{"report_id":"65756e1e-edd6-4eb9-badd-825d753f0c25","version":6,"status":"done","tags":[],"date":"2026-04-30T23:47:56Z","url":{"schema":"https","addr":"trezurr-wallet-clasic.pages.dev","fqdn":"trezurr-wallet-clasic.pages.dev","domain":"trezurr-wallet-clasic.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.16","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"trezurr-wallet-clasic.pages.dev/","fqdn":"trezurr-wallet-clasic.pages.dev","domain":"trezurr-wallet-clasic.pages.dev","tld":"pages.dev"},"title":"Trezor Wallet® | Secure Your Crypto® IRA","dom":{"size":15507,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (585)","md5":"fccd7737b9bd4cc212ba0b55df9559fd","sha1":"172e51cfb43fa1235d142d17c773cc57bb0217ff","sha256":"45e0ed940bfbdce86fffbb8d6ca31ef081107958ce33347dca54e274cd60cafd","sha512":"a00aa8a64990d539551551948edb443e33bb97f8ca66abfc6571804dfd2bbf2ee969d2e4ec0f255efe32ea4cb17567bec391a96a768350974f9d6922eef5bfef","ssdeep":"384:Br1+wMgv/pkx4YiGckzzRLZvFG7iquvAo4:mNSpkxi6zzRLJa1","tlshash":"0a62a827b3fd3361068201127aa787e9ae27805b621956753b9c835c2fd06588eb73de","dom_hash":"domhash1716f4e911994d48d131311e6ce800c8","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"trezurr-wallet-clasic.pages.dev","fqdn":"trezurr-wallet-clasic.pages.dev","domain":"trezurr-wallet-clasic.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.16","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-04T23:47:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"trezurr-wallet-clasic.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"trezurr-wallet-clasic.pages.dev","ip":{"addr":"172.66.46.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-04-30T23:47:57.004358Z","last_seen":"2026-04-30T23:47:57.004358Z","alert_count":2,"request_count":2,"received_data":32989,"sent_data":969,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"trezurr-wallet-clasic.pages.dev/","fqdn":"trezurr-wallet-clasic.pages.dev","domain":"trezurr-wallet-clasic.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.46.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-30T23:47:28.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezurr-wallet-clasic.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:08:39 GMT","end":"Tue, 07 Jul 2026 06:06:40 GMT"},"fingerprint":{"sha1":"B9:41:07:0C:16:30:49:64:54:B0:F6:FF:C5:0C:D4:AB:E2:31:F7:74","sha256":"18:4C:8B:44:73:30:73:9C:B5:80:08:55:AD:7F:02:C1:68:0B:92:A9:44:9D:ED:2F:0C:7F:38:12:1C:AF:C1:39"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trezurr-wallet-clasic.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 23:47:28 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L6CCet3E2N%2FrgO12ODo%2BLTUDUvjGVs6Fiycswmv23Zh%2FbNKOsqGVDkVRQKDsyaphCcyaaIoUmGXvby2xxUusds9XmfCHwSIzlBWlgcp87xWs8bAEbe1e1Y%2Fk69ZTvP18Oot2mrj5EPsWttnOoKvTUv0q\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f4a6e8619e235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15753,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (585), with CRLF line terminators","md5":"86cc8eda340e6501b3a0067038c15831","sha1":"8ef7df3db6c844806e22d9cd163b0a68131b257a","sha256":"5299beafca46baa886fefce3c189c1f4cde46f6f7ab95ac5400cab9b925a94bc","sha512":"5a72b8c8284b0bd79e20927cd337bb3f2d3828330c582eb7763af5877be8232c0b78e87630659350f5cde236ea4e5275b819cded9d0ff3bdf61695b76b17a4ff","ssdeep":"192:QlZAAgOhuqGkxbwL/xNWiRc6LDXh79J4ZBx3wZUu7x4gLiduLdnXjEai7lDya:QlJg2uXkxbwNsneZELZwZeIiduRzZI5","tlshash":"39627827b7cc7321067202157b6397a9ee27c09b620902b53b5d825f2ff06588db76dd","first_seen":"2026-04-30T23:47:59.08743Z","last_seen":"2026-04-30T23:47:59.08743Z","times_seen":1,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":67,"dns":43,"connect":1,"send":0,"wait":216,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"trezurr-wallet-clasic.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezurr-wallet-clasic.pages.dev/favicon.ico","fqdn":"trezurr-wallet-clasic.pages.dev","domain":"trezurr-wallet-clasic.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.46.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezurr-wallet-clasic.pages.dev/","date":"2026-04-30T23:47:28.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezurr-wallet-clasic.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:08:39 GMT","end":"Tue, 07 Jul 2026 06:06:40 GMT"},"fingerprint":{"sha1":"B9:41:07:0C:16:30:49:64:54:B0:F6:FF:C5:0C:D4:AB:E2:31:F7:74","sha256":"18:4C:8B:44:73:30:73:9C:B5:80:08:55:AD:7F:02:C1:68:0B:92:A9:44:9D:ED:2F:0C:7F:38:12:1C:AF:C1:39"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: trezurr-wallet-clasic.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trezurr-wallet-clasic.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 23:47:28 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9LW782AK%2FWDom%2FTYMsUmaUV4LqYovC9Lp%2B38J3VhOYcqnncQL8X0iOz4%2Bk%2FEYZOWYomBFV3cU1g93cI%2FR3PdQdHSAU9XL%2F1DHj69MMPYA7uTU3FMd6Lv7HuFcEzxOj1EowHv7kTmVe0kB%2B8Q7bBQHEjb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f4a6e886dc456bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15753,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (585), with CRLF line terminators","md5":"86cc8eda340e6501b3a0067038c15831","sha1":"8ef7df3db6c844806e22d9cd163b0a68131b257a","sha256":"5299beafca46baa886fefce3c189c1f4cde46f6f7ab95ac5400cab9b925a94bc","sha512":"5a72b8c8284b0bd79e20927cd337bb3f2d3828330c582eb7763af5877be8232c0b78e87630659350f5cde236ea4e5275b819cded9d0ff3bdf61695b76b17a4ff","ssdeep":"192:QlZAAgOhuqGkxbwL/xNWiRc6LDXh79J4ZBx3wZUu7x4gLiduLdnXjEai7lDya:QlJg2uXkxbwNsneZELZwZeIiduRzZI5","tlshash":"39627827b7cc7321067202157b6397a9ee27c09b620902b53b5d825f2ff06588db76dd","first_seen":"2026-04-30T23:47:59.08743Z","last_seen":"2026-04-30T23:47:59.08743Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"trezurr-wallet-clasic.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}