{"report_id":"93e3ac39-cdeb-4ca9-adcc-c6d601b0b934","version":6,"status":"done","tags":[],"date":"2026-02-16T13:32:17Z","url":{"schema":"http","addr":"start-trezor.nicepage.io","fqdn":"start-trezor.nicepage.io","domain":"nicepage.io","tld":"io"},"ip":{"addr":"151.101.238.132","port":0,"asn":54113,"as":"FASTLY","country":"Norway","country_code":"NO"},"final":{"url":{"schema":"https","addr":"start-trezor.nicepage.io/","fqdn":"start-trezor.nicepage.io","domain":"nicepage.io","tld":"io"},"title":"Trezor.io/Start® | Starting™ Up Your Device","dom":{"size":9718,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (548)","md5":"ea8eb42ca4e59f2d7268d139c99279e6","sha1":"04d6b26ecbc57573ba9d8a3b48914966e1d4ee09","sha256":"5ef0b6485eb181520d435440b1f6cb3254ef774288293ef07a5178f8a21cab88","sha512":"062aa89ab115c6ee8db42d0c7a6a7d463b8d2f61c72321fff4fdf169c4a9e3a5ab449aab654f9a471a3e1d9156ea48ecb3def90c12979e541d8db2f7c44ed93a","ssdeep":"192:4/mpiyj/m+UzHWYY/pb+ApZSQUWJIKmcGPpJbg:xcH+5gIIKmc6jbg","tlshash":"c112e71ba1e5313b615355e9f165b768ff5a4002831709a0f6dd433aafc9ee2493334d","dom_hash":"domhash36a55c285df4bde698da2e6981c4ef79","first_seen":"2026-02-16T03:13:14.969108Z","last_seen":"2026-02-16T13:39:17.074486Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"start-trezor.nicepage.io","fqdn":"start-trezor.nicepage.io","domain":"nicepage.io","tld":"io"},"ip":{"addr":"151.101.238.132","port":0,"asn":54113,"as":"FASTLY","country":"Norway","country_code":"NO"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-23T13:32:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"start-trezor.nicepage.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"start-trezor.nicepage.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"start-trezor.nicepage.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"capp.nicepage.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2000-03-28","domain_rank":0,"first_seen":"2019-12-10T17:25:59Z","last_seen":"2026-02-11T06:33:17.939196Z","alert_count":0,"request_count":4,"received_data":2121020,"sent_data":1849,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"i.postimg.cc","ip":{"addr":"46.105.222.81","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"domain_registered":"2016-06-11","domain_rank":103883,"first_seen":"2018-04-11T10:01:12Z","last_seen":"2026-02-11T20:40:39.324952Z","alert_count":0,"request_count":1,"received_data":146590,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-15T22:14:55.382377Z","alert_count":0,"request_count":2,"received_data":90118,"sent_data":1124,"comment":"","tags":null,"fingerprints":null},{"fqdn":"start-trezor.nicepage.io","ip":{"addr":"151.101.2.132","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2018-04-13","domain_rank":0,"first_seen":"2026-02-16T03:13:11.96714Z","last_seen":"2026-02-16T03:13:11.96714Z","alert_count":12,"request_count":4,"received_data":889288,"sent_data":1848,"comment":"","tags":null,"fingerprints":[{"name":"Nicepage:7.12.11","description":"Nicepage is a free website building tool that requires no coding skills and integrates seamlessly with all leading CMS systems.","website":"https://nicepage.com","common_platform_enumeration":"","icon":"Nicepage.png","categories":["Page builders"]},{"name":"Nginx:1.19.