{"report_id":"9a77c054-4d19-4c17-a2bf-a896c691464e","version":0,"status":"done","tags":[],"date":"2026-08-12T01:39:46Z","url":{"schema":"http","addr":"trezor.win/?naps","fqdn":"trezor.win","domain":"trezor.win","tld":"win"},"ip":{"addr":"104.21.80.45","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.trezor.win/?naps","fqdn":"www.trezor.win","domain":"trezor.win","tld":"win"},"title":"trezor","dom":{"size":180064,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8178)","md5":"45d5c0e2736ead1530ef32acf2968cbc","sha1":"9c92251e35fe5e7231664803d0d076598465bab9","sha256":"6a7b2e659c55026becf3b97824f8b2eab00aae08d0c5e9b04cf41afc0001b979","sha512":"60dc922e3f9e530ec6c3a348e6069b1c8affaa7363728ba3540f383d3c2a0d8bcaa9d12b8aebbb8313547187f812a80dbc7a6f3179372fbacf9c90148a94ab77","ssdeep":"1536:Tp6K4rw28RKs03mIdZ6kx32Hd4VmLGg0pAsxgwNsJqs6qmGmvdqmGmv47mHmtk7Y:Tp6K4reWmUx32Hd4ULGaZwQN0LnVs","tlshash":"7e04a7725d517726713f803eb182e609ffb8a0438549ebdcfea810646ece2d642b716d","dom_hash":"domhash1d84ecf17374f7e2c62c4434e9879a7b","first_seen":"2026-08-12T01:11:06.805922Z","last_seen":"2026-08-12T01:39:51.731641Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"trezor.win/?naps","fqdn":"trezor.win","domain":"trezor.win","tld":"win"},"ip":{"addr":"104.21.80.45","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-16T01:39:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":10}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-12","alert":"Phishing Block","trigger":"www.trezor.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-12","alert":"Phishing Block","trigger":"trezor.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.trezor.win","ip":{"addr":"172.67.174.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-22","domain_rank":0,"first_seen":"2026-06-29T06:22:11.344883Z","last_seen":"2026-08-12T01:11:03.384699Z","alert_count":70,"request_count":14,"received_data":11433229,"sent_data":6572,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"Alibaba Cloud CDN","description":"Alibaba Cloud CDN is a global network of servers designed to deliver high-performance, low-latency content to users around the world. It is a cloud-based service provided by Alibaba Cloud, a subsidiary of the Alibaba Group, that enables businesses to accelerate the delivery of their web content, including images, videos, and static files, to end-users.","website":"https://www.alibabacloud.com/product/content-delivery-network","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["CDN"]}]},{"fqdn":"trezor.win","ip":{"addr":"172.67.174.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-22","domain_rank":0,"first_seen":"2026-08-12T01:11:02.775786Z","last_seen":"2026-08-12T01:11:02.775786Z","alert_count":5,"request_count":1,"received_data":621,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"at.alicdn.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2008-06-25","domain_rank":96084,"first_seen":"2013-11-28T05:03:29Z","last_seen":"2026-08-07T12:08:53.722586Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":987,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.trezor.win/layer/layer.js","fqdn":"www.trezor.win","domain":"trezor.win","tld":"win"},"ip":{"addr":"172.67.174.