www.trezor49.vip\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Authorization\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4486,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"36365d92b55fe3991d011b8233dbf136","sha1":"ea17c4522aae7dccb2d4e29b1a3b8137e9278595","sha256":"74e8ad581058b6b8f428ce4671098b200bf1efa9e7912293fcf98254dfebaeff","sha512":"eb8ee2098f0ad0c1a9b5c0b64155e29d8a8dc9d6950117a9bfff581a1490a7aeaa24c359a8e1941ce72b7d16e63d7ff2c9a1fd6e3685e1ebfdeeedf00c872b01","ssdeep":"96:e0UC1dnRaIYGuqOxb38KYVP2NSbkquGW1yq7jKPTkNaIYGuqObEG+URuEGCKUNG5:dU4pYGuq5KYVPeSfuGGJPfNpYGuqGL+/","tlshash":"b591a417fb5423b94ea50180211b75c672296148db33c8ea6a74cae60bdd63e8ff74dc","first_seen":"2026-03-07T01:02:16.264954Z","last_seen":"2026-03-07T01:26:36.54Z","times_seen":2,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"ht.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/#/home","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-07T01:01:40.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:50:18 GMT","end":"Sun, 31 May 2026 08:50:17 GMT"},"fingerprint":{"sha1":"96:84:64:5B:73:25:14:FD:7B:F7:6C:3C:40:F4:5B:24:A7:98:47:9A","sha256":"4B:2F:35:BD:05:76:C5:2A:7E:5A:79:27:1C:76:A5:AC:69:59:93:51:99:94:9C:33:0E:59:C7:53:F7:BC:7F:C8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 01:01:41 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 02 Mar 2026 09:49:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a55d37-b68\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"amCharts","description":"amCharts is a JavaScript-based interactive charts and maps programming library and tool.","website":"https://amcharts.com","common_platform_enumeration":"","icon":"amCharts.svg","categories":["JavaScript graphics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":2920,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1111)","md5":"9edb3995fffdf9caf710bdc1c029e7e3","sha1":"5640c2a64a9d2ed775f21ee86750650aae7ab98c","sha256":"2c09995e11ee22397e4a261238fe47107a225c05cae0c74f970cafdb7ff61221","sha512":"58d9a40a8d8a07770e7f20f47a03053bea9b0d6bd742acedb0f31d64f2d029e09db6461c4fa1e847a0c305bb90dafe2e5018d0606b0e4b0a69bc3ada3769d65f","ssdeep":"","tlshash":"9351200a6d29daae1c716d4a8a77f42ce0e6c5526d10d814fccc0dad8f783de093f982","first_seen":"2026-03-07T01:02:16.26603Z","last_seen":"2026-03-07T01:26:36.511047Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1554,"timings":{"blocked":633,"dns":61,"connect":283,"send":0,"wait":283,"receive":0,"ssl":290},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"www.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/css/bootstrap.min.css","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:41.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:50:18 GMT","end":"Sun, 31 May 2026 08:50:17 GMT"},"fingerprint":{"sha1":"96:84:64:5B:73:25:14:FD:7B:F7:6C:3C:40:F4:5B:24:A7:98:47:9A","sha256":"4B:2F:35:BD:05:76:C5:2A:7E:5A:79:27:1C:76:A5:AC:69:59:93:51:99:94:9C:33:0E:59:C7:53:F7:BC:7F:C8"}}},"request":{"raw":"GET /static/css/bootstrap.min.css HTTP/1.1\r\nHost: www.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 01:01:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 10 Feb 2026 08:01:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ae5c1-354c3\"\r\nexpires: Sat, 07 Mar 2026 13:01:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":218307,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (625), with CRLF line terminators","md5":"5f6601df027bd7e6193d3f6d49ec7a61","sha1":"21c8b4ed7edc69fbccd0be15f2156a7c3d6936a1","sha256":"09562d67f2fe2ed6acac5200946feed3a0ac12c6b7c5eaedceccd9e2e1270762","sha512":"93f765eeee4bcaa3602460c2e59cef669a4b4ba6f8433aa26d58f2a20256d9c0e6b4cdfff49d60468c69391eaf796b763fcbebe2b1fe2c6dd0758c1013e8037e","ssdeep":"1536:8puz5JZGvZ8Sm7MvvrCNcYyB7FM8eMdd3jIj8E5OQRCvi/0+EwR3rXP+bJG3xBJn:Ojh8SMDwSyGB4EajgLrugzrj","tlshash":"55246616e601210a9573cb7c53e16775ebbe0167ca02c5aa7eaf73444fb97d08d22e8c","first_seen":"2023-11-30T21:06:09Z","last_seen":"2026-07-22T05:19:33.336953Z","times_seen":58,"resource_available":false,"data":null}},"time_used":573,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":573,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"www.