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-15T22:17:53.373077Z","alert_count":0,"request_count":1,"received_data":173792,"sent_data":680,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"start-trezor.nicepage.io/","fqdn":"start-trezor.nicepage.io","domain":"nicepage.io","tld":"io"},"ip":{"addr":"151.101.2.132","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-14T06:47:37.053544Z","times_seen":743178,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capp.nicepage.com/assets/jquery-3.5.1.min.js","fqdn":"capp.nicepage.com","domain":"nicepage.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-08-14T06:49:09.339467Z","times_seen":266767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capp.nicepage.com/320c87c90828287baa908c13874c4c7a0fb6873d/nicepage.js","fqdn":"capp.nicepage.com","domain":"nicepage.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"244b5d4313e8b119b662ace67de76cc6","sha1":"abafac1bba6577f6735d04612ab268fbf8ce3196","sha256":"c5cbf8cd45f63f3ae548b28acc081c0f819de17f5292a9a63203603ed76c2a48","sha512":"757c2b43be356ecdca125d7097e14e78593411e1f9d54b1f48a580d591bbe46dcd1bcacee0adf113808c09432cb92af878772e7f37ab4f4de7b2579499f4d306","ssdeep":"6144:xqS7Mhbd6x1u2iNzOFyg8U2j1ET34hYRZZNCkbh7ujPmc+CqA7wxut31enO:xKeDiAFyinnA7wxUn","tlshash":"87941a88f26474b903a721f6405f160ab23a7c69940a4468f56de8e53e7cd5e233bf3d","size":430729,"data":"","first_seen":"2025-09-04T16:41:11.493683Z","last_seen":"2026-02-16T13:39:17.087127Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://start-trezor.nicepage.io/","date":"2026-02-16T13:31:55.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://start-trezor.nicepage.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 01:01:36 GMT\r\nexpires: Sat, 13 Feb 2027 01:01:36 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 304219\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-14T06:54:04.63935Z","times_seen":327855,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":88,"dns":1,"connect":21,"send":0,"wait":25,"receive":29,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"start-trezor.nicepage.io/","fqdn":"start-trezor.nicepage.io","domain":"nicepage.io","tld":"io"},"ip":{"addr":"151.101.2.132","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-16T13:31:54.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nicepage.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 21:23:13 GMT","end":"Wed, 08 Apr 2026 21:23:12 GMT"},"fingerprint":{"sha1":"62:7A:4B:29:35:84:96:78:84:B0:1E:1C:F1:FC:0A:ED:1D:2A:AF:A2","sha256":"37:C6:9B:ED:4E:93:C9:B1:CC:C7:FF:AD:3C:19:5A:08:A8:27:89:EE:ED:1A:BB:58:B7:CD:53:A4:06:30:A8:96"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: start-trezor.nicepage.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.19.2\r\ncontent-type: text/html\r\nx-amz-id-2: SkDMZ6ZVRBdSsyxW6nEQ88dIX6YLxk1PiBt1H0TcbA3V9Xa8/eerbMwUcNZH/CGKeadHSZ29ksq5xQOwPnofm8VX3CaJ31aAlBpqAcxwbAg=\r\nx-amz-request-id: HHERR8DVTGGMD9N7\r\nx-amz-version-id: Te.KKXqyI_5nLEnarfJTr8DjVuT6kak9\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Mon, 16 Feb 2026 13:31:54 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410023-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1771248714.439112,VS0,VE84\r\nvary: Accept-Encoding\r\ncontent-length: 3386\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nicepage:7.12.11","description":"Nicepage is a free website building tool that requires no coding skills and integrates seamlessly with all leading CMS systems.","website":"https://nicepage.com","common_platform_enumeration":"","icon":"Nicepage.png","categories":["Page builders"]},{"name":"Nginx:1.19.