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"47db0e57d73194c6a41bab5b4d55e860","sha1":"9db378fa8d56979e86519f483993486dc476902b","sha256":"69025fc1818313fb94c9ca4975c6a45e8385a6fd0ab9d0c60c0ac93cd997566e","sha512":"851e8630a4e631b332027850905245cb68ea56fddab22a8b7504bb4689c1a26b955ddf1b0ef23d1b1a0ecd83d668e115c9e10caf823029046a97a9f7b5c858b7","ssdeep":"384:N1xCih92A3igrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:N1EiV3i+WtXItqF13k8","tlshash":"85a2b66a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","size":22105,"data":"","first_seen":"2023-04-07T19:23:28Z","last_seen":"2026-08-12T03:00:30.3289Z","times_seen":1261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor.win/static/tradeview/datafeeds/udf/dist/bundle.js","fqdn":"www.trezor.win","domain":"trezor.win","tld":"win"},"ip":{"addr":"172.67.174.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6466bb5a15ac244de5626cc6d58dd7a","sha1":"2b799448750e1830e07bd2f89ae2d5f11fc95a83","sha256":"f9c9b8447d430ed9f3d69aca108c253fa5541a2fcc0a98e822edc28e3046a998","sha512":"413b0b8f0c194fd397afcdfbe54018830a885b66cff309dc900d7788d1dcadc389c75e3e93755c4ebae214d1c5f8abaa07885d22ad5fa447c7f66dcdba0924e2","ssdeep":"384:kpe0jAoNzmAHgWH4NRZsPA4iCA2PHDJMJ:oBiWH4jZsDPA2PHyJ","tlshash":"7252a6c97611312182936472e87f380ba139b515688a903c71c8e9de6efdb5dea17f3c","size":13540,"data":"","first_seen":"2023-03-10T14:26:47Z","last_seen":"2026-08-12T01:39:51.739845Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor.win/static/tradeview/charting_library/charting_library.min.js","fqdn":"www.trezor.win","domain":"trezor.win","tld":"win"},"ip":{"addr":"172.67.174.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"38e628745bfe6be6bac3f336a6e806cc","sha1":"d58cb707ff7bab2304e888dc91d02fa260fd4e52","sha256":"dba3717e46ccf9687d725c825219349248e90bac7a805b5e77057863018c563e","sha512":"ea51203227931f43ad23c3d99061fb751a3bd5f9ed4cfb6aff31fb2a7507221b3f9d2741794297027c17a213e4138ebdc937b43fd08cd3809d1d9dbbf49634c4","ssdeep":"192:3gWbnhkcii1HMYE8qxwXTPDgFhQ+/JMH1aonM95si5Vp3830J13ndPWxPRnLYDML:9bhkclDkGVlu9PWVRnL00u3OH8A","tlshash":"f7323154fb6c6c3605c722f4c47f680b913ee27ad0a544ac38c491dc58fd446baabab9","size":11901,"data":"","first_seen":"2023-03-10T14:26:46Z","last_seen":"2026-08-12T01:39:51.738786Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor.win/static/tradeview/datafeeds/udf/dist/polyfills.js","fqdn":"www.trezor.win","domain":"trezor.win","tld":"win"},"ip":{"addr":"172.67.174.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"770b6e32570470374f29dba33e0f95b6","sha1":"64f6aed78e689c5b601946dab613c3678c558dab","sha256":"7da37ef86ad23b00dd959e0c189d29870cf99c2cd5dcad12634ed3961f69161e","sha512":"ecc5b498c8fd0edb1e145e6afd7e9f8cc98e65694b2670b2791f5af44bf0f5041bbd9cf119191f419942e7cbec53498127ddbdf0bb2b36391c8bc61bc2537ae1","ssdeep":"192:/5C5b4rmkiNL70mrZm3KosuxV6/hk3haw5UPQ0wx9B4EhN0xhOU8L:xGegVrZLO3gyP6EhN0xhG","tlshash":"49128588f7e0b472036360b4917f450fb2b53925648e41b8f260d8ea6cbd44d962bf7c","size":9648,"data":"","first_seen":"2023-03-10T14:26:46Z","last_seen":"2026-08-12T01:39:51.736645Z","times_seen":122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor.win/1.2.0-beta.6.js","fqdn":"www.trezor.win","domain":"trezor.win","tld":"win"},"ip":{"addr":"172.67.174.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f8538019f3eeb7f79099329547c3242","sha1":"be9b37b50bda0ed654038706fdfb63cbdf2d412e","sha256":"9a22946e2692cd92755b21acc3550b2447c021ef7c364cd0c9edbc94f334e16f","sha512":"809a429f3ba262c0eb01571bed62060afc5f2c557816a3cd1aa033874c2f9ac0cea09cd93df925c06f9e01003593d5b7e8860214b1565bbf409236127f364037","ssdeep":"49152:07Xjhuo/dP2YWWHraAwYxHmRyzwPjFDH8lf3X7tebjWsdwiw+uDBzPDNKlodFgfj:0vZVtw","tlshash":"a4c56b9a7292f09203e715b9906f0406f33b7749644e4934f674c8e7aca858db2b7f78","size":2589951,"data":"","first_seen":"2026-05-06T09:00:43.563983Z","last_seen":"2026-08-12T01:39:51.741413Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor.win/?naps","fqdn":"www.trezor.win","domain":"trezor.win","tld":"win"},"ip":{"addr":"172.67.174.