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/Kline/charting_library/charting_library.min.js","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:41.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:50:18 GMT","end":"Sun, 31 May 2026 08:50:17 GMT"},"fingerprint":{"sha1":"96:84:64:5B:73:25:14:FD:7B:F7:6C:3C:40:F4:5B:24:A7:98:47:9A","sha256":"4B:2F:35:BD:05:76:C5:2A:7E:5A:79:27:1C:76:A5:AC:69:59:93:51:99:94:9C:33:0E:59:C7:53:F7:BC:7F:C8"}}},"request":{"raw":"GET /static/Kline/charting_library/charting_library.min.js HTTP/1.1\r\nHost: www.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 01:01:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 10 Feb 2026 08:01:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ae5c1-26ae\"\r\nexpires: Sat, 07 Mar 2026 13:01:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9902,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9900), with CRLF line terminators","md5":"1b4daca49ae2c0225a9232dea2148df1","sha1":"fd3711c6a439061420442f2a57b0b3a2968d3625","sha256":"eed6506775e8d1fca20b61a590e91c42c82550d2befee83f5d08f163bae4b296","sha512":"259daa40d4b442672f4cbb730e8f148b3488ccd2d18db890875edc411bd093eda9a8fb8933dd2896915ddbdb0585d8bf3755c576d61375e780d68b3afec254ff","ssdeep":"192:9o937kYFUdQ+lr6lw2rfnJ8NRLP6tyPPv1id3Kuv/ISJhv+HIhJPh3F6R:StkYFUG+lD2rfnaNRLP6ty9iJKQ/ISJ0","tlshash":"90123258ed2479320acb40f4427f290f9235d278d84a44ed3c94e6ec59fd847a96fbb8","first_seen":"2023-03-07T13:00:08Z","last_seen":"2026-07-22T05:19:33.31693Z","times_seen":198,"resource_available":true,"data":null}},"time_used":852,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":852,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"www.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ht.trezor49.vip/api/index/logo","fqdn":"ht.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:44.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ht.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:38:21 GMT","end":"Sun, 31 May 2026 08:38:20 GMT"},"fingerprint":{"sha1":"49:36:E2:1E:F6:D1:B4:77:4C:C7:82:15:30:6D:40:F6:B6:EB:DD:D8","sha256":"5C:3A:33:56:01:04:23:7A:B7:D8:D4:E4:74:D1:46:F6:FD:97:E2:B3:E9:68:14:D1:F8:96:6B:18:17:26:38:64"}}},"request":{"raw":"OPTIONS /api/index/logo HTTP/1.1\r\nHost: ht.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang,x-requested-with\r\nReferer: https://www.trezor49.vip/\r\nOrigin: https://www.trezor49.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Mar 2026 01:01:45 GMT\r\naccess-control-allow-origin: https://www.trezor49.vip\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization,lang,x-requested-with\r\naccess-control-max-age: 0\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T08:24:09.399753Z","times_seen":17542373,"resource_available":true,"data":null}},"time_used":1589,"timings":{"blocked":587,"dns":52,"connect":262,"send":0,"wait":414,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"ht.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ht.trezor49.vip/api/contact","fqdn":"ht.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:44.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ht.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:38:21 GMT","end":"Sun, 31 May 2026 08:38:20 GMT"},"fingerprint":{"sha1":"49:36:E2:1E:F6:D1:B4:77:4C:C7:82:15:30:6D:40:F6:B6:EB:DD:D8","sha256":"5C:3A:33:56:01:04:23:7A:B7:D8:D4:E4:74:D1:46:F6:FD:97:E2:B3:E9:68:14:D1:F8:96:6B:18:17:26:38:64"}}},"request":{"raw":"OPTIONS /api/contact HTTP/1.1\r\nHost: ht.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang,x-requested-with\r\nReferer: https://www.trezor49.vip/\r\nOrigin: https://www.trezor49.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Mar 2026 01:01:45 GMT\r\naccess-control-allow-origin: https://www.trezor49.vip\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization,lang,x-requested-with\r\naccess-control-max-age: 0\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T08:24:09.399753Z","times_seen":17542373,"resource_available":true,"data":null}},"time_used":1654,"timings":{"blocked":619,"dns":58,"connect":282,"send":0,"wait":401,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"ht.