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":9582,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (548)","md5":"93a97c4a790c353bf023248eb8950528","sha1":"a5c371e6344a72c9c2474c11e2b04bf368b1c887","sha256":"32f30cadf8527cd2d5c72930daa02f7bbae06912b6e16182b584d01aa171b995","sha512":"1e0dd8255b42f92dde66e17a03c3b15ba5786b5f729f24589012f2c56a4750651745d6f70243087d3adee5abf2fec05047a9a8737d2b8995c84d2a0b070e10d5","ssdeep":"192:s/mpiyj/m+UzHWYYrSb+ApkSQUWJIKmcGPpJbB:dcH+5XdIKmc6jbB","tlshash":"ab12e61ba1e9312b215355e9f165b769ff5a4007831709a0f6ec433aafc9ee2493334d","first_seen":"2026-02-16T03:13:14.988605Z","last_seen":"2026-02-16T13:39:17.085643Z","times_seen":3,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":112,"dns":50,"connect":26,"send":0,"wait":111,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"start-trezor.nicepage.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"start-trezor.nicepage.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"start-trezor.nicepage.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?display=swap\u0026family=Roboto:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Open+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;1,300;1,400;1,500;1,600;1,700;1,800","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://start-trezor.nicepage.io/","date":"2026-02-16T13:31:54.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?display=swap\u0026family=Roboto:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Open+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;1,300;1,400;1,500;1,600;1,700;1,800 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://start-trezor.nicepage.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 16 Feb 2026 13:31:54 GMT\r\ndate: Mon, 16 Feb 2026 13:31:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":173106,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"0f112f29d5ff29e9fe2c0106be1e7e61","sha1":"733fccd143e46cf037da11f480eb48ba763c31b0","sha256":"8e347cfa64a735e8f86a4c9a96a7c3d310dcbcb47018930229c42bbf344b1bf9","sha512":"f0639fb1e22308a679b9e0c13c112c512f0835ea029ec6a45bf94341498787c9298fb54b3d1524db4bc499335d08ae85d117b150238307f652ebff9e4bf7571e","ssdeep":"1536:wPIZAPkFc34ZpVRNR97O3YRSrslIxerANy3El:wAO8WIvVRNR97O3YRSrslIxerANy3El","tlshash":"7504fca1041b5040ab435ce233ce7e34fe0f92617144d0b9abfd9b9baedad66527835c","first_seen":"2025-11-19T11:44:22.108288Z","last_seen":"2026-02-19T17:30:07.600586Z","times_seen":143,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":149,"dns":0,"connect":20,"send":0,"wait":33,"receive":0,"ssl":137},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://start-trezor.nicepage.io/","date":"2026-02-16T13:31:55.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://start-trezor.nicepage.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 03:10:51 GMT\r\nexpires: Sat, 13 Feb 2027 03:10:51 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nage: 296464\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-14T06:51:58.274964Z","times_seen":964360,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":145,"dns":1,"connect":20,"send":0,"wait":22,"receive":11,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"start-trezor.nicepage.io/favicon.ico","fqdn":"start-trezor.nicepage.io","domain":"nicepage.io","tld":"io"},"ip":{"addr":"151.101.2.132","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://start-trezor.nicepage.io/","date":"2026-02-16T13:31:55.