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ab80f0ba3f4877c5d5f81258e0d5354","sha1":"e9bb3034fdf6eef134bc9cc3b88c64adb498fb2b","sha256":"8dc8bb5056c0bf23d6546d5e3483028304c5d35be33fa3c60078cbe7bbe2d595","sha512":"59bbb8bf66334f8a264dfd47f9402a01eb17eb0d8ef7095229afae2c5e0a4c34348d2cb51a13dee204c3db36950237429830fd13b4d1552d41503de447df2b0b","ssdeep":"","tlshash":"c711f5b92a1335a483efe035866bf58664787217200ac540fc4d9ba91fd9a3108f76ec","size":956,"data":"","first_seen":"2026-08-12T01:11:06.844269Z","last_seen":"2026-08-12T01:39:51.74208Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor.win/?naps","fqdn":"www.trezor.win","domain":"trezor.win","tld":"win"},"ip":{"addr":"172.67.174.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0c018705ba2f35944a235d8e93f4d8bb","sha1":"ea5ec349a8108478d8083f7bef54c2f7b6d1bc46","sha256":"9d6360f475ebcafa1ed65c572c1a19445b7fdead05998c913c8d2e99f9f69e4f","sha512":"c802ce6a7f1fa14890343e121f5f4bf0d56e32ed3f6eda5c9673525845fd2df4ca2732e4a897718f6284836e47cb765a4595ea701082748d3e07e843e6c06ea2","ssdeep":"","tlshash":"13f0821026f858758460f1329d8f627656332e1f1c4bb324750c03406f9fb1ea1f2afa","size":652,"data":"","first_seen":"2025-03-04T01:55:58.02057Z","last_seen":"2026-08-12T01:39:51.742863Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor.win/jquery.js","fqdn":"www.trezor.win","domain":"trezor.win","tld":"win"},"ip":{"addr":"172.67.174.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9087a9859288a8b9e5275a823c2ace1e","sha1":"f2c621911b387b2a6399c08d05c7027653a9e072","sha256":"730fa28a30b20e876e67b0ceacc14ef814ade02fc3504d91435675f5e847f287","sha512":"e46f3420f05a12c3063df19a03689b6029d479230d03fddb5d2adc4abf655c795c3c1b3777fc3d6fc7a3cfbfee089ef19d5fdc925be73d5dbdc64524a1a253ab","ssdeep":"1536:GP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98HrA:Z+41hJiz6fhdlTqya98HrA","tlshash":"5f83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84342,"data":"","first_seen":"2023-03-07T13:00:08Z","last_seen":"2026-08-12T01:39:51.735601Z","times_seen":252,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor.win/clipboard.min.js","fqdn":"www.trezor.win","domain":"trezor.win","tld":"win"},"ip":{"addr":"172.67.174.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"accff5dc2cb43e6df205a847b60ad842","sha1":"47907b9c091df255c85d0c714afad8ff73d4498a","sha256":"95d4ec004897f09d8c4a0ae3c2cbab1fe950d75d86cffe049ccb1ff166747592","sha512":"e441e85996113dcae14fe2cb8769ad06316a0745ae4aed727889baf13d9c0464b26f74dcdd7b3abdf25f18463f11c9d33a71d719ee39e1fc0c4bb97052fc3808","ssdeep":"192:k0i1RWxek1XVTkAkI/qHnHZ4Ly98Dom53C5GU7oKZoQhoslw/3JAQZu5CpVHa4LV:FivWxeBI/vCc3kHiQ7l83JJu54z9f","tlshash":"ae32964cb28071b196db60ae902f424fb270942570ae90d4b639e8f5ad7ceed1567f3c","size":11037,"data":"","first_seen":"2024-08-20T08:35:39.529569Z","last_seen":"2026-08-12T01:39:51.736145Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.trezor.win/layer/theme/default/layer.css?v=3.1.1","fqdn":"www.trezor.win","domain":"trezor.win","tld":"win"},"ip":{"addr":"172.67.174.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trezor.win/?naps","date":"2026-08-12T01:39:06.958Z","timestamp":1786498746958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 05:10:09 GMT","end":"Sun, 20 Sep 2026 06:08:43 GMT"},"fingerprint":{"sha1":"F2:54:7F:C0:1C:F5:A6:37:ED:76:BB:F2:9F:84:F3:E9:02:9A:6A:AB","sha256":"8A:D6:13:F4:F0:00:2A:AC:15:5E:BF:85:F5:4E:F6:FB:35:75:DB:C7:CE:EE:94:47:63:2E:05:4D:F9:3C:4C:62"}}},"request":{"raw":"GET /layer/theme/default/layer.css?v=3.1.1 HTTP/1.1\r\nHost: www.trezor.