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"admin.trezor82.cz/ws1","fqdn":"admin.trezor82.cz","domain":"trezor82.cz","tld":"cz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:44.435Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ws1 HTTP/1.1\r\nHost: admin.trezor82.cz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://www.trezor49.vip\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 6ACKtAnTjRea2w+D/y5xOg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T08:24:09.399753Z","times_seen":17542373,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"admin.trezor82.cz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"admin.trezor82.cz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/libs/swiper-5.3.8/package/js/swiper.min.js","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:41.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:50:18 GMT","end":"Sun, 31 May 2026 08:50:17 GMT"},"fingerprint":{"sha1":"96:84:64:5B:73:25:14:FD:7B:F7:6C:3C:40:F4:5B:24:A7:98:47:9A","sha256":"4B:2F:35:BD:05:76:C5:2A:7E:5A:79:27:1C:76:A5:AC:69:59:93:51:99:94:9C:33:0E:59:C7:53:F7:BC:7F:C8"}}},"request":{"raw":"GET /static/libs/swiper-5.3.8/package/js/swiper.min.js HTTP/1.1\r\nHost: www.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 01:01:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 10 Feb 2026 08:01:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ae5c1-22215\"\r\nexpires: Sat, 07 Mar 2026 13:01:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":139797,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65271), with CRLF line terminators","md5":"5faa037573ac81b834e6ae2f8d037eb8","sha1":"686df7c00c0face2a7855f2ff3c1b4a23b50c902","sha256":"e13f9bfd7e1c909c8d88b17650b1926ddfc66a9009f9447ea0729d2572a157eb","sha512":"948fd57feaa1665462384790747b2d4573c6b644b2b0a99f3161b9cad7c0d13e25a217c44e57aa7b79e895075fb1539705f2f4003440af82f532249352705cc2","ssdeep":"1536:uE2qXxfeSGcfkqi2ZrWK8ievlK/CiiSsWRLK7A3d6UKBjY4vHgZsUgeAq5qpBgTX:VNkopdepFscUKi+HgZsUgeAq5qMT82","tlshash":"56d3194eb39061a551e36257535e8241a3b72809b80ad0ac35b688d79dbde4c13bfffc","first_seen":"2023-03-07T14:36:18Z","last_seen":"2026-07-26T07:43:10.394084Z","times_seen":303,"resource_available":true,"data":null}},"time_used":858,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":858,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"www.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/libs/popper.min.js","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:41.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:50:18 GMT","end":"Sun, 31 May 2026 08:50:17 GMT"},"fingerprint":{"sha1":"96:84:64:5B:73:25:14:FD:7B:F7:6C:3C:40:F4:5B:24:A7:98:47:9A","sha256":"4B:2F:35:BD:05:76:C5:2A:7E:5A:79:27:1C:76:A5:AC:69:59:93:51:99:94:9C:33:0E:59:C7:53:F7:BC:7F:C8"}}},"request":{"raw":"GET /static/libs/popper.min.js HTTP/1.1\r\nHost: www.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 01:01:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 10 Feb 2026 08:01:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ae5c1-842b\"\r\nexpires: Sat, 07 Mar 2026 13:01:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33835,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (855), with CRLF line terminators","md5":"bb572267def5eeb9c320e89ac4896691","sha1":"6f9bf6cbf9d34323fa0173181af910a02d7e970f","sha256":"3eb02ee1a4115989f36a398cce144d32dcbb104647363728188f53ccad635ce2","sha512":"3e1ef1b8a9838c17f8ef5fbd283d73aab403506ab1aae6640ea8bc889f5ed74726cb4bef118de085c0ff7d112ce21c75da4f4f827a599766fee2b7855f8fff0a","ssdeep":"768:R2oVnfhIiL13D+4bOSawrU3Xv0OdFTR2oLNhDR0MGiDi+XrJRs+dAOurfCSO7DRD:d5xT+4bOkruFTRPxhVR9M+deC/qmo/yb","tlshash":"f0e262887ad171358637f36ad96fc90df336166b1386600235bca0991f71da0927aefc","first_seen":"2023-03-26T01:50:35Z","last_seen":"2026-07-22T05:19:33.333535Z","times_seen":62,"resource_available":true,"data":null}},"time_used":1144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"www.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/libs/skroll.min.js","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:41.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:50:18 GMT","end":"Sun, 31 May 2026 08:50:17 GMT"},"fingerprint":{"sha1":"96:84:64:5B:73:25:14:FD:7B:F7:6C:3C:40:F4:5B:24:A7:98:47:9A","sha256":"4B:2F:35:BD:05:76:C5:2A:7E:5A:79:27:1C:76:A5:AC:69:59:93:51:99:94:9C:33:0E:59:C7:53:F7:BC:7F:C8"}}},"request":{"raw":"GET /static/libs/skroll.min.js HTTP/1.1\r\nHost: www.