{"report_id":"8b935c6a-2542-4a30-81fd-c21779b7c1fb","version":6,"status":"done","tags":[],"date":"2026-02-02T16:33:12Z","url":{"schema":"http","addr":"trez0rsuite-suite.us","fqdn":"trez0rsuite-suite.us","domain":"trez0rsuite-suite.us","tld":"us"},"ip":{"addr":"23.254.240.243","port":0,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"trez0rsuite-suite.us/","fqdn":"trez0rsuite-suite.us","domain":"trez0rsuite-suite.us","tld":"us"},"title":"Trezor Suite - Download Trezor Suite App - Trezor Suite","dom":{"size":129574,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17104)","md5":"93aec69de59604fcf528d7b7490a9125","sha1":"f2d964154cb9f89ee163275e53e6fc0c2c5bed17","sha256":"57056b2f74fbe5f6a9e7f64a14d3540c4d138f50b4d7c6012e295fdccc4bf208","sha512":"5d521315bb83d7ed6eece42838f3d090552a091cb5ddc861163be6ab15e12cb7b592ceba20162be823bc417be5a780871d4f02177b9776449df55b2b29bfc903","ssdeep":"3072:Rv0yKyGdbd4ZobEemlUVugamvmZEvC3ih:8VdbyZobEemlUVugamOaF","tlshash":"0dc3d661d36848f53a5b87b98449b32cf45ae650ca4967e7f0b0e15898cc9fa04f7b0f","dom_hash":"domhash6e0e20ee61a2d372a5c343909521cd88","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"trez0rsuite-suite.us","fqdn":"trez0rsuite-suite.us","domain":"trez0rsuite-suite.us","tld":"us"},"ip":{"addr":"23.254.240.243","port":0,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-09T16:33:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"trez0rsuite-suite.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"trez0rsuite-suite.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"trez0rsuite-suite.us","ip":{"addr":"23.254.240.243","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":28,"request_count":14,"received_data":678268,"sent_data":6897,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:26.8","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"trezor.io","ip":{"addr":"172.66.137.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-07-21","domain_rank":11191,"first_seen":"2016-09-29T10:55:49Z","last_seen":"2026-01-29T11:26:02.174021Z","alert_count":0,"request_count":6,"received_data":235276,"sent_data":2803,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trez0rsuite-suite.us/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210","fqdn":"trez0rsuite-suite.us","domain":"trez0rsuite-suite.us","tld":"us"},"ip":{"addr":"23.254.240.243","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"81f491adccda86aaf56a1ce68fa59b87","sha1":"c27ca491887c7fdad5a3ca67592173427cc861af","sha256":"efc3dac74026580ee6b527716e2e63ba29f2116a90d4a47a691438b9a2b86c2f","sha512":"809037c160df1990ac458f977252a4cb2629c748f1a8133240c9d2897b14ad58d2407d822fea9c61efeb19af1e72dc16b29c09c917dca024f4145f1977d1ff57","ssdeep":"","tlshash":"24610234306576b1aefe5ad8f3148428a3148581640b78717e1cb9ee58eef5391f0bea","size":3401,"data":"","first_seen":"2025-12-03T01:51:42.331168Z","last_seen":"2026-07-26T19:44:52.847795Z","times_seen":11669,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trez0rsuite-suite.us/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=8964710565a1d258501f","fqdn":"trez0rsuite-suite.us","domain":"trez0rsuite-suite.us","tld":"us"},"ip":{"addr":"23.254.240.243","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"2a658b82d711091555f0b2d305461f32","sha1":"27229b23e7800ac16da73fff9a602de24d21da9c","sha256":"d52199627d73f2f06550baf26bc5cd75d3e73fdf3a9cc3e4cd7145b4525c8972","sha512":"0ea95325b6c36fd2a5a530c80d85636fa990b9d1326b3c6c4bc1f0ae7074f0c52efb4321871362e3c826e6e5ee0782e7f71861e8de436d478eed0645ced6e077","ssdeep":"768:/eW4693OQsx4lWM2vTJ19FuB57/tonYlrEdO4uMJhYlxu4DMJJiYp0ARmKmIVnVd:/eQ93pGM2v91a7VIuqxsbO1nsPpLL9TG","tlshash":"0303c8a8b065f03047ea14a6907b091bf3356618304ec0e0f769e8e778b915f65a7f3e","size":41076,"data":"","first_seen":"2025-12-03T05:59:44.83451Z","last_seen":"2026-07-26T09:40:28.143121Z","times_seen":3647,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trez0rsuite-suite.us/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"trez0rsuite-suite.us","domain":"trez0rsuite-suite.us","tld":"us"},"ip":{"addr":"23.254.240.243","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-07-27T00:31:02.08343Z","times_seen":309176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trez0rsuite-suite.us/wp-block-template-skip-link-js-after","fqdn":"trez0rsuite-suite.us","domain":"trez0rsuite-suite.us","tld":"us"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd553989831ef56fe1b5ee9e44b785d3","sha1":"f36cc9d144f6665261c9a0a914ca5e0f7f506a3f","sha256":"da4dba6173c838ffc1bd3c1b24afb9eb57edc41c26245b6beba01b16d7f91d2a","sha512":"06072a4a0e5ff40ae6ddd40e0ff40b04aa201cb689fcab4addd4ac2e2b44498c9c6751ac7960788c83f2ca49d7493e99670a79dbcd2b20e92e42f69ad7a40bed","ssdeep":"","tlshash":"6f4195c4f21506f401662a39c4341bc9e2b92998f6db1ca7cc0c8c2cb1b256f46b6f7e","size":1940,"data":"","first_seen":"2025-12-30T03:22:09.806117Z","last_seen":"2026-05-20T00:22:25.174028Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trez0rsuite-suite.us/wp-content/themes/acai/assets/js/animation.js?ver=1.4","fqdn":"trez0rsuite-suite.us","domain":"trez0rsuite-suite.us","tld":"us"},"ip":{"addr":"23.254.240.243","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c53132f59bbdd852a79beaacbf74eeb3","sha1":"a923e5a3b6cb3c889fc977fe168b9cf286672c08","sha256":"e6532df7c0a3c44b964372202907425b791ba38d8d3a0754f8b36bc35c5c7873","sha512":"fa9f4aca0c08dd6d0d30fe2df6052fcc6ef2fa7bdfc8ee387eb49007052aed33b92c8aa32ba4b51d844e29358a25f2b9ed6b1222657e9a47ed19e32614cf098f","ssdeep":"","tlshash":"f6419ca5701d657f8acb5377843e690aae3dc5363533c8b93dac404a0c74d2e5f23569","size":2030,"data":"","first_seen":"2025-07-28T22:31:59.384777Z","last_seen":"2026-07-26T18:42:30.123145Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trez0rsuite-suite.us/wp-includes/js/wp-emoji-loader.min.js","fqdn":"trez0rsuite-suite.us","domain":"trez0rsuite-suite.us","tld":"us"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d3b6f36457cad1ae5823a95ebddcb19","sha1":"b4f3da7a32ae625e94d3b41843ea063a4afc0118","sha256":"754a37e289eae44aca8612dc05583b8a702a3ffa003ba9cbaaf4aa26a4e3c783","sha512":"147fef27076f2813dac46ddc26252c9ceeecc198d82e3116b61f745b935f5107e4724458bde5a697de7f337002c8a28a1a370588cd3822c5e5b0e59e4145b7c6","ssdeep":"","tlshash":"9181869ae7763cdbb2f900f2697a0d47eb614435d6c8d438c9bda3141cb5893c274a46","size":3860,"data":"","first_seen":"2026-02-02T16:33:17.76699Z","last_seen":"2026-02-02T16:33:17.76699Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"trez0rsuite-suite.us/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210","fqdn":"trez0rsuite-suite.us","domain":"trez0rsuite-suite.us","tld":"us"},"ip":{"addr":"23.254.240.243","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trez0rsuite-suite.us/","date":"2026-02-02T16:32:53.