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nicepage.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 21:23:13 GMT","end":"Wed, 08 Apr 2026 21:23:12 GMT"},"fingerprint":{"sha1":"62:7A:4B:29:35:84:96:78:84:B0:1E:1C:F1:FC:0A:ED:1D:2A:AF:A2","sha256":"37:C6:9B:ED:4E:93:C9:B1:CC:C7:FF:AD:3C:19:5A:08:A8:27:89:EE:ED:1A:BB:58:B7:CD:53:A4:06:30:A8:96"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: start-trezor.nicepage.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://start-trezor.nicepage.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx/1.19.2\r\ncontent-type: text/html\r\nlast-modified: Mon, 01 Jul 2024 13:10:38 GMT\r\nx-amz-version-id: FT9qWE0BVhUpA2Q17BX6y15wtpUeS1FK\r\netag: W/\"e01836379a08fd6809bc20a9933f25ef\"\r\nx-amz-error-code: NoSuchKey\r\nx-amz-error-message: The specified key does not exist.\r\nx-amz-error-detail-key: ez/or/start-trezor/favicon.ico\r\nx-amz-request-id: 9DNWYP61TV2RZ7G0\r\nx-amz-id-2: mCrIDHQrQLch982r7ark8qi64TXZI98hoNgaE+L74mfEbz7Rbt9diPICfvXLuEc344USUm3TzW0B+S7bZnlIzz7zDn2XXCCmJ5/81gvC4rc=\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Mon, 16 Feb 2026 13:31:55 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410023-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1771248715.400739,VS0,VE67\r\nvary: Accept-Encoding\r\ncontent-length: 1611\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.19.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5034,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (512), with CRLF line terminators","md5":"e01836379a08fd6809bc20a9933f25ef","sha1":"9f4811e190c4b78819150ee8cb0c52b52f913b9a","sha256":"232c9c61e2673ca9fae9dc5f0df884e6c12249f3862c8a8937fb92cf414061dd","sha512":"22339dcf2365fcdd0a271de82e5a6a1b54907f4195f90bc38498168c69800b81db709a863b263f27d024f5d365d469ad775e5e9da8c77691b894f94ae2b1dc2b","ssdeep":"48:tqvbwEzUwenCwT01aHUn3J3dYrtaEDXauwa8uKcnDtoCW2kufZJTNFMaQzCT8Rgx:Me0h3JeaEDrbhDr9fTNYJO","tlshash":"70a13162b78e610e9366429f367576e8de1dc063420606b0f5ed3663cbfd904075328a","first_seen":"2024-10-21T07:03:26.092237Z","last_seen":"2026-07-30T22:51:18.290348Z","times_seen":289,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"start-trezor.nicepage.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"start-trezor.nicepage.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"start-trezor.nicepage.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capp.nicepage.com/320c87c90828287baa908c13874c4c7a0fb6873d/nicepage.css","fqdn":"capp.nicepage.com","domain":"nicepage.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://start-trezor.nicepage.io/","date":"2026-02-16T13:31:54.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1156509985.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 06:53:19 GMT","end":"Sun, 29 Mar 2026 06:53:18 GMT"},"fingerprint":{"sha1":"0C:97:49:C0:D7:C8:62:40:BF:18:34:75:6F:71:31:88:E0:57:4C:89","sha256":"D1:A5:68:12:B6:A6:4B:CE:6B:BB:0C:19:8A:9A:2D:C9:1A:F8:E9:A5:A6:22:B5:65:7C:1B:38:3A:C1:B3:C9:77"}}},"request":{"raw":"GET /320c87c90828287baa908c13874c4c7a0fb6873d/nicepage.css HTTP/1.1\r\nHost: capp.nicepage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://start-trezor.nicepage.