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor.win/?naps\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 12 Aug 2026 01:39:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Jul 2026 03:53:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a697950-381f\"\r\nexpires: Wed, 12 Aug 2026 13:10:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1728\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UZVQAFMw3Ih8HH8Ew1zWqsYnzUafX0DK%2FL1Xv341nws0IrJLvY31KSEKjiG6Yys33DEXM3elFIN80N%2Bs5J2b7%2BOrk05qZo0ns1yvZVukEBbHh6u8EoAVg2alAOHhWP5ArA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a29bc3b07f9ab51b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14367,"size_decoded":3622,"mime_type":"text/css","magic":"ASCII text, with very long lines (14367), with no line terminators","md5":"3d2e0d91c5c0b96abb8dbdc2234aba77","sha1":"9d55e153b30fd7414fada5718e20918e9c7f65e7","sha256":"e3144d018a6a24f733c6fc2a2ee603fb583f0030585e9d4b71bec471b78e31fc","sha512":"42bf3eff281998d088ce012b9a5910f72951c91715595572bb968fbfc5fa2b1cddacef3ca683a1734eb41114b302b6a4dad8b7432c5877b3563a080a2547ae05","ssdeep":"96:mp+Ntha8qNEp+wRY1vUPXiK6nMLPD2OtLzXyPHL/LztJDzyv2OQ7KGx1jyd2/SWz:1WmLr2OtSrzzt42OQ7KGx1jCWR2b+RcU","tlshash":"2e5221e144811299b0278721d6dc7eba32f88d43e5630daef257381f874c6dba2b6647","first_seen":"2023-04-05T06:05:22Z","last_seen":"2026-08-12T01:39:51.732516Z","times_seen":6798,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-12","alert":"Phishing Block","trigger":"www.trezor.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezor.win/?naps","fqdn":"trezor.win","domain":"trezor.win","tld":"win"},"ip":{"addr":"172.67.174.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-12T01:39:04.867Z","timestamp":1786498744867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 05:10:09 GMT","end":"Sun, 20 Sep 2026 06:08:43 GMT"},"fingerprint":{"sha1":"F2:54:7F:C0:1C:F5:A6:37:ED:76:BB:F2:9F:84:F3:E9:02:9A:6A:AB","sha256":"8A:D6:13:F4:F0:00:2A:AC:15:5E:BF:85:F5:4E:F6:FB:35:75:DB:C7:CE:EE:94:47:63:2E:05:4D:F9:3C:4C:62"}}},"request":{"raw":"GET /?naps HTTP/1.1\r\nHost: trezor.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\nserver: cloudflare\r\ndate: Wed, 12 Aug 2026 01:39:05 GMT\r\ncontent-type: text/html\r\npriority: u=0,i\r\nlocation: https://www.trezor.win/?naps\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MABz8PqO8375X7snoy5KC4zpd0grNZCzAoTthHGB1DTFhrVTlfWsyDgOLbRtB%2B0SaMRH3Pc3DrmS0JR36XEtSFAbzqqXWcOh2iIi8WFsMZck3axF1Pzj3gb%2BKhfN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a29bc3a39f45b51b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":742,"timings":{"blocked":0,"dns":14,"connect":13,"send":0,"wait":715,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-12","alert":"Phishing Block","trigger":"trezor.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor.win/layer/layer.js","fqdn":"www.trezor.win","domain":"trezor.win","tld":"win"},"ip":{"addr":"172.67.174.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trezor.win/?naps","date":"2026-08-12T01:39:06.628Z","timestamp":1786498746628,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 05:10:09 GMT","end":"Sun, 20 Sep 2026 06:08:43 GMT"},"fingerprint":{"sha1":"F2:54:7F:C0:1C:F5:A6:37:ED:76:BB:F2:9F:84:F3:E9:02:9A:6A:AB","sha256":"8A:D6:13:F4:F0:00:2A:AC:15:5E:BF:85:F5:4E:F6:FB:35:75:DB:C7:CE:EE:94:47:63:2E:05:4D:F9:3C:4C:62"}}},"request":{"raw":"GET /layer/layer.js HTTP/1.1\r\nHost: www.trezor.