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"empowerretirement-t.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 12:55:24 GMT","end":"Mon, 27 Apr 2026 12:55:23 GMT"},"fingerprint":{"sha1":"D0:67:63:85:51:C2:9D:AD:1E:27:2A:28:C5:5E:82:9F:A3:36:8F:2B","sha256":"7F:9A:98:AF:14:F5:23:63:0D:7E:5B:01:08:E0:B1:C7:DF:83:35:54:A2:66:A0:AB:1B:26:EA:A4:DE:48:39:A3"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210 HTTP/1.1\r\nHost: trez0rsuite-suite.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trez0rsuite-suite.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 28 Oct 2025 19:26:48 GMT\r\naccept-ranges: bytes\r\ncache-control: public\r\nexpires: Tue, 02 Feb 2027 16:32:53 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 1060\r\ncontent-type: text/javascript\r\ndate: Mon, 02 Feb 2026 16:32:53 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3401,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (3401), with no line terminators","md5":"81f491adccda86aaf56a1ce68fa59b87","sha1":"c27ca491887c7fdad5a3ca67592173427cc861af","sha256":"efc3dac74026580ee6b527716e2e63ba29f2116a90d4a47a691438b9a2b86c2f","sha512":"809037c160df1990ac458f977252a4cb2629c748f1a8133240c9d2897b14ad58d2407d822fea9c61efeb19af1e72dc16b29c09c917dca024f4145f1977d1ff57","ssdeep":"","tlshash":"24610234306576b1aefe5ad8f3148428a3148581640b78717e1cb9ee58eef5391f0bea","first_seen":"2025-12-03T01:51:42.331168Z","last_seen":"2026-07-26T19:44:52.847795Z","times_seen":11669,"resource_available":true,"data":null}},"time_used":629,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":503,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"trez0rsuite-suite.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"trez0rsuite-suite.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trez0rsuite-suite.us/wp-content/themes/acai/assets/js/animation.js?ver=1.4","fqdn":"trez0rsuite-suite.us","domain":"trez0rsuite-suite.us","tld":"us"},"ip":{"addr":"23.254.240.243","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trez0rsuite-suite.us/","date":"2026-02-02T16:32:53.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"empowerretirement-t.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 12:55:24 GMT","end":"Mon, 27 Apr 2026 12:55:23 GMT"},"fingerprint":{"sha1":"D0:67:63:85:51:C2:9D:AD:1E:27:2A:28:C5:5E:82:9F:A3:36:8F:2B","sha256":"7F:9A:98:AF:14:F5:23:63:0D:7E:5B:01:08:E0:B1:C7:DF:83:35:54:A2:66:A0:AB:1B:26:EA:A4:DE:48:39:A3"}}},"request":{"raw":"GET /wp-content/themes/acai/assets/js/animation.js?ver=1.4 HTTP/1.1\r\nHost: trez0rsuite-suite.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trez0rsuite-suite.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 28 Jan 2026 08:36:37 GMT\r\naccept-ranges: bytes\r\ncache-control: public\r\nexpires: Tue, 02 Feb 2027 16:32:53 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 613\r\ncontent-type: text/javascript\r\ndate: Mon, 02 Feb 2026 16:32:53 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2030,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"c53132f59bbdd852a79beaacbf74eeb3","sha1":"a923e5a3b6cb3c889fc977fe168b9cf286672c08","sha256":"e6532df7c0a3c44b964372202907425b791ba38d8d3a0754f8b36bc35c5c7873","sha512":"fa9f4aca0c08dd6d0d30fe2df6052fcc6ef2fa7bdfc8ee387eb49007052aed33b92c8aa32ba4b51d844e29358a25f2b9ed6b1222657e9a47ed19e32614cf098f","ssdeep":"","tlshash":"f6419ca5701d657f8acb5377843e690aae3dc5363533c8b93dac404a0c74d2e5f23569","first_seen":"2025-07-28T22:31:59.384777Z","last_seen":"2026-07-26T18:42:30.123145Z","times_seen":50,"resource_available":true,"data":null}},"time_used":629,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":629,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"trez0rsuite-suite.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"trez0rsuite-suite.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trez0rsuite-suite.us/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"trez0rsuite-suite.us","domain":"trez0rsuite-suite.us","tld":"us"},"ip":{"addr":"23.254.240.243","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trez0rsuite-suite.us/","date":"2026-02-02T16:32:54.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"empowerretirement-t.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 12:55:24 GMT","end":"Mon, 27 Apr 2026 12:55:23 GMT"},"fingerprint":{"sha1":"D0:67:63:85:51:C2:9D:AD:1E:27:2A:28:C5:5E:82:9F:A3:36:8F:2B","sha256":"7F:9A:98:AF:14:F5:23:63:0D:7E:5B:01:08:E0:B1:C7:DF:83:35:54:A2:66:A0:AB:1B:26:EA:A4:DE:48:39:A3"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9 HTTP/1.1\r\nHost: trez0rsuite-suite.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trez0rsuite-suite.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 07 Nov 2025 22:44:34 GMT\r\naccept-ranges: bytes\r\ncache-control: public\r\nexpires: Tue, 02 Feb 2027 16:32:54 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 4940\r\ncontent-type: text/javascript\r\ndate: Mon, 02 Feb 2026 16:32:54 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-07-27T00:31:02.08343Z","times_seen":309176,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"trez0rsuite-suite.