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:54 GMT\r\ncontent-type: text/css\r\nx-amz-id-2: XTDr0+Z80n1WmsCNyFQVz1DcpExdrUx/beVNgsyeIIrGZF+ETWiI0ueLqUi+zZ/6VG6QfSfDidyn47xgNE0fHyRHht6S4hbIv4s2Pd2IFb0=\r\nx-amz-request-id: SXQD748HSWSAM7YR\r\ncache-control: max-age=2592000\r\nlast-modified: Mon, 25 Aug 2025 10:54:44 GMT\r\nx-amz-version-id: iFgbbOIsKhrgLljBF9PD_myzo6yba2uI\r\netag: W/\"2a387e0b72927e8880739e1509df182a\"\r\nx-77-nzt: EwgBuUwJCgFBDAG5TAoBAfeyPAEADAFPf9j4Abejhg0A\r\nx-77-nzt-ray: e2f754202f14ca324a1c93691d68ef30\r\nx-77-cache: HIT\r\nx-77-age: 81074\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1596365,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9d5b52374546ead1f0dacea7a5735f3d","sha1":"8ae0629a95de953502d6937e9af29dff02e5f0b6","sha256":"92e50c20edc1e73eb6412b1b8f31e2351d1fb4e2c47c1fc2b046f054d40af498","sha512":"a773a0b50a5494f33658da83b92164785925a6268fbd0ab41ea0229c7bb18eef541b61c412a87ef56faa435d30086e6ed97955abb7f56e86e056dfa811d204a3","ssdeep":"24576:TIei6d5xC2HVA3RzigtgHc58XIFYv8JsfgHesyHUyOCSugqmsIu+Ks0Uyiq2aQqE:c","tlshash":"35252043f6600b2661131ad9618ff5abbb5c65c7cb0aad98736210481f8d8dfc13b99f","first_seen":"2025-09-04T16:41:11.499628Z","last_seen":"2026-02-16T13:39:17.086468Z","times_seen":5,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":94,"dns":52,"connect":9,"send":0,"wait":43,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"start-trezor.nicepage.io/nicepage-site.css","fqdn":"start-trezor.nicepage.io","domain":"nicepage.io","tld":"io"},"ip":{"addr":"151.101.2.132","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://start-trezor.nicepage.io/","date":"2026-02-16T13:31:54.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nicepage.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 21:23:13 GMT","end":"Wed, 08 Apr 2026 21:23:12 GMT"},"fingerprint":{"sha1":"62:7A:4B:29:35:84:96:78:84:B0:1E:1C:F1:FC:0A:ED:1D:2A:AF:A2","sha256":"37:C6:9B:ED:4E:93:C9:B1:CC:C7:FF:AD:3C:19:5A:08:A8:27:89:EE:ED:1A:BB:58:B7:CD:53:A4:06:30:A8:96"}}},"request":{"raw":"GET /nicepage-site.css HTTP/1.1\r\nHost: start-trezor.nicepage.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://start-trezor.nicepage.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.19.2\r\ncontent-type: text/css\r\nx-amz-id-2: 9jH5TGNF6u8mu6YQIPSXrOnMr8pWRfSPTiIVei712eqH8kQX86PYIJPRGqO0Cj3/Fj3sqt7ATYweh57JhAn7i6JA/7VfGmMibDRfE7l9jss=\r\nx-amz-request-id: HHEZSRBEWRJHBYQ5\r\nlast-modified: Mon, 25 Aug 2025 13:52:59 GMT\r\nx-amz-version-id: BWUTiy8ouJf5Da2RQ9xQ9SQ0gttICvOk\r\netag: W/\"df95bdd800d73ba2da72cf4253579ef2\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Mon, 16 Feb 2026 13:31:54 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410023-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1771248715.738045,VS0,VE173\r\nvary: Accept-Encoding\r\ncontent-length: 58125\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.19.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":870821,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"df95bdd800d73ba2da72cf4253579ef2","sha1":"105d39e4e21b33a8552c61a5e191ee407a7b3053","sha256":"b2aa9e9f97653526f62f5f0ef5166f920d65b2d321b068d6b66f511ac526474f","sha512":"00e4ae43eb1d57ddef3e882b8c6c9edf7f190abb55a659ccc19c1fe6b4d90cf1872f6208283d81934be566292c6f39f1ffc0058782d3321f16f74f8b2de7ff7f","ssdeep":"24576:9GlAtF6q37n2ZcnBVx9dOtaMkwVowL/n/joykcOiw+NoV9SivTvOhEvZt51lGViF:F","tlshash":"2805a353f660272b22431be9120ff5e1ff1979cac7426ae573374068168a88fd51e86f","first_seen":"2025-07-24T11:22:11.025344Z","last_seen":"2026-02-16T13:39:17.089472Z","times_seen":12,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"start-trezor.nicepage.