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor.win/?naps\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 12 Aug 2026 01:39:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Jul 2026 03:53:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a697950-5665\"\r\nexpires: Wed, 12 Aug 2026 13:10:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1729\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kdCNsGeC8fkgopQbmA8JhFHXAdLhmSlGJpbVrfcThXkAaOOLteeFG0yZJlpIh6A7nnVQ%2FVaSehf9QwzGHNhp6a8E20fMWUVWslO5nrtspZOuQDLi%2FpZl9WKV7Iz5C4kllw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a29bc3ae6f8db51b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22117,"size_decoded":8440,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22020), with CRLF line terminators","md5":"47db0e57d73194c6a41bab5b4d55e860","sha1":"9db378fa8d56979e86519f483993486dc476902b","sha256":"69025fc1818313fb94c9ca4975c6a45e8385a6fd0ab9d0c60c0ac93cd997566e","sha512":"851e8630a4e631b332027850905245cb68ea56fddab22a8b7504bb4689c1a26b955ddf1b0ef23d1b1a0ecd83d668e115c9e10caf823029046a97a9f7b5c858b7","ssdeep":"384:N1xCih92A3igrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:N1EiV3i+WtXItqF13k8","tlshash":"85a2b66a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","first_seen":"2023-04-07T19:23:28Z","last_seen":"2026-08-12T03:00:30.3289Z","times_seen":1261,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-12","alert":"Phishing Block","trigger":"www.trezor.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor.win/css/chunk-vendors.ccdedb03.css","fqdn":"www.trezor.win","domain":"trezor.win","tld":"win"},"ip":{"addr":"172.67.174.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trezor.win/?naps","date":"2026-08-12T01:39:06.819Z","timestamp":1786498746819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 05:10:09 GMT","end":"Sun, 20 Sep 2026 06:08:43 GMT"},"fingerprint":{"sha1":"F2:54:7F:C0:1C:F5:A6:37:ED:76:BB:F2:9F:84:F3:E9:02:9A:6A:AB","sha256":"8A:D6:13:F4:F0:00:2A:AC:15:5E:BF:85:F5:4E:F6:FB:35:75:DB:C7:CE:EE:94:47:63:2E:05:4D:F9:3C:4C:62"}}},"request":{"raw":"GET /css/chunk-vendors.ccdedb03.css HTTP/1.1\r\nHost: www.trezor.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor.win/?naps\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 12 Aug 2026 01:39:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Jul 2026 03:53:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a697950-36d51\"\r\nexpires: Wed, 12 Aug 2026 13:10:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1729\r\npriority: u=0,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hmhc38u8iOGBl3zWIY5qbeCKjAy%2BcgbT6enWECJMxgHTUykQTEGc%2BydWp07JUn%2B0SIXbV0VYzWcpZgF%2BrWQS7ea5zxWU5hm7U4cOWNmwD6IcROf7HlfkeH%2BM8YiC%2Bp1d9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a29bc3af9f95b51b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":224593,"size_decoded":39831,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8325e14dcab74128a519a39c5d564eec","sha1":"5362f85464e4b8ced7f50b4695279757cd4bae05","sha256":"0386fb80c5e751cdd436a50cfa23f261bbadb29ba8b236461fd0a45dbe979ac0","sha512":"f7c14adc986fea25c21c503dded5718c7ff290da7a3ee906aab9128fd3c257ac10e828d6515fe0bafec9c3bd5604978fe15ac643a745c56a0e1d8c8a6273f85d","ssdeep":"1536:j6vASf65WCXkc28Y7SrW3YeWXA1u9w4HCe/l4JrgW9cMERw4B78O6iZkJgYu8e2b:j6v7f65WCXkltKw/27eDLL6of","tlshash":"9424b5109b17247b622bda6d74c0ba896f24c323d8735b3bfd95780cc6e64991227e1f","first_seen":"2026-05-24T23:21:11.156513Z","last_seen":"2026-08-12T01:39:51.734288Z","times_seen":7,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-12","alert":"Phishing Block","trigger":"www.trezor.