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"trez0rsuite-suite.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trez0rsuite-suite.us/wp-includes/blocks/navigation/style.min.css?ver=6.9","fqdn":"trez0rsuite-suite.us","domain":"trez0rsuite-suite.us","tld":"us"},"ip":{"addr":"23.254.240.243","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trez0rsuite-suite.us/","date":"2026-02-02T16:32:53.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"empowerretirement-t.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 12:55:24 GMT","end":"Mon, 27 Apr 2026 12:55:23 GMT"},"fingerprint":{"sha1":"D0:67:63:85:51:C2:9D:AD:1E:27:2A:28:C5:5E:82:9F:A3:36:8F:2B","sha256":"7F:9A:98:AF:14:F5:23:63:0D:7E:5B:01:08:E0:B1:C7:DF:83:35:54:A2:66:A0:AB:1B:26:EA:A4:DE:48:39:A3"}}},"request":{"raw":"GET /wp-includes/blocks/navigation/style.min.css?ver=6.9 HTTP/1.1\r\nHost: trez0rsuite-suite.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trez0rsuite-suite.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 21 Oct 2025 14:14:02 GMT\r\naccept-ranges: bytes\r\ncache-control: public\r\nexpires: Tue, 02 Feb 2027 16:32:53 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 2085\r\ncontent-type: text/css\r\ndate: Mon, 02 Feb 2026 16:32:53 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16879,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16879), with no line terminators","md5":"9d20bf226422cb5168bef956e5eab9c0","sha1":"73d569bfcb92ba76ae987c3ac9c6d8cc091100be","sha256":"65433802260eba9a7ba737a21be6f679ab25480a3c6cc4e7f109041360cfb52e","sha512":"e8ac30913475c5a3c8ce98c1a0fd57a173c745d9adb94e84defd8116ad78835b4f8d27eff25391c1f3554c4e7485aa17bd139fe9bcd461873d30227b24e7548d","ssdeep":"384:OsFyo7/c9g7jiUsA5eyH9iXt/UYv/kx6y/:OsFyo7/c9g7jiUsA5eyH9i9/UYv/kxT/","tlshash":"b3729fd05bb49cf4a9bb933b6e4490184633e902c5097bd5a0f3e694b68cb545be3f0b","first_seen":"2025-12-03T05:22:41.874716Z","last_seen":"2026-07-26T18:02:20.643277Z","times_seen":3277,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"trez0rsuite-suite.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"trez0rsuite-suite.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezor.io/_next/static/media/dAppsAll.d5b23ca1.jpg","fqdn":"trezor.io","domain":"trezor.io","tld":"io"},"ip":{"addr":"172.66.137.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trez0rsuite-suite.us/","date":"2026-02-02T16:32:53.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 15:54:42 GMT","end":"Sun, 05 Apr 2026 15:54:41 GMT"},"fingerprint":{"sha1":"91:6C:EF:49:6C:12:6E:D6:D0:34:51:D2:EC:8A:94:84:9C:A0:74:36","sha256":"3F:CE:A6:41:84:E7:85:A2:1E:5C:AF:CB:60:07:C9:D8:2E:4A:F6:B4:BA:AE:68:2A:18:C7:93:FB:21:E3:F4:6D"}}},"request":{"raw":"GET /_next/static/media/dAppsAll.d5b23ca1.jpg HTTP/1.1\r\nHost: trezor.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trez0rsuite-suite.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 16:32:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15448\r\ncf-ray: 9c7b164cfc550b41-OSL\r\ncache-control: public, max-age=31536000, immutable\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: qual=85, origFmt=jpeg, origSize=38755\r\ncontent-disposition: inline; filename=\"dAppsAll.webp\"\r\nvary: Accept\r\netag: W/\"9763-19c1eb20488\"\r\nlast-modified: Mon, 02 Feb 2026 14:11:49 GMT\r\npermissions-policy: camera=(), microphone=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: DENY\r\ncf-cache-status: HIT\r\nage: 847\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15448,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1264x192, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8e9a4fc55caa6f5e1067180a0914970b","sha1":"af5131b98de22804ac5ffffbc9ff2c3d416f03f1","sha256":"fdab845711af59f1a1a6deb87f5fa75789068d9ec50f58d3212e59a195a219a3","sha512":"5f11f16bc01fcc213a871def909b0e853bb44cb6feedd141799773d54eb78b799c54c3ad82b2cc5a413dff988cfd76590f74193314e983a2ee61e8853cf72c25","ssdeep":"384:Bk7B2O8lpaKbxBiw6k9opmJ3ZjcTxdo13C0f:K7B2OC4Ixc9C2OZj6xdo1y0f","tlshash":"ff62d1a5d9416768f2bd20be21b69dca05d5057c33f226feccca0660b9b8dcd2546e12","first_seen":"2026-02-02T12:21:05.184127Z","last_seen":"2026-02-02T16:33:17.741755Z","times_seen":2,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":29,"dns":16,"connect":3,"send":0,"wait":24,"receive":1,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezor.io/_next/static/media/3rdPartyWalletAll.6bded68c.jpg","fqdn":"trezor.io","domain":"trezor.io","tld":"io"},"ip":{"addr":"172.66.137.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trez0rsuite-suite.us/","date":"2026-02-02T16:32:53.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 15:54:42 GMT","end":"Sun, 05 Apr 2026 15:54:41 GMT"},"fingerprint":{"sha1":"91:6C:EF:49:6C:12:6E:D6:D0:34:51:D2:EC:8A:94:84:9C:A0:74:36","sha256":"3F:CE:A6:41:84:E7:85:A2:1E:5C:AF:CB:60:07:C9:D8:2E:4A:F6:B4:BA:AE:68:2A:18:C7:93:FB:21:E3:F4:6D"}}},"request":{"raw":"GET /_next/static/media/3rdPartyWalletAll.6bded68c.jpg HTTP/1.1\r\nHost: trezor.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trez0rsuite-suite.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 16:32:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15986\r\ncf-ray: 9c7b164d0c560b41-OSL\r\ncache-control: public, max-age=31536000, immutable\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: qual=85, origFmt=jpeg, origSize=39885\r\ncontent-disposition: inline; filename=\"3rdPartyWalletAll.webp\"\r\nvary: Accept\r\netag: W/\"9bcd-19c1eb20488\"\r\nlast-modified: Mon, 02 Feb 2026 14:11:49 GMT\r\npermissions-policy: camera=(), microphone=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: DENY\r\ncf-cache-status: HIT\r\nage: 847\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15986,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1264x192, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5b6007b3bd7406e6ab5f1c8ad2d989a5","sha1":"aa042d3ed3c347238e6d2de537c7100052cfb79d","sha256":"a02a7b41aa1937be132ca6658f4f9b1db59b318d65afdee9c66ba6c3a3adc4db","sha512":"28c1a2925414bf878b21e7e1ede07e629b775d0ae177a94da1e8680bbe2e6ebb119d4b687de94681233dc910b67dbc8d9421f06219b63a34733bf7d19bf0f48d","ssdeep":"384:ELIJJ8QU7VbN7zq/C1+9PaOq4JeRClUY/nw7GnugdE:jJJ81JN7OO+q4JeRiwgE","tlshash":"4672e1b96476aa97db4fe9d6a320876430381497dd8f877e9ec1f40001e1e906906df6","first_seen":"2026-02-02T12:21:05.171833Z","last_seen":"2026-02-02T16:33:17.744244Z","times_seen":2,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":28,"dns":17,"connect":3,"send":0,"wait":19,"receive":1,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trez0rsuite-suite.us/wp-content/themes/acai/assets/fonts/instrument-sans.woff2","fqdn":"trez0rsuite-suite.us","domain":"trez0rsuite-suite.us","tld":"us"},"ip":{"addr":"23.254.240.243","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trez0rsuite-suite.us/","date":"2026-02-02T16:32:53.