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"start-trezor.nicepage.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"start-trezor.nicepage.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"start-trezor.nicepage.io/index.css","fqdn":"start-trezor.nicepage.io","domain":"nicepage.io","tld":"io"},"ip":{"addr":"151.101.2.132","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://start-trezor.nicepage.io/","date":"2026-02-16T13:31:54.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nicepage.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 21:23:13 GMT","end":"Wed, 08 Apr 2026 21:23:12 GMT"},"fingerprint":{"sha1":"62:7A:4B:29:35:84:96:78:84:B0:1E:1C:F1:FC:0A:ED:1D:2A:AF:A2","sha256":"37:C6:9B:ED:4E:93:C9:B1:CC:C7:FF:AD:3C:19:5A:08:A8:27:89:EE:ED:1A:BB:58:B7:CD:53:A4:06:30:A8:96"}}},"request":{"raw":"GET /index.css HTTP/1.1\r\nHost: start-trezor.nicepage.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://start-trezor.nicepage.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.19.2\r\ncontent-type: text/css\r\nx-amz-id-2: 4Im7oQGT8iofmz3yESt0L7JvK/Oy/5Te5o2rU5a827aPUR+LgoL8ntlciPcMLZiDgW+Q5TF/Kla/LQfm3tlS3SOuf3uYLJ6C\r\nx-amz-request-id: HHERVKS774Q4PQ3A\r\nlast-modified: Mon, 25 Aug 2025 13:52:59 GMT\r\nx-amz-version-id: QMtEN0ZcbF6M_n.AwMWBnd1zqMYxgtKW\r\netag: W/\"5f3d07ccf9ef6f2f36a8525fae29668e\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Mon, 16 Feb 2026 13:31:54 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410023-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1771248715.738309,VS0,VE78\r\nvary: Accept-Encoding\r\ncontent-length: 217\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.19.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":697,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5f3d07ccf9ef6f2f36a8525fae29668e","sha1":"12ed998663a79db6e9b431673f407fe83af0a1b5","sha256":"a2cf7a459ad2762f72b9f560493b270fb16a7805d2b889cf5dfd5b8b7d8f9f46","sha512":"718ee3db66fcd5805db19a576bc8f116054ad52cd74db234b7cda9464e4caffac19817357f74f869b605bb45d5e43d75be7a1d108ce23bb51328edd3600ef1c4","ssdeep":"","tlshash":"6b01a7d718b6245998d3b0a64dfe1008b181a807771fdbcaf59031ccef94be748119cb","first_seen":"2026-02-16T03:13:14.980166Z","last_seen":"2026-02-16T13:39:17.079825Z","times_seen":3,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"start-trezor.nicepage.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"start-trezor.nicepage.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"start-trezor.nicepage.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capp.nicepage.com/assets/jquery-3.5.1.min.js","fqdn":"capp.nicepage.com","domain":"nicepage.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://start-trezor.nicepage.io/","date":"2026-02-16T13:31:54.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1156509985.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 06:53:19 GMT","end":"Sun, 29 Mar 2026 06:53:18 GMT"},"fingerprint":{"sha1":"0C:97:49:C0:D7:C8:62:40:BF:18:34:75:6F:71:31:88:E0:57:4C:89","sha256":"D1:A5:68:12:B6:A6:4B:CE:6B:BB:0C:19:8A:9A:2D:C9:1A:F8:E9:A5:A6:22:B5:65:7C:1B:38:3A:C1:B3:C9:77"}}},"request":{"raw":"GET /assets/jquery-3.5.1.min.js HTTP/1.1\r\nHost: capp.nicepage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://start-trezor.nicepage.