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor.win/?naps","fqdn":"www.trezor.win","domain":"trezor.win","tld":"win"},"ip":{"addr":"172.67.174.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-12T01:39:05.618Z","timestamp":1786498745618,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 05:10:09 GMT","end":"Sun, 20 Sep 2026 06:08:43 GMT"},"fingerprint":{"sha1":"F2:54:7F:C0:1C:F5:A6:37:ED:76:BB:F2:9F:84:F3:E9:02:9A:6A:AB","sha256":"8A:D6:13:F4:F0:00:2A:AC:15:5E:BF:85:F5:4E:F6:FB:35:75:DB:C7:CE:EE:94:47:63:2E:05:4D:F9:3C:4C:62"}}},"request":{"raw":"GET /?naps HTTP/1.1\r\nHost: www.trezor.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 12 Aug 2026 01:39:06 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 29 Jul 2026 03:53:52 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oW7HzZIJXqQWCh5SPVBX4Xay0D1OBtYgza6LLL1KgIdblu2321nD4zQF%2BYynomsqidjyfK77aSsGiCZbSR2p%2BprygqVfEKARD2xMWSdxQ3PK6BIi2AUuJHXtaMt%2FjNgkkw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\ncf-ray: a29bc3a82f78b51b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"Alibaba Cloud CDN","description":"Alibaba Cloud CDN is a global network of servers designed to deliver high-performance, low-latency content to users around the world. It is a cloud-based service provided by Alibaba Cloud, a subsidiary of the Alibaba Group, that enables businesses to accelerate the delivery of their web content, including images, videos, and static files, to end-users.","website":"https://www.alibabacloud.com/product/content-delivery-network","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3489,"size_decoded":1961,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (831), with CRLF, LF line terminators","md5":"600dd3bcca769f3b99d07adda8fc7e12","sha1":"9aafb5d574996b7207930b778871c7813a0fb417","sha256":"2b0ecbc84252ea191cc481a6b34046d2c051315a5760227267256b0e7a224558","sha512":"1b4c059856824f7d1c149fddf27c2ebfdf65031cbef0e4ebd67236e882c83b695a31b93a544c156c341d9e11f1a7a837f3f0332b5820c4caa6414f2a4e3edfad","ssdeep":"","tlshash":"6c710e19ae04e5ac89b1aa36dd62f10dc4ea6b1f6411d89074fc0b7c0ff5fc84593da6","first_seen":"2026-08-12T01:11:06.822686Z","last_seen":"2026-08-12T01:39:51.735001Z","times_seen":2,"resource_available":false,"data":null}},"time_used":811,"timings":{"blocked":6,"dns":6,"connect":0,"send":0,"wait":799,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-12","alert":"Phishing Block","trigger":"www.trezor.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor.win/jquery.js","fqdn":"www.trezor.win","domain":"trezor.win","tld":"win"},"ip":{"addr":"172.67.174.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trezor.win/?naps","date":"2026-08-12T01:39:06.625Z","timestamp":1786498746625,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 05:10:09 GMT","end":"Sun, 20 Sep 2026 06:08:43 GMT"},"fingerprint":{"sha1":"F2:54:7F:C0:1C:F5:A6:37:ED:76:BB:F2:9F:84:F3:E9:02:9A:6A:AB","sha256":"8A:D6:13:F4:F0:00:2A:AC:15:5E:BF:85:F5:4E:F6:FB:35:75:DB:C7:CE:EE:94:47:63:2E:05:4D:F9:3C:4C:62"}}},"request":{"raw":"GET /jquery.js HTTP/1.1\r\nHost: www.trezor.