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"empowerretirement-t.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 12:55:24 GMT","end":"Mon, 27 Apr 2026 12:55:23 GMT"},"fingerprint":{"sha1":"D0:67:63:85:51:C2:9D:AD:1E:27:2A:28:C5:5E:82:9F:A3:36:8F:2B","sha256":"7F:9A:98:AF:14:F5:23:63:0D:7E:5B:01:08:E0:B1:C7:DF:83:35:54:A2:66:A0:AB:1B:26:EA:A4:DE:48:39:A3"}}},"request":{"raw":"GET /wp-content/themes/acai/assets/fonts/instrument-sans.woff2 HTTP/1.1\r\nHost: trez0rsuite-suite.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trez0rsuite-suite.us/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 28 Jan 2026 08:36:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 88476\r\ncache-control: max-age=31536000\r\nexpires: Tue, 02 Feb 2027 16:32:53 GMT\r\nvary: Accept-Encoding\r\ncontent-type: font/woff2\r\ndate: Mon, 02 Feb 2026 16:32:53 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":88476,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 88476, version 1.0","md5":"1a10a9b26020185af43c81002ac33316","sha1":"183eaeb794357a1c80af8cc64b280298e03e08cf","sha256":"8d93e0761b10a433a72768b15bcf1bd293b7b20b9c74d8299fda3cec0b6e59fc","sha512":"71d59f963017e925f46018000fdb94e6ce06c300ab9444deb92d4cf7d3fcb9ab23aa7bf6d3a305e3ea50771c5ffbb688e2801b16a571e30431acf8c57f7a47da","ssdeep":"1536:6ZaXrkHvhjY/AVOBfyaNlc/4SmjLJNCoh403fXKdeuPbmmcn6fGmPwpSLF:6w7chj0J5W4SmH/4yXMjmAfbrx","tlshash":"248312d3f9f5e310d932ac29eb354db63b5339327a9bc49adc120506139fae880d6e00","first_seen":"2023-12-05T15:08:09Z","last_seen":"2026-07-26T23:32:58.974082Z","times_seen":188,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"trez0rsuite-suite.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"trez0rsuite-suite.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trez0rsuite-suite.us/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=8964710565a1d258501f","fqdn":"trez0rsuite-suite.us","domain":"trez0rsuite-suite.us","tld":"us"},"ip":{"addr":"23.254.240.243","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trez0rsuite-suite.us/","date":"2026-02-02T16:32:53.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"empowerretirement-t.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 12:55:24 GMT","end":"Mon, 27 Apr 2026 12:55:23 GMT"},"fingerprint":{"sha1":"D0:67:63:85:51:C2:9D:AD:1E:27:2A:28:C5:5E:82:9F:A3:36:8F:2B","sha256":"7F:9A:98:AF:14:F5:23:63:0D:7E:5B:01:08:E0:B1:C7:DF:83:35:54:A2:66:A0:AB:1B:26:EA:A4:DE:48:39:A3"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=8964710565a1d258501f HTTP/1.1\r\nHost: trez0rsuite-suite.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trez0rsuite-suite.us/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 25 Nov 2025 21:14:46 GMT\r\naccept-ranges: bytes\r\ncache-control: public\r\nexpires: Tue, 02 Feb 2027 16:32:53 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 14593\r\ncontent-type: text/javascript\r\ndate: Mon, 02 Feb 2026 16:32:53 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":41076,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (41076), with no line terminators","md5":"2a658b82d711091555f0b2d305461f32","sha1":"27229b23e7800ac16da73fff9a602de24d21da9c","sha256":"d52199627d73f2f06550baf26bc5cd75d3e73fdf3a9cc3e4cd7145b4525c8972","sha512":"0ea95325b6c36fd2a5a530c80d85636fa990b9d1326b3c6c4bc1f0ae7074f0c52efb4321871362e3c826e6e5ee0782e7f71861e8de436d478eed0645ced6e077","ssdeep":"768:/eW4693OQsx4lWM2vTJ19FuB57/tonYlrEdO4uMJhYlxu4DMJJiYp0ARmKmIVnVd:/eQ93pGM2v91a7VIuqxsbO1nsPpLL9TG","tlshash":"0303c8a8b065f03047ea14a6907b091bf3356618304ec0e0f769e8e778b915f65a7f3e","first_seen":"2025-12-03T05:59:44.83451Z","last_seen":"2026-07-26T09:40:28.143121Z","times_seen":3647,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"trez0rsuite-suite.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"trez0rsuite-suite.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezor.io/_next/static/media/hero-laptop.fd521221.jpg","fqdn":"trezor.io","domain":"trezor.io","tld":"io"},"ip":{"addr":"172.66.137.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trez0rsuite-suite.us/","date":"2026-02-02T16:32:53.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 15:54:42 GMT","end":"Sun, 05 Apr 2026 15:54:41 GMT"},"fingerprint":{"sha1":"91:6C:EF:49:6C:12:6E:D6:D0:34:51:D2:EC:8A:94:84:9C:A0:74:36","sha256":"3F:CE:A6:41:84:E7:85:A2:1E:5C:AF:CB:60:07:C9:D8:2E:4A:F6:B4:BA:AE:68:2A:18:C7:93:FB:21:E3:F4:6D"}}},"request":{"raw":"GET /_next/static/media/hero-laptop.fd521221.jpg HTTP/1.1\r\nHost: trezor.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trez0rsuite-suite.