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:54 GMT\r\ncontent-type: application/javascript\r\nx-amz-id-2: HzNvdsi2y2RKxkwqTeyhmBnS5cSV4urzrwf2QqSQ8I1x1hotyNmlT9NgZaHXSNF8x1sFUV5S4XCi13BBroqNd+Qn+UZqUB3MzceRnov1IjY=\r\nx-amz-request-id: SWQ0NM9F1TWYT5B1\r\ncache-control: max-age=2592000\r\nlast-modified: Thu, 07 Dec 2023 15:48:10 GMT\r\nx-amz-version-id: BHUtVzyv1kQsOdZbxNDIMwhzK9g4em4e\r\netag: W/\"dc5e7f18c8d36ac1d3d4753a87c98d0a\"\r\nx-77-nzt: EwwBuUwJCgH3ySElAAwBuUwKEwH3JAAAAAwBWd59LgG3PckkAA\r\nx-77-nzt-ray: e2f754202f14ca324a1c9369beb71431\r\nx-77-cache: HIT\r\nx-77-age: 2433481\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":89476,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-08-14T06:49:09.339467Z","times_seen":266767,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":90,"dns":50,"connect":9,"send":0,"wait":10,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capp.nicepage.com/320c87c90828287baa908c13874c4c7a0fb6873d/nicepage.js","fqdn":"capp.nicepage.com","domain":"nicepage.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://start-trezor.nicepage.io/","date":"2026-02-16T13:31:54.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1156509985.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 06:53:19 GMT","end":"Sun, 29 Mar 2026 06:53:18 GMT"},"fingerprint":{"sha1":"0C:97:49:C0:D7:C8:62:40:BF:18:34:75:6F:71:31:88:E0:57:4C:89","sha256":"D1:A5:68:12:B6:A6:4B:CE:6B:BB:0C:19:8A:9A:2D:C9:1A:F8:E9:A5:A6:22:B5:65:7C:1B:38:3A:C1:B3:C9:77"}}},"request":{"raw":"GET /320c87c90828287baa908c13874c4c7a0fb6873d/nicepage.js HTTP/1.1\r\nHost: capp.nicepage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://start-trezor.nicepage.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:54 GMT\r\ncontent-type: application/x-javascript\r\nx-amz-id-2: ClYO8aIpukyXEy68NZC2qaTNdKNwxrJFbblvEmr6/hDoEmkNxQfBi7WvSL753CxFCus2WZOCTziOlUiTd6kQ9K0MQFuqgTEl4ZK+71X2oC4=\r\nx-amz-request-id: M76B99T432MHFZVS\r\ncache-control: max-age=2592000\r\nlast-modified: Mon, 25 Aug 2025 10:54:44 GMT\r\nx-amz-version-id: PW1hyLtxjil6GJioqSsFml9MUlwLocps\r\netag: W/\"244b5d4313e8b119b662ace67de76cc6\"\r\nx-77-nzt: EwgBuUwJCgFBDAG5TAoTAfeyPAEADAFZ3n0uAbcZyA0A\r\nx-77-nzt-ray: e2f754202f14ca324a1c9369a68f0931\r\nx-77-cache: HIT\r\nx-77-age: 81074\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":430729,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"244b5d4313e8b119b662ace67de76cc6","sha1":"abafac1bba6577f6735d04612ab268fbf8ce3196","sha256":"c5cbf8cd45f63f3ae548b28acc081c0f819de17f5292a9a63203603ed76c2a48","sha512":"757c2b43be356ecdca125d7097e14e78593411e1f9d54b1f48a580d591bbe46dcd1bcacee0adf113808c09432cb92af878772e7f37ab4f4de7b2579499f4d306","ssdeep":"6144:xqS7Mhbd6x1u2iNzOFyg8U2j1ET34hYRZZNCkbh7ujPmc+CqA7wxut31enO:xKeDiAFyinnA7wxUn","tlshash":"87941a88f26474b903a721f6405f160ab23a7c69940a4468f56de8e53e7cd5e233bf3d","first_seen":"2025-09-04T16:41:11.493683Z","last_seen":"2026-02-16T13:39:17.087127Z","times_seen":8,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":88,"dns":50,"connect":9,"send":0,"wait":34,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/zDx2ttSY/trezor-banner.jpg","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"46.105.222.81","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://start-trezor.nicepage.io/","date":"2026-02-16T13:31:54.