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor.win/?naps\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 12 Aug 2026 01:39:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Jul 2026 03:53:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a697950-14976\"\r\nexpires: Wed, 12 Aug 2026 13:10:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1729\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fNMwyTbk1qLppnjSRoPFAwFNVtH89HJjSm5Py2sQwTqESBgRmx%2FJIsbrJ6xC5vDbEkwgsVoMMsbLQ1sQFsFy0NbeS1uLu69BHXPWagcDLhabJX5%2BMcOO9DjJOeb8H%2FFpZA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a29bc3ae6f8bb51b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84342,"size_decoded":30596,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025), with CRLF line terminators","md5":"9087a9859288a8b9e5275a823c2ace1e","sha1":"f2c621911b387b2a6399c08d05c7027653a9e072","sha256":"730fa28a30b20e876e67b0ceacc14ef814ade02fc3504d91435675f5e847f287","sha512":"e46f3420f05a12c3063df19a03689b6029d479230d03fddb5d2adc4abf655c795c3c1b3777fc3d6fc7a3cfbfee089ef19d5fdc925be73d5dbdc64524a1a253ab","ssdeep":"1536:GP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98HrA:Z+41hJiz6fhdlTqya98HrA","tlshash":"5f83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T13:00:08Z","last_seen":"2026-08-12T01:39:51.735601Z","times_seen":252,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-12","alert":"Phishing Block","trigger":"www.trezor.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor.win/clipboard.min.js","fqdn":"www.trezor.win","domain":"trezor.win","tld":"win"},"ip":{"addr":"172.67.174.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trezor.win/?naps","date":"2026-08-12T01:39:06.626Z","timestamp":1786498746626,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 05:10:09 GMT","end":"Sun, 20 Sep 2026 06:08:43 GMT"},"fingerprint":{"sha1":"F2:54:7F:C0:1C:F5:A6:37:ED:76:BB:F2:9F:84:F3:E9:02:9A:6A:AB","sha256":"8A:D6:13:F4:F0:00:2A:AC:15:5E:BF:85:F5:4E:F6:FB:35:75:DB:C7:CE:EE:94:47:63:2E:05:4D:F9:3C:4C:62"}}},"request":{"raw":"GET /clipboard.min.js HTTP/1.1\r\nHost: www.trezor.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor.win/?naps\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 12 Aug 2026 01:39:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Jul 2026 03:53:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a697950-2b1e\"\r\nexpires: Wed, 12 Aug 2026 13:10:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1729\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mp8NQKfuFHAZpSBMlZAVyRa0KnlofDRNLo%2FUjIiRGAdXq1mIjGk6%2BFWU2%2FSQDznU%2B%2BhAFyCEUenkwLwyey%2FPSQJ6SqjDO79xF3lK0c5vODVNIZ%2FgWjYz6xv7%2BZRPwSYIsQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a29bc3ae6f8cb51b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11038,"size_decoded":4271,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10808), with CRLF line terminators","md5":"accff5dc2cb43e6df205a847b60ad842","sha1":"47907b9c091df255c85d0c714afad8ff73d4498a","sha256":"95d4ec004897f09d8c4a0ae3c2cbab1fe950d75d86cffe049ccb1ff166747592","sha512":"e441e85996113dcae14fe2cb8769ad06316a0745ae4aed727889baf13d9c0464b26f74dcdd7b3abdf25f18463f11c9d33a71d719ee39e1fc0c4bb97052fc3808","ssdeep":"192:k0i1RWxek1XVTkAkI/qHnHZ4Ly98Dom53C5GU7oKZoQhoslw/3JAQZu5CpVHa4LV:FivWxeBI/vCc3kHiQ7l83JJu54z9f","tlshash":"ae32964cb28071b196db60ae902f424fb270942570ae90d4b639e8f5ad7ceed1567f3c","first_seen":"2024-08-20T08:35:39.529569Z","last_seen":"2026-08-12T01:39:51.736145Z","times_seen":37,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-12","alert":"Phishing Block","trigger":"www.trezor.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor.win/static/tradeview/datafeeds/udf/dist/polyfills.js","fqdn":"www.trezor.win","domain":"trezor.win","tld":"win"},"ip":{"addr":"172.67.174.