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 16:32:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 136760\r\ncf-ray: 9c7b164d0c570b41-OSL\r\ncache-control: public, max-age=31536000, immutable\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: qual=85, origFmt=jpeg, origSize=192753\r\ncontent-disposition: inline; filename=\"hero-laptop.webp\"\r\nvary: Accept\r\netag: W/\"2f0f1-19c1eb20488\"\r\nlast-modified: Mon, 02 Feb 2026 14:11:49 GMT\r\npermissions-policy: camera=(), microphone=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: DENY\r\ncf-cache-status: HIT\r\nage: 847\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":136760,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 3840x1600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"35d411526e43d907e6eea075f43ba4f6","sha1":"e3f3753c733183df549c1e51c493ad901de20744","sha256":"e274c4be30780943bf52cc360df8f9448c3944c75bc7965f38568d6aebc21671","sha512":"496f508186991eb54c3a3ba56b36dd103b2fe4e5912153617993075203eee5517461a16052ca236023e8cc28aede6c0e828b67be5eab8d4c70c3ee52f6273841","ssdeep":"3072:mjo2WxroDCFpt2rT+g47tMKQD97ysQ4l9E7WnzDhmKqIogNXACAFgZ5ntZJ:mUtwCFptmT+g475oQ4l9bncKqIosrZ5d","tlshash":"3ed313abd98e3db15d081d53d182be8ce0ff50546c040a476adc26eedaeb0126dcdeb5","first_seen":"2026-02-02T12:21:05.195868Z","last_seen":"2026-07-05T13:48:13.770563Z","times_seen":11,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":34,"dns":20,"connect":1,"send":0,"wait":22,"receive":4,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trez0rsuite-suite.us/wp-content/themes/acai/assets/css/animation.min.css?ver=1.4","fqdn":"trez0rsuite-suite.us","domain":"trez0rsuite-suite.us","tld":"us"},"ip":{"addr":"23.254.240.243","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trez0rsuite-suite.us/","date":"2026-02-02T16:32:53.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"empowerretirement-t.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 12:55:24 GMT","end":"Mon, 27 Apr 2026 12:55:23 GMT"},"fingerprint":{"sha1":"D0:67:63:85:51:C2:9D:AD:1E:27:2A:28:C5:5E:82:9F:A3:36:8F:2B","sha256":"7F:9A:98:AF:14:F5:23:63:0D:7E:5B:01:08:E0:B1:C7:DF:83:35:54:A2:66:A0:AB:1B:26:EA:A4:DE:48:39:A3"}}},"request":{"raw":"GET /wp-content/themes/acai/assets/css/animation.min.css?ver=1.4 HTTP/1.1\r\nHost: trez0rsuite-suite.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trez0rsuite-suite.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 28 Jan 2026 08:36:31 GMT\r\naccept-ranges: bytes\r\ncache-control: public\r\nexpires: Tue, 02 Feb 2027 16:32:53 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 576\r\ncontent-type: text/css\r\ndate: Mon, 02 Feb 2026 16:32:53 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6369,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6369), with no line terminators","md5":"6462d2876635d3e792dacdf1c71715df","sha1":"ff9c64d6cc5f38efe38383ecb08d705db2c39ced","sha256":"2a66b20e06ff739787385b42a7b126bc38152ad2ac915852b34e09ad4963bf5c","sha512":"8f41b28d3cc938de0d5ad13cda3bb6ce32fa2fc44dad992fd0710a625f6f1faa976c44ad60d50a20dc5fab8a87f63bc7207f96684a9fb7defa0d49dcb805aebf","ssdeep":"192:Grpow3SesABfoxNT0qt1xxqLP7X7Xr/beNFRR1dhhd6iFnl7R79jhT6rV75bFrxd:0x","tlshash":"d7d1a4d356ac942983430f37084ee0894c77ef725906b699bf6d106d0ab8d7c176b3a7","first_seen":"2025-07-28T22:31:59.401112Z","last_seen":"2026-07-26T18:42:30.118244Z","times_seen":49,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"trez0rsuite-suite.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"trez0rsuite-suite.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trez0rsuite-suite.us/wp-content/themes/acai/assets/images/style-book-hero.png","fqdn":"trez0rsuite-suite.us","domain":"trez0rsuite-suite.us","tld":"us"},"ip":{"addr":"23.254.240.243","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trez0rsuite-suite.us/","date":"2026-02-02T16:32:53.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"empowerretirement-t.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 12:55:24 GMT","end":"Mon, 27 Apr 2026 12:55:23 GMT"},"fingerprint":{"sha1":"D0:67:63:85:51:C2:9D:AD:1E:27:2A:28:C5:5E:82:9F:A3:36:8F:2B","sha256":"7F:9A:98:AF:14:F5:23:63:0D:7E:5B:01:08:E0:B1:C7:DF:83:35:54:A2:66:A0:AB:1B:26:EA:A4:DE:48:39:A3"}}},"request":{"raw":"GET /wp-content/themes/acai/assets/images/style-book-hero.png HTTP/1.1\r\nHost: trez0rsuite-suite.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trez0rsuite-suite.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 28 Jan 2026 08:36:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 175276\r\ncache-control: public\r\nexpires: Tue, 02 Feb 2027 16:32:53 GMT\r\ncontent-type: image/png\r\ndate: Mon, 02 Feb 2026 16:32:53 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":175276,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 387 x 377, 8-bit/color RGBA, non-interlaced","md5":"3c01efc1c35268322b7b3bfa63df9c3d","sha1":"f29a7e90a580676f2d29cd5b0788fad6229e53bd","sha256":"1cd8882c520d66c719c4589a9c0e749f717b466cb5e1e20a4e6eaa7a6288dd4e","sha512":"bdc0145a383e01c3c61c938302284c215cbf4c46ef03f33ecc5ad0fe7e605c4a60c5c2d8cf727014aba96057ad300c5243899ab0584f717382ce5e2bbda4b03e","ssdeep":"3072:YxfAmtEFj0ErT+IAgjZKynNdEDHh9cmzMK6qLBpdJiNP:Y1A9j0ErTsgVKynNKvcmvB9piNP","tlshash":"730423e84e3d1b3f638a0871871fd5a2be5d8eb189a6b54b4833994e8d773026480707","first_seen":"2025-07-28T22:31:59.396735Z","last_seen":"2026-07-26T18:42:30.126523Z","times_seen":37,"resource_available":false,"data":null}},"time_used":636,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":510,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"trez0rsuite-suite.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"trez0rsuite-suite.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezor.io/_next/static/media/trade.3540ab34.png","fqdn":"trezor.io","domain":"trezor.io","tld":"io"},"ip":{"addr":"172.66.137.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trez0rsuite-suite.us/","date":"2026-02-02T16:32:53.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 15:54:42 GMT","end":"Sun, 05 Apr 2026 15:54:41 GMT"},"fingerprint":{"sha1":"91:6C:EF:49:6C:12:6E:D6:D0:34:51:D2:EC:8A:94:84:9C:A0:74:36","sha256":"3F:CE:A6:41:84:E7:85:A2:1E:5C:AF:CB:60:07:C9:D8:2E:4A:F6:B4:BA:AE:68:2A:18:C7:93:FB:21:E3:F4:6D"}}},"request":{"raw":"GET /_next/static/media/trade.3540ab34.png HTTP/1.1\r\nHost: trezor.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trez0rsuite-suite.