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 07:05:38 GMT","end":"Thu, 14 May 2026 07:05:37 GMT"},"fingerprint":{"sha1":"0C:60:FC:7F:49:9C:E4:F1:E8:28:6F:D1:45:F4:24:E1:7A:D7:FE:79","sha256":"9C:DF:9E:CA:39:40:61:D1:0E:A6:F4:42:3F:FB:A1:4B:BF:82:59:98:C4:CA:4D:56:1F:BD:99:B9:9F:EA:19:D0"}}},"request":{"raw":"GET /zDx2ttSY/trezor-banner.jpg HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://start-trezor.nicepage.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Feb 2026 13:31:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 146225\r\nlast-modified: Fri, 16 May 2025 05:02:07 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146225,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 1280x573, components 3","md5":"654e1cb01c85faaa49b2d2e74a0fdc06","sha1":"7621d503e95a868c1ffb19d2b58f5e487038541e","sha256":"35bf53ce3e2dbff1f5339ffdd1d0ab2b8caebe3acc44ab6971893fac861f1569","sha512":"a38a65c4b6c543080ca2fe97928819d5090464af4cf8560e4a33f15e28077317a9d6b2cba43f73c4965dd0c71fce08c90508e24ce0765de61fd826168a5b7499","ssdeep":"3072:8pLPLpRJoo5HXqMBmi3awuhoBCM/eZF524Vs1vU5afG9GpiuPhc:ILhTqMfMoBCM/aIfGmdq","tlshash":"49e3123da20bc3d0e5ae2dfbc86a4375a6b0681472f57932205b9ff235057ca953e45c","first_seen":"2026-02-16T03:13:14.984271Z","last_seen":"2026-02-16T13:39:17.082642Z","times_seen":3,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":69,"dns":1,"connect":23,"send":0,"wait":47,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capp.nicepage.com/images/default-logo.png","fqdn":"capp.nicepage.com","domain":"nicepage.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://start-trezor.nicepage.io/","date":"2026-02-16T13:31:54.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1156509985.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 06:53:19 GMT","end":"Sun, 29 Mar 2026 06:53:18 GMT"},"fingerprint":{"sha1":"0C:97:49:C0:D7:C8:62:40:BF:18:34:75:6F:71:31:88:E0:57:4C:89","sha256":"D1:A5:68:12:B6:A6:4B:CE:6B:BB:0C:19:8A:9A:2D:C9:1A:F8:E9:A5:A6:22:B5:65:7C:1B:38:3A:C1:B3:C9:77"}}},"request":{"raw":"GET /images/default-logo.png HTTP/1.1\r\nHost: capp.nicepage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://start-trezor.nicepage.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 1804\r\nx-amz-id-2: EDjqMReDZfJUzepb+/AJhPCI8XnoKmMKYxPs45224lUlMIJlIMaJ2fuVxTeF4VBlZf+0UZ+e0ck=\r\nx-amz-request-id: SJYB4NGYFWYEH2MH\r\ncache-control: max-age=2592000\r\nlast-modified: Thu, 07 Dec 2023 16:44:29 GMT\r\nx-amz-version-id: O2eanh.HeWezR5CQxhU7Et8hT8Nq8A2w\r\netag: \"c788ab934795d6896b675b10861401c2\"\r\nx-77-nzt: EwwBuUwJCgH3RAoQAAwBuUwKCQH3gKYKAAwBJRPCLgH3ZEwfAA\r\nx-77-nzt-ray: e2f754202f14ca324a1c9369d9bcf330\r\nx-77-cache: HIT\r\nx-77-age: 1051204\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1804,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit/color RGBA, non-interlaced","md5":"c788ab934795d6896b675b10861401c2","sha1":"a555b2a7d49cc20849d0827fc7fb51ee8d89655a","sha256":"26cf65fd50a7f8a05154d8e5a6c5cc94302a2bded4fcca8bd4dc331e140c14de","sha512":"60bd65047c4cfcd11714af31026fc89084b1c07f3b1b6e24ac2e97ad0b489d28a49ed4f1a9271b5e7e140f836c848fa44a3cdffa61e9c63abfd3e03c330f6880","ssdeep":"","tlshash":"aa31e98ff1110d4034ca908429e89273e9264ec1b382e5d2598be88986a15fc8fad7d7","first_seen":"2023-05-09T10:45:14Z","last_seen":"2026-06-21T23:57:26.459318Z","times_seen":55,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":85,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}