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 01:01:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 10 Feb 2026 08:01:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ae5c1-1821\"\r\nexpires: Sat, 07 Mar 2026 13:01:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6177,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6177), with no line terminators","md5":"c68530c7dbc64baca30b1cda39a0880b","sha1":"cc393b406c412fe3e2332aa63969129ae715ff11","sha256":"cadbdf90bb658eced8853fa02f088d60dbd89c3a9df68c89e3bcb35f18ab00d2","sha512":"778b90b872f0b1007786b364dd94be6393239ad0ef3079ccbc959ba7f3b60190d38f00e2df68951708e99982fcecd9ef4957554447863304426d215459b75b30","ssdeep":"96:z8PFR9CcA4kge9RrA5Sf5Q14f5zahcl0ZCIkBlkgdekLHkIeP9MCEAdyhxrdylGF:YdR9mMiRaYQQ4cj","tlshash":"c6d16dcda6a0104d49cb32b3d1cf5f54033990963ca299b8b375e18a5d736ce629bb9c","first_seen":"2023-03-10T08:16:23Z","last_seen":"2026-07-22T05:19:33.335463Z","times_seen":88,"resource_available":true,"data":null}},"time_used":1139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"www.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/img/analysis.651e8e1.png","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:44.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:50:18 GMT","end":"Sun, 31 May 2026 08:50:17 GMT"},"fingerprint":{"sha1":"96:84:64:5B:73:25:14:FD:7B:F7:6C:3C:40:F4:5B:24:A7:98:47:9A","sha256":"4B:2F:35:BD:05:76:C5:2A:7E:5A:79:27:1C:76:A5:AC:69:59:93:51:99:94:9C:33:0E:59:C7:53:F7:BC:7F:C8"}}},"request":{"raw":"GET /static/img/analysis.651e8e1.png HTTP/1.1\r\nHost: www.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 01:01:44 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 10 Feb 2026 08:01:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ae5c1-7fdd\"\r\nexpires: Mon, 06 Apr 2026 01:01:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32733,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"651e8e119b9c1effb6058b41c92dc4dc","sha1":"9072443cbc17cb0440cb4e1d346146926cf07f66","sha256":"6a4089280b4eadb3dbfdfe852d4a3748230b424b0d5a2c87802b2d5c0adac13b","sha512":"1d14638bd5606316cd2648da3aa3ce899c107c4a833ccce3b8c318ab1c2c3db83fc6c33eb371bcedd32bcd00bedaa9e1a686ae698a18978ab3918effdbe75d4b","ssdeep":"768:6HADA9lNKb5DUwFdRL3eBsqSV2eE0L84VNwNAC:wycNKb5Q8dx3eBhf54jC","tlshash":"3be2f126c090345be756d0c332e2eba285b74097c7f1f6c9ff266dc7906eaa105e529c","first_seen":"2023-09-20T06:42:39Z","last_seen":"2026-07-22T05:19:33.338259Z","times_seen":46,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"www.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/img/tech-thumb.5e1d4ef.png","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:44.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:50:18 GMT","end":"Sun, 31 May 2026 08:50:17 GMT"},"fingerprint":{"sha1":"96:84:64:5B:73:25:14:FD:7B:F7:6C:3C:40:F4:5B:24:A7:98:47:9A","sha256":"4B:2F:35:BD:05:76:C5:2A:7E:5A:79:27:1C:76:A5:AC:69:59:93:51:99:94:9C:33:0E:59:C7:53:F7:BC:7F:C8"}}},"request":{"raw":"GET /static/img/tech-thumb.5e1d4ef.png HTTP/1.1\r\nHost: www.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 01:01:44 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 10 Feb 2026 08:01:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ae5c1-2989\"\r\nexpires: Mon, 06 Apr 2026 01:01:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10633,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced","md5":"5e1d4efa1b84c10c786a3c9a92fa8179","sha1":"5d59253f718d1028b3dd69802f68b8bab63da3db","sha256":"8316e5394d40b719c9ce2c8ffc900ee6b3f00f212a77a2a03870b516edbfa16d","sha512":"f14e93e98b1981d60c917d6e2fa68fd783063bef2eb7d2ca70e20263d642f3e25bf4a740fe2fa29163ea69824eadd4f3d1f9f84b274687a3915dad9ac4a2cd43","ssdeep":"192:kpOM8mg2UPVMx27DuO4woFEIgu+0TKBPy4yTdi9TdOMYoEPEXyLNm:i8VN37DQZFEI+aaPodi9xIE1","tlshash":"b322bf34f1f554274ec9e80d20b5b1c0a8418f059ba1694df9f26a2b8970bb3cdea5cb","first_seen":"2023-09-20T06:42:39Z","last_seen":"2026-07-22T05:19:33.338744Z","times_seen":45,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"www.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ht.trezor49.vip/api/articleList?id=18","fqdn":"ht.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:44.