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 16:32:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 55480\r\ncf-ray: 9c7b164d0c580b41-OSL\r\ncache-control: public, max-age=31536000, immutable\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=69370\r\ncontent-disposition: inline; filename=\"trade.webp\"\r\nvary: Accept\r\netag: W/\"10efa-19c1eb20488\"\r\nlast-modified: Mon, 02 Feb 2026 14:11:49 GMT\r\npermissions-policy: camera=(), microphone=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: DENY\r\ncf-cache-status: HIT\r\nage: 847\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55480,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7610580f4ee6ea28b8221c6e17c8b7d1","sha1":"ec56e9220742fa0f05d1e348310b90192d4114be","sha256":"0db30858ea0841f6e33c2db68caac30a8140f0d8b7d98876057de371c6a414f6","sha512":"46a27871175e96a026a4ff8b5cf5fcac6dee00c3eb8af5faecab282fbff64aa4fd9fb2f36a30789b7e2b824e9c4922b427e42e3f7a4b76f9eb22b6ec1fc36209","ssdeep":"1536:wOuW1IBcRjipMPTvWiWzvQ2EJvqtCYut4Fi5sCzaDfwnN:wOuW1sIiYjWiISmwtWwz3N","tlshash":"2c430216fac8c77605447522da39e3f462349afab9c058c93da49cf62f10c2f349ae64","first_seen":"2026-02-02T12:21:05.169559Z","last_seen":"2026-02-02T16:33:17.755602Z","times_seen":2,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":33,"dns":14,"connect":2,"send":0,"wait":18,"receive":2,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezor.io/_next/static/media/languages.5ab51478.png","fqdn":"trezor.io","domain":"trezor.io","tld":"io"},"ip":{"addr":"172.66.137.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trez0rsuite-suite.us/","date":"2026-02-02T16:32:53.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 15:54:42 GMT","end":"Sun, 05 Apr 2026 15:54:41 GMT"},"fingerprint":{"sha1":"91:6C:EF:49:6C:12:6E:D6:D0:34:51:D2:EC:8A:94:84:9C:A0:74:36","sha256":"3F:CE:A6:41:84:E7:85:A2:1E:5C:AF:CB:60:07:C9:D8:2E:4A:F6:B4:BA:AE:68:2A:18:C7:93:FB:21:E3:F4:6D"}}},"request":{"raw":"GET /_next/static/media/languages.5ab51478.png HTTP/1.1\r\nHost: trezor.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trez0rsuite-suite.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 16:32:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4594\r\ncf-ray: 9c7b164d0c5b0b41-OSL\r\ncache-control: public, max-age=31536000, immutable\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=7736\r\ncontent-disposition: inline; filename=\"languages.webp\"\r\nvary: Accept\r\netag: W/\"1e38-19c1eb20488\"\r\nlast-modified: Mon, 02 Feb 2026 14:11:49 GMT\r\npermissions-policy: camera=(), microphone=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: DENY\r\ncf-cache-status: HIT\r\nage: 847\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4594,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0d067f15b1a50dedc4d3df20a1012467","sha1":"b41cd3282a4d286733c5ea9a99ae00fff663cce4","sha256":"1b15967cd012763c6ad5d3cfa115cbd0fb3cd14d58c7a45f34755f5a5ef8e758","sha512":"e339d7f031766f0186d9f2737c261912c5a4ac60f52b6c9fa4c426ac5653c989950f26cf4c6daf0a37f652cb2c8849a04c75d94f3655ca5c9ff3dc9ecde42e64","ssdeep":"96:bdue8pwYQ61bsv5z7PGPT/1vc7Bu2sklOrTO79gn2a2YhzYH5mW:bdYpwP6E5PPGTeloToSooW","tlshash":"81916ddb0a1ce0f4697ed6cc1c77044aec911b6c9369ece7a79221b4c067098e556f91","first_seen":"2026-02-02T12:21:05.185739Z","last_seen":"2026-02-02T16:33:17.75757Z","times_seen":2,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":30,"dns":18,"connect":3,"send":0,"wait":25,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezor.io/_next/static/media/optimized-noimage.ed21963d.png","fqdn":"trezor.io","domain":"trezor.io","tld":"io"},"ip":{"addr":"172.66.137.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trez0rsuite-suite.us/","date":"2026-02-02T16:32:53.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 15:54:42 GMT","end":"Sun, 05 Apr 2026 15:54:41 GMT"},"fingerprint":{"sha1":"91:6C:EF:49:6C:12:6E:D6:D0:34:51:D2:EC:8A:94:84:9C:A0:74:36","sha256":"3F:CE:A6:41:84:E7:85:A2:1E:5C:AF:CB:60:07:C9:D8:2E:4A:F6:B4:BA:AE:68:2A:18:C7:93:FB:21:E3:F4:6D"}}},"request":{"raw":"GET /_next/static/media/optimized-noimage.ed21963d.png HTTP/1.1\r\nHost: trezor.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trez0rsuite-suite.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 16:32:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2688\r\ncf-ray: 9c7b164d0c5f0b41-OSL\r\ncache-control: public, max-age=31536000, immutable\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=3932\r\ncontent-disposition: inline; filename=\"optimized-noimage.webp\"\r\nvary: Accept\r\netag: W/\"f5c-19c1eb20488\"\r\nlast-modified: Mon, 02 Feb 2026 14:11:49 GMT\r\npermissions-policy: camera=(), microphone=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: DENY\r\ncf-cache-status: HIT\r\nage: 847\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2688,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8fc766540c541ff841b8075b7ab6004e","sha1":"6d8e57f3be8768ec8e5ca5f1265edc7e2070cd5e","sha256":"ce88a206f08b58dbad34e16e6e453e81f0d79e60548577d83791d4cfcc07561c","sha512":"9465b9426e6863a7dcf7a598fff12ba8b4a3a9369aa97342538868a28138fb2a532435b6675cca4effd3ac293d883865b70cffd87b6d37923c23e64b330193aa","ssdeep":"","tlshash":"315129f9dd38c62a83586e66866a2d119675cf13688b30e32fd0b41d19ec9846f23614","first_seen":"2026-02-02T16:33:17.760054Z","last_seen":"2026-02-02T16:33:17.760054Z","times_seen":1,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":31,"dns":18,"connect":3,"send":0,"wait":23,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trez0rsuite-suite.us/favicon.ico","fqdn":"trez0rsuite-suite.us","domain":"trez0rsuite-suite.us","tld":"us"},"ip":{"addr":"23.254.240.243","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trez0rsuite-suite.us/","date":"2026-02-02T16:32:54.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"empowerretirement-t.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 12:55:24 GMT","end":"Mon, 27 Apr 2026 12:55:23 GMT"},"fingerprint":{"sha1":"D0:67:63:85:51:C2:9D:AD:1E:27:2A:28:C5:5E:82:9F:A3:36:8F:2B","sha256":"7F:9A:98:AF:14:F5:23:63:0D:7E:5B:01:08:E0:B1:C7:DF:83:35:54:A2:66:A0:AB:1B:26:EA:A4:DE:48:39:A3"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: trez0rsuite-suite.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trez0rsuite-suite.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 09 Jun 2020 11:34:43 GMT\r\naccept-ranges: bytes\r\ncache-control: public\r\nexpires: Tue, 02 Feb 2027 16:32:54 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 3919\r\ncontent-type: image/x-icon\r\ndate: Mon, 02 Feb 2026 16:32:54 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":17470,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"f40d62dc5fa9c4c2f6bb5d7e5b8be88b","sha1":"15d8ac0ce041569474568b74322444348209ee47","sha256":"6003279ed302c9cd462dacf746801f1cf3fd67d8fc10d071aef0ec2f7946010e","sha512":"0ae4871f9d724ce79f22dd76902d276fa7899640386780ad95b7a024c543528d4a301e1b56c97fc4860f51e7e16a9aba6f2727ac01c084a2fb8e49f4737927a8","ssdeep":"192:gcLaNYn2OlEKnwVCSMFSTUnQCUEZZeAG:gisYn2VfFUQk","tlshash":"af7208a40d0dcc66ce5a29f991226f8c363da87fd09c2a63d6467f10645005ebc6fb3d","first_seen":"2023-05-10T20:11:14Z","last_seen":"2026-07-26T12:40:39.336788Z","times_seen":224,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"trez0rsuite-suite.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"trez0rsuite-suite.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trez0rsuite-suite.us/","fqdn":"trez0rsuite-suite.us","domain":"trez0rsuite-suite.us","tld":"us"},"ip":{"addr":"23.254.240.243","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-02T16:32:50.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"empowerretirement-t.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 12:55:24 GMT","end":"Mon, 27 Apr 2026 12:55:23 GMT"},"fingerprint":{"sha1":"D0:67:63:85:51:C2:9D:AD:1E:27:2A:28:C5:5E:82:9F:A3:36:8F:2B","sha256":"7F:9A:98:AF:14:F5:23:63:0D:7E:5B:01:08:E0:B1:C7:DF:83:35:54:A2:66:A0:AB:1B:26:EA:A4:DE:48:39:A3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trez0rsuite-suite.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/7.4.33\r\nlink: \u003chttps://trez0rsuite-suite.us/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://trez0rsuite-suite.us/wp-json/wp/v2/pages/2\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://trez0rsuite-suite.us/\u003e; rel=shortlink\r\ncache-control: max-age=0\r\nexpires: Mon, 02 Feb 2026 16:32:50 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 22511\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 02 Feb 2026 16:32:50 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:26.8","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":128855,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16996)","md5":"13d5d0c132a2d2ba51c12a8a062ec3aa","sha1":"09ebd57902c2cec1162c3cf3a0d4c5c7ad3fd794","sha256":"a39f4dd1f3bf43767395b810f9b01b8557e2b1a31cd6bdd400bfeb679918783b","sha512":"77f98ffd7db0292bbe7e99134778a625f1cd70b67f0319d08df73ba0dd638da1f519dd70c752f0433804b2edd55534b15cd221008f715ddeddffa5e926e1c343","ssdeep":"3072:PE5wPG8dOM5ZMpj4wvSAIeTV46yEvC3iF:fbdOsZMpj4wvSAIeTVdfp","tlshash":"d5c3d661d36858f53a5b87798449b32cf45ae650ca4926e7f0f0e15898ccafa04f7b0f","first_seen":"2026-02-02T16:33:17.762216Z","last_seen":"2026-02-02T16:33:17.762216Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3583,"timings":{"blocked":557,"dns":173,"connect":126,"send":0,"wait":2467,"receive":1,"ssl":256},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"trez0rsuite-suite.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"trez0rsuite-suite.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trez0rsuite-suite.us/wp-content/themes/acai/assets/block-styles/core/group.min.css?ver=1.4","fqdn":"trez0rsuite-suite.us","domain":"trez0rsuite-suite.us","tld":"us"},"ip":{"addr":"23.254.240.243","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trez0rsuite-suite.us/","date":"2026-02-02T16:32:53.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"empowerretirement-t.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 12:55:24 GMT","end":"Mon, 27 Apr 2026 12:55:23 GMT"},"fingerprint":{"sha1":"D0:67:63:85:51:C2:9D:AD:1E:27:2A:28:C5:5E:82:9F:A3:36:8F:2B","sha256":"7F:9A:98:AF:14:F5:23:63:0D:7E:5B:01:08:E0:B1:C7:DF:83:35:54:A2:66:A0:AB:1B:26:EA:A4:DE:48:39:A3"}}},"request":{"raw":"GET /wp-content/themes/acai/assets/block-styles/core/group.min.css?ver=1.4 HTTP/1.1\r\nHost: trez0rsuite-suite.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trez0rsuite-suite.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 28 Jan 2026 08:36:30 GMT\r\naccept-ranges: bytes\r\ncache-control: public\r\nexpires: Tue, 02 Feb 2027 16:32:53 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 1082\r\ncontent-type: text/css\r\ndate: Mon, 02 Feb 2026 16:32:53 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12608,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12608), with no line terminators","md5":"b033f137838db9bbf01ea5549ac9f056","sha1":"72f0a764972f16dbaf813be6d60445ef951c0736","sha256":"23e284ad6dab8f1f841d8b59b15b64bd31543a5c6225eb560c10362760136f5f","sha512":"ae5388b720de988cf378c5a1440945db975bc2326dd6833332393ca2a57996109b5a8a1909df3649dac72d0ae39d293971965e37d935cd0a7f3e8cdadc64907a","ssdeep":"192:wRCqSCCXx34is6RMWk1fOqvx3HbWhMHitojkoDSdknuQDaIEtCXU5OTw9Dwhevkf:wRCfX1L+Hu9Y","tlshash":"9e42d9a5a764c4a688c506909ac421b60f1fe301de6189ef739a83071a8f3d917fd7e7","first_seen":"2025-07-28T22:31:59.391751Z","last_seen":"2026-07-26T18:42:30.117675Z","times_seen":40,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"trez0rsuite-suite.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"trez0rsuite-suite.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trez0rsuite-suite.us/wp-includes/blocks/cover/style.min.css?ver=6.9","fqdn":"trez0rsuite-suite.us","domain":"trez0rsuite-suite.us","tld":"us"},"ip":{"addr":"23.254.240.243","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trez0rsuite-suite.us/","date":"2026-02-02T16:32:53.