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ht.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:38:21 GMT","end":"Sun, 31 May 2026 08:38:20 GMT"},"fingerprint":{"sha1":"49:36:E2:1E:F6:D1:B4:77:4C:C7:82:15:30:6D:40:F6:B6:EB:DD:D8","sha256":"5C:3A:33:56:01:04:23:7A:B7:D8:D4:E4:74:D1:46:F6:FD:97:E2:B3:E9:68:14:D1:F8:96:6B:18:17:26:38:64"}}},"request":{"raw":"OPTIONS /api/articleList?id=18 HTTP/1.1\r\nHost: ht.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang,x-requested-with\r\nReferer: https://www.trezor49.vip/\r\nOrigin: https://www.trezor49.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Mar 2026 01:01:45 GMT\r\naccess-control-allow-origin: https://www.trezor49.vip\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization,lang,x-requested-with\r\naccess-control-max-age: 0\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T08:24:09.399753Z","times_seen":17542373,"resource_available":true,"data":null}},"time_used":1697,"timings":{"blocked":629,"dns":56,"connect":293,"send":0,"wait":418,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"ht.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/fonts/element-icons.535877f.woff","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:44.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:50:18 GMT","end":"Sun, 31 May 2026 08:50:17 GMT"},"fingerprint":{"sha1":"96:84:64:5B:73:25:14:FD:7B:F7:6C:3C:40:F4:5B:24:A7:98:47:9A","sha256":"4B:2F:35:BD:05:76:C5:2A:7E:5A:79:27:1C:76:A5:AC:69:59:93:51:99:94:9C:33:0E:59:C7:53:F7:BC:7F:C8"}}},"request":{"raw":"GET /static/fonts/element-icons.535877f.woff HTTP/1.1\r\nHost: www.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/static/css/app.bae7c2e2ac7d129ceda696f7840df81f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 01:01:44 GMT\r\ncontent-type: font/woff\r\ncontent-length: 28200\r\nlast-modified: Tue, 10 Feb 2026 08:01:05 GMT\r\netag: \"698ae5c1-6e28\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28200,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 28200, version 1.0","md5":"535877f50039c0cb49a6196a5b7517cd","sha1":"0000c4e27d38f9f8bbe4e58b5ce2477e589507a7","sha256":"ab40a58972be2ceab32e7e35dab3131b959aae63835d7bda1a79ae51f9a73c17","sha512":"da269b20f13fb5b0bb4628b75ec29e69bb2d36999e94b61a846cb58db679287a13d0aa38cdf64b2893558d183c4cc5df8da770e5a5b2a3288622cd4bd0e1c87b","ssdeep":"768:gOvv6ExpCVxUtrT6w8ClFd80EjPVerMKBaGXjAlEm:Hvv6xVWewtlFdGjPlkFjAlEm","tlshash":"b9c2e13197213ae9d9824ef876e498fef1651402290f390e8696adb3a98d5c73e16831","first_seen":"2023-04-05T15:22:49Z","last_seen":"2026-07-26T07:50:26.620758Z","times_seen":26973,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":616,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"www.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ht.trezor49.vip/api/categoryList","fqdn":"ht.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:45.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ht.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:38:21 GMT","end":"Sun, 31 May 2026 08:38:20 GMT"},"fingerprint":{"sha1":"49:36:E2:1E:F6:D1:B4:77:4C:C7:82:15:30:6D:40:F6:B6:EB:DD:D8","sha256":"5C:3A:33:56:01:04:23:7A:B7:D8:D4:E4:74:D1:46:F6:FD:97:E2:B3:E9:68:14:D1:F8:96:6B:18:17:26:38:64"}}},"request":{"raw":"GET /api/categoryList HTTP/1.1\r\nHost: ht.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nauthorization: bearer null\r\nOrigin: https://www.trezor49.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Mar 2026 01:01:45 GMT\r\naccess-control-allow-origin: https://www.trezor49.vip\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Authorization\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":284,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"eabe7d7b52cdb1fe60efd41fbdc0efc6","sha1":"2f86114de0d6300fbd7ebc7e1231775f909c5e4c","sha256":"3305a7f98ea071ea02a0cc78e3634fa3bc6f5f5dd933ce690d5934f24bf56b8d","sha512":"dfd7f8b4e2ef905af090188ab54b2a5c8e0de9caf285b5cd5fc49c49ab63f5565c53296dfd2d42da94cd04931a798e1143f96e865300760a5dfc323f34baab56","ssdeep":"","tlshash":"cbd02b9c571c6c6f8bc07dd02d8ff714a3cabc0712c14c816680dea802104d421376f5","first_seen":"2025-04-11T04:20:19.396438Z","last_seen":"2026-07-22T05:19:33.339195Z","times_seen":41,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"ht.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/libs/amcharts-core.min.js","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:41.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:50:18 GMT","end":"Sun, 31 May 2026 08:50:17 GMT"},"fingerprint":{"sha1":"96:84:64:5B:73:25:14:FD:7B:F7:6C:3C:40:F4:5B:24:A7:98:47:9A","sha256":"4B:2F:35:BD:05:76:C5:2A:7E:5A:79:27:1C:76:A5:AC:69:59:93:51:99:94:9C:33:0E:59:C7:53:F7:BC:7F:C8"}}},"request":{"raw":"GET /static/libs/amcharts-core.min.js HTTP/1.1\r\nHost: www.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 01:01:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 10 Feb 2026 08:01:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ae5c1-e6db0\"\r\nexpires: Sat, 07 Mar 2026 13:01:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":945584,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"768caccf33a9240c6ade6f6af57b7e93","sha1":"ac42c7e02b428bf8ba3b4ef984b9159834e72651","sha256":"9390b348ff1da5a704cf3664eae6e8f8b6e73cbb547b0de39529bc4847291ac8","sha512":"a27a1560c3f30ba06d66d089c4cc9eb512b50a9545e1f7e3e7de2a25414e14bc98afe622b2940d470c3ce8cf66680c85b7b2964c0f5c601ff2c7b44c9e67123b","ssdeep":"6144:jOn5RLpCGjKNEarkbI79Chru8+3vonV+1c7SiAfMTXZIuN9tQ4p8PoyNRanj6K:7Ear1WX+3zimibNc4SPoyNR6","tlshash":"0815d688b795762143c3a1e8442f150be33b24aca42940ecf675d8e6acbd94d217bf7d","first_seen":"2023-03-10T08:16:23Z","last_seen":"2026-07-22T05:19:33.327628Z","times_seen":100,"resource_available":true,"data":null}},"time_used":1143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"www.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.bootcdn.net/ajax/libs/pako/1.0.9/pako.min.js","fqdn":"cdn.bootcdn.net","domain":"bootcdn.net","tld":"net"},"ip":{"addr":"14.128.63.75","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:41.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootcdn.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 21 Jan 2026 23:34:51 GMT","end":"Tue, 21 Apr 2026 23:34:50 GMT"},"fingerprint":{"sha1":"5C:C8:11:2F:0B:B0:B8:17:14:6E:0C:14:1F:AC:CD:BD:EC:DE:7D:7F","sha256":"86:75:7F:60:24:1F:7D:9C:FB:03:AC:7B:B5:2D:43:40:1A:BD:34:3D:66:C4:02:80:7D:87:CA:85:D8:55:8A:25"}}},"request":{"raw":"GET /ajax/libs/pako/1.0.9/pako.min.js HTTP/1.1\r\nHost: cdn.bootcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodifed-Since, X-CSRF-TOKEN, X-Requested-With,token\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 07 Mar 2026 01:01:42 GMT\r\nexpires: 0\r\npragma: no-cache\r\nserver: nginx\r\nvary: Accept-Encoding\r\nx-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45935,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (45934)","md5":"99d196b019b1c2035542014be7358561","sha1":"2fe7fa28b970449af2117b0cafc7c6a0a57a96ca","sha256":"2a25910b08844294ca56e2e05b9a18594cec5edd4c0e7a113b6983cd51c987ac","sha512":"210140ffd744322c76b04c97bba05ec7c78010ef93c2f66b38e48408949bff8e6c43578c74d7a40699d4d7fb5589c6bd2fde27412a6d4bb911ea2d3c1ae6faf2","ssdeep":"768:7feBE5B3FA8/nVPg0kKWslV7hF/PGjMh+AEIzg49f3cG:zeE/9hF/+jNAEIEG3cG","tlshash":"9f23f6a630f651a82be118d8919b2b96217051322c0519f9e378dde43cb4dcfe17fa7e","first_seen":"2023-03-10T08:16:23Z","last_seen":"2026-07-22T05:19:33.327149Z","times_seen":82,"resource_available":true,"data":null}},"time_used":1929,"timings":{"blocked":776,"dns":104,"connect":341,"send":0,"wait":354,"receive":0,"ssl":350},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/js/vendor.e46f7f9f3d0269bdeb19.js","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:41.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:50:18 GMT","end":"Sun, 31 May 2026 08:50:17 GMT"},"fingerprint":{"sha1":"96:84:64:5B:73:25:14:FD:7B:F7:6C:3C:40:F4:5B:24:A7:98:47:9A","sha256":"4B:2F:35:BD:05:76:C5:2A:7E:5A:79:27:1C:76:A5:AC:69:59:93:51:99:94:9C:33:0E:59:C7:53:F7:BC:7F:C8"}}},"request":{"raw":"GET /static/js/vendor.e46f7f9f3d0269bdeb19.js HTTP/1.1\r\nHost: www.