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"empowerretirement-t.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 12:55:24 GMT","end":"Mon, 27 Apr 2026 12:55:23 GMT"},"fingerprint":{"sha1":"D0:67:63:85:51:C2:9D:AD:1E:27:2A:28:C5:5E:82:9F:A3:36:8F:2B","sha256":"7F:9A:98:AF:14:F5:23:63:0D:7E:5B:01:08:E0:B1:C7:DF:83:35:54:A2:66:A0:AB:1B:26:EA:A4:DE:48:39:A3"}}},"request":{"raw":"GET /wp-includes/blocks/cover/style.min.css?ver=6.9 HTTP/1.1\r\nHost: trez0rsuite-suite.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trez0rsuite-suite.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 07 Feb 2025 23:46:48 GMT\r\naccept-ranges: bytes\r\ncache-control: public\r\nexpires: Tue, 02 Feb 2027 16:32:53 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 1492\r\ncontent-type: text/css\r\ndate: Mon, 02 Feb 2026 16:32:53 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":19126,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19126), with no line terminators","md5":"63572908f5c4f1b77ab8bfb90a43d92f","sha1":"4dcca32b8b9143635264dccf437b80e1acf6525e","sha256":"666570bb7ac88a83bf11ede14a09166cd5cc1d83c4e2610f6b207e8a4596f6b6","sha512":"b71a51aa3808b586465a647285348b267ca721fe0609094988621e62f74498fb54d57b66240e055119146e444cd12cbf95e494a54de46710ebb8fb7afa3ea47c","ssdeep":"384:n95x4jp56/P14vPFgJUe3T1MHhZna/ZcBZDn/sNNgBgkgNgGg3xgc:n0eJ0GLaZmc","tlshash":"c7827a4122e58cfd75dfbe691f3deb88670b5c11c1894fdba53ae054634ca8888b3b16","first_seen":"2025-04-16T10:49:17.675381Z","last_seen":"2026-07-26T18:43:26.099887Z","times_seen":6530,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"trez0rsuite-suite.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"trez0rsuite-suite.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trez0rsuite-suite.us/wp-content/themes/acai/assets/css/fixes.min.css?ver=1.4","fqdn":"trez0rsuite-suite.us","domain":"trez0rsuite-suite.us","tld":"us"},"ip":{"addr":"23.254.240.243","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trez0rsuite-suite.us/","date":"2026-02-02T16:32:53.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"empowerretirement-t.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 12:55:24 GMT","end":"Mon, 27 Apr 2026 12:55:23 GMT"},"fingerprint":{"sha1":"D0:67:63:85:51:C2:9D:AD:1E:27:2A:28:C5:5E:82:9F:A3:36:8F:2B","sha256":"7F:9A:98:AF:14:F5:23:63:0D:7E:5B:01:08:E0:B1:C7:DF:83:35:54:A2:66:A0:AB:1B:26:EA:A4:DE:48:39:A3"}}},"request":{"raw":"GET /wp-content/themes/acai/assets/css/fixes.min.css?ver=1.4 HTTP/1.1\r\nHost: trez0rsuite-suite.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trez0rsuite-suite.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 28 Jan 2026 08:36:31 GMT\r\naccept-ranges: bytes\r\ncache-control: public\r\nexpires: Tue, 02 Feb 2027 16:32:53 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 197\r\ncontent-type: text/css\r\ndate: Mon, 02 Feb 2026 16:32:53 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":496,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (496), with no line terminators","md5":"ff772ecff2c1d287b5d32a690afbb831","sha1":"3892a8ead03d51a7b71a1b94b49dcdca190bcf8d","sha256":"0ce47fb70ee0869662c3850871303aee6322469d5aa74b1c5645836e81dba031","sha512":"ba10564ffbc052443520fe888df34152133ddeec67e4bad86dbe389c579e4b166c599ec0331690ff5c5d09265067734fa066da30ead93c4a22120f9203aeecf5","ssdeep":"","tlshash":"e2f0e2040fe889f831dbc23c986942e1a44c3021e5ab1bde822ce4a4621a74d08a7b17","first_seen":"2025-07-28T22:31:59.389001Z","last_seen":"2026-07-26T18:42:30.120961Z","times_seen":48,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"trez0rsuite-suite.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"trez0rsuite-suite.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trez0rsuite-suite.us/wp-content/themes/acai/assets/images/abstract-blocks.jpg","fqdn":"trez0rsuite-suite.us","domain":"trez0rsuite-suite.us","tld":"us"},"ip":{"addr":"23.254.240.243","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trez0rsuite-suite.us/","date":"2026-02-02T16:32:53.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"empowerretirement-t.us","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 12:55:24 GMT","end":"Mon, 27 Apr 2026 12:55:23 GMT"},"fingerprint":{"sha1":"D0:67:63:85:51:C2:9D:AD:1E:27:2A:28:C5:5E:82:9F:A3:36:8F:2B","sha256":"7F:9A:98:AF:14:F5:23:63:0D:7E:5B:01:08:E0:B1:C7:DF:83:35:54:A2:66:A0:AB:1B:26:EA:A4:DE:48:39:A3"}}},"request":{"raw":"GET /wp-content/themes/acai/assets/images/abstract-blocks.jpg HTTP/1.1\r\nHost: trez0rsuite-suite.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trez0rsuite-suite.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 28 Jan 2026 08:36:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 138929\r\ncache-control: public\r\nexpires: Tue, 02 Feb 2027 16:32:53 GMT\r\ncontent-type: image/jpeg\r\ndate: Mon, 02 Feb 2026 16:32:53 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":138929,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, datetime=2025:04:08 11:24:35], baseline, precision 8, 1280x853, components 1","md5":"35c5150b9b9d4188895567837609b1b8","sha1":"e4b8ad3d150778327a27ad8a3f1a0f5bd98f8c33","sha256":"8498339ed1cb83c9d1c52b51c0923302645c9bd687f801851584c8d32bcb735c","sha512":"43156c076cb1c452f1e8b3d18852acd11a96ce3df24401672ece541b48e249cb335d724432e0cc5e638b028570d819a4fcc4ab0fe4fbbf44696dccb11e32cfd8","ssdeep":"3072:RMMN0Mzwv2u7n6vM7CDLF6N7/GArj7X3IEpFUtITpKEhXBHPqW:Rn0MzwuK6vM2DRY6ALYEXUtITtXBHPv","tlshash":"84d312033fc299d6c1860b7f8cd516e2f52ce2029d45fba41bd7e04e9ea6586af061f4","first_seen":"2025-07-28T22:31:59.386519Z","last_seen":"2026-07-26T18:42:30.125834Z","times_seen":40,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":368,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"trez0rsuite-suite.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"trez0rsuite-suite.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}