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 01:01:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 10 Feb 2026 08:01:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ae5c1-197183\"\r\nexpires: Sat, 07 Mar 2026 13:01:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1667459,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (51525)","md5":"c9dd5083a8316d01f1cec4e108479109","sha1":"3f1279a3acd6309d78cfd810d2005d08cab6052f","sha256":"c598b2734e532dc28c4d5301a670bb7fbc2e05900c93d4edc1622e8b2fd33c70","sha512":"7cfd93b9ebb8dfaacc33940be85c0bd3a7f8728b5b15e22818567b3c3ad2bdd9c8f3977b9acf2dddf12b2ed302945babb474fbeb3b4a796e55ad57e14b4bf29a","ssdeep":"12288:waaTx0OWGO5xvsDkRn22UG72vFG/EB3EamRte6zwSnb:waaZrO5x0QXUG72NG/Edum6Dnb","tlshash":"3c25f8cdf292b07143e721a0402f160ff23b6969644e8498f665e8e66cbd94d913bf3d","first_seen":"2026-03-07T01:02:16.276736Z","last_seen":"2026-03-07T01:26:36.515055Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"www.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:43.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 01:01:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1046\r\ncf-ray: 9d85abadc8e0a0f0-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec2-ad3\"\r\nlast-modified: Mon, 04 May 2020 16:11:46 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1412526\r\nexpires: Thu, 25 Feb 2027 01:01:43 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2FqoVPlf85xbbkBjMeIP2naTuzE0WFomJm4VP75upsvMh3hnRLp%2B%2B2wlbBjUEB5V%2F8PlFDEYZYRT7g%2Bp9Ys0YDf7kP2%2FZ0Z6EawPy4EAo1t3Lr6P50vWXxIF7vllOcBPS8d5mCiru\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2771,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2609)","md5":"d5843dbdc71ff8014a5eafd346a262da","sha1":"127e1d971efab9341db8079f10663dc28e8e0a2f","sha256":"8e73a30d35c83ea6a597c3343324d2b7df097ad26e67b62efb5266ee12d317b5","sha512":"ac28dfa1a6fd09528e1ffc3f4fa19b0719c01f9033872e3eab51175b95c451179f1db22445b43ef9947e1810a5a37fdddeae7cdd7fe03b814a98e16e8642ab74","ssdeep":"","tlshash":"7e514241671662f381f60f36b12fb642713ad015140328b2b9bd9d90aba6deb5363d1e","first_seen":"2023-03-07T01:07:38Z","last_seen":"2026-07-26T06:00:48.512491Z","times_seen":16099,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":17,"dns":1,"connect":1,"send":0,"wait":9,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/img/img18.6d9f195.jpg","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:44.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:50:18 GMT","end":"Sun, 31 May 2026 08:50:17 GMT"},"fingerprint":{"sha1":"96:84:64:5B:73:25:14:FD:7B:F7:6C:3C:40:F4:5B:24:A7:98:47:9A","sha256":"4B:2F:35:BD:05:76:C5:2A:7E:5A:79:27:1C:76:A5:AC:69:59:93:51:99:94:9C:33:0E:59:C7:53:F7:BC:7F:C8"}}},"request":{"raw":"GET /static/img/img18.6d9f195.jpg HTTP/1.1\r\nHost: www.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 01:01:44 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 10 Feb 2026 08:01:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ae5c1-f9c6\"\r\nexpires: Mon, 06 Apr 2026 01:01:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63942,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2880x580, components 3","md5":"6d9f1951adf4e5fe56fbede747e84d34","sha1":"f3d559d06472705496f54ac94a989ebb7ac4928a","sha256":"e376149ab9b0ce6a92599e821515fa096e78d8e97d4dbd8b0beec711ac50b352","sha512":"9e56e1ad9ae24bd8e135bc6d7362a18afae41f6470087d79b0a342d1afc8bef3fc821f35adf30d1872497977ea4eff049f531150d292da64cd647290befec426","ssdeep":"768:CM+kioK9BWObP36Jx26Lufa8KcU7ok2ioVBRZKgJS+xY3bby4KbIxQLGn:CEMWOb/OChK5kk2ioTbVk+xAe4KTGn","tlshash":"f953f16673856045dc2803b990a743159fa3eda9eb17ce323c7689bbda717d2bc0d324","first_seen":"2023-09-20T06:42:39Z","last_seen":"2026-07-22T05:19:33.315411Z","times_seen":39,"resource_available":false,"data":null}},"time_used":653,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":653,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"www.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ht.trezor49.vip/api/services","fqdn":"ht.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:45.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ht.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:38:21 GMT","end":"Sun, 31 May 2026 08:38:20 GMT"},"fingerprint":{"sha1":"49:36:E2:1E:F6:D1:B4:77:4C:C7:82:15:30:6D:40:F6:B6:EB:DD:D8","sha256":"5C:3A:33:56:01:04:23:7A:B7:D8:D4:E4:74:D1:46:F6:FD:97:E2:B3:E9:68:14:D1:F8:96:6B:18:17:26:38:64"}}},"request":{"raw":"GET /api/services HTTP/1.1\r\nHost: ht.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nauthorization: bearer null\r\nOrigin: https://www.trezor49.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Sat, 07 Mar 2026 01:01:45 GMT\r\naccess-control-allow-origin: https://www.trezor49.vip\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Authorization\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":169,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"91f2fd0c9db202cbb14968d2a02a82f6","sha1":"8a9ae1d5be6fc98f7622d7643dd6a1ba84350d47","sha256":"d9ab6045427979bd218dd5a8b7eb715d209102e09ea0a7ec9958f7ee7f83232a","sha512":"b5cb5fafc1ae4cce329684c0d79540bc72715ee3dc16aed9f0d2c6ff5c5eea14ff2d4117693a44f9bb8aee9db32149f37544fa970f225cb2d2186684e29b94c1","ssdeep":"","tlshash":"f8c08ccf2805ad6cf606b8612e8ba3c870c13486a0cc1c1148841a1c5302ae04052132","first_seen":"2024-08-20T14:44:13.092139Z","last_seen":"2026-07-22T05:19:33.324749Z","times_seen":58,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"ht.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/favicon.ico","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:45.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:50:18 GMT","end":"Sun, 31 May 2026 08:50:17 GMT"},"fingerprint":{"sha1":"96:84:64:5B:73:25:14:FD:7B:F7:6C:3C:40:F4:5B:24:A7:98:47:9A","sha256":"4B:2F:35:BD:05:76:C5:2A:7E:5A:79:27:1C:76:A5:AC:69:59:93:51:99:94:9C:33:0E:59:C7:53:F7:BC:7F:C8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 01:01:45 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 270398\r\nlast-modified: Tue, 10 Feb 2026 08:01:05 GMT\r\netag: \"698ae5c1-4203e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":270398,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256, 32 bits/pixel","md5":"7312c28ad80535cf1b6c6131c8b95dd7","sha1":"b01fffb4ca99bdcf60c87dd4dd1b004774aaf10d","sha256":"dd42a5db8aa696ff0362aa30a8e8981a01115390214fe5069551df1ef0d2da6a","sha512":"b6370c384f60142f231fbd7a70573fed0dac46e253cf0c19c50d46995a1f372f70cea438630da1a4185ecb9bcaad59cc7a03e94665fd5e95e76c138bbb44c759","ssdeep":"1536:byM+hufrnzEgq+5zVlPM6wQwy8DwmtdURPzzW5+4+0PpSzAFA:ohGjMpyTu","tlshash":"ff444ea3688513a9f82a4e35b02e0d6a46a7bf5b7e6cf16dbc41f4121bf32d14167c12","first_seen":"2026-03-07T01:02:16.27999Z","last_seen":"2026-03-07T01:26:36.52109Z","times_seen":2,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":290,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"www.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor49.vip/static/css/ionicons.min.css","fqdn":"www.trezor49.vip","domain":"trezor49.vip","tld":"vip"},"ip":{"addr":"202.95.1.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trezor49.vip/#/home","date":"2026-03-07T01:01:41.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trezor49.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:50:18 GMT","end":"Sun, 31 May 2026 08:50:17 GMT"},"fingerprint":{"sha1":"96:84:64:5B:73:25:14:FD:7B:F7:6C:3C:40:F4:5B:24:A7:98:47:9A","sha256":"4B:2F:35:BD:05:76:C5:2A:7E:5A:79:27:1C:76:A5:AC:69:59:93:51:99:94:9C:33:0E:59:C7:53:F7:BC:7F:C8"}}},"request":{"raw":"GET /static/css/ionicons.min.css HTTP/1.1\r\nHost: www.trezor49.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor49.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 01:01:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 10 Feb 2026 08:01:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ae5c1-b0a5\"\r\nexpires: Sat, 07 Mar 2026 13:01:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45221,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (43353), with CRLF line terminators","md5":"3fe81a59908562fa88da73e4a0da9c15","sha1":"8e6ccd51f7b4a9a1352d8b9c2e37a87cc3b59bc8","sha256":"55ae7533b6bbc9ca2bf6773b81ea3dbf41c114e0a91d8e5601a0414354a1fd4f","sha512":"9a83b6f7994e3162c6240e94c09ada15b1b2aac97b61b415b340654d44f9b1fc912b085a8d70b2259a0669fe8eef2c6908f9e8ba4c5c85b611b43f559260a465","ssdeep":"768:Y4OFr0VnCv3Kci/sBLRyY99GZ+d4cJRsxVonU6hP:Y4ir0VE3KBsaY5RAW","tlshash":"d513dfe9d04e0cd06b32c853830a7b5d2835f6f6e1445de9e02fc5ad6acb215a6e5b3c","first_seen":"2025-04-11T04:20:19.44813Z","last_seen":"2026-07-22T05:19:33.316456Z","times_seen":54,"resource_available":false,"data":null}},"time_used":580,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":580,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"www.trezor49.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}