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trezor.win/?naps","date":"2026-08-12T01:39:06.633Z","timestamp":1786498746633,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 05:10:09 GMT","end":"Sun, 20 Sep 2026 06:08:43 GMT"},"fingerprint":{"sha1":"F2:54:7F:C0:1C:F5:A6:37:ED:76:BB:F2:9F:84:F3:E9:02:9A:6A:AB","sha256":"8A:D6:13:F4:F0:00:2A:AC:15:5E:BF:85:F5:4E:F6:FB:35:75:DB:C7:CE:EE:94:47:63:2E:05:4D:F9:3C:4C:62"}}},"request":{"raw":"GET /static/tradeview/datafeeds/udf/dist/polyfills.js HTTP/1.1\r\nHost: www.trezor.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor.win/?naps\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 12 Aug 2026 01:39:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Jul 2026 03:53:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a697950-25b0\"\r\nexpires: Wed, 12 Aug 2026 13:10:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1729\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=at%2FOH7TTkCvlYI%2FJL3YtKZPlkv9HeAkkUDNxe4%2FHyyNJAMxHPsJOTHIHjVbdp0X8VXXUuBPW6FtQ8k0hqKlTn54M770mEKjiN7WnZF8%2FcBVakwVqT1%2FMBdtTEdFyGM%2BkyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a29bc3ae7f90b51b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9648,"size_decoded":4103,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9646), with CRLF line terminators","md5":"770b6e32570470374f29dba33e0f95b6","sha1":"64f6aed78e689c5b601946dab613c3678c558dab","sha256":"7da37ef86ad23b00dd959e0c189d29870cf99c2cd5dcad12634ed3961f69161e","sha512":"ecc5b498c8fd0edb1e145e6afd7e9f8cc98e65694b2670b2791f5af44bf0f5041bbd9cf119191f419942e7cbec53498127ddbdf0bb2b36391c8bc61bc2537ae1","ssdeep":"192:/5C5b4rmkiNL70mrZm3KosuxV6/hk3haw5UPQ0wx9B4EhN0xhOU8L:xGegVrZLO3gyP6EhN0xhG","tlshash":"49128588f7e0b472036360b4917f450fb2b53925648e41b8f260d8ea6cbd44d962bf7c","first_seen":"2023-03-10T14:26:46Z","last_seen":"2026-08-12T01:39:51.736645Z","times_seen":122,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-12","alert":"Phishing Block","trigger":"www.trezor.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor.win/1.2.0-beta.6.js","fqdn":"www.trezor.win","domain":"trezor.win","tld":"win"},"ip":{"addr":"172.67.174.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trezor.win/?naps","date":"2026-08-12T01:39:06.813Z","timestamp":1786498746813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 05:10:09 GMT","end":"Sun, 20 Sep 2026 06:08:43 GMT"},"fingerprint":{"sha1":"F2:54:7F:C0:1C:F5:A6:37:ED:76:BB:F2:9F:84:F3:E9:02:9A:6A:AB","sha256":"8A:D6:13:F4:F0:00:2A:AC:15:5E:BF:85:F5:4E:F6:FB:35:75:DB:C7:CE:EE:94:47:63:2E:05:4D:F9:3C:4C:62"}}},"request":{"raw":"GET /1.2.0-beta.6.js HTTP/1.1\r\nHost: www.trezor.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor.win/?naps\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 12 Aug 2026 01:39:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Jul 2026 03:53:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a697950-2784ff\"\r\nexpires: Wed, 12 Aug 2026 13:10:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1729\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r22CXMvQzZ4Ai9sgre9VdA%2FjRDtgJ7dDL7W%2FClLbqzOF3ysDt%2FiMGz%2BNU5TGKX0LN5QZ042zd39oXU3B4%2FGMTjy3YksWXvSGZ3dObRPpjB6dBQUraT3B6rqjBS%2BUrJbJZg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a29bc3af9f93b51b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2589951,"size_decoded":687228,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65520), with no line terminators","md5":"3623c0ba5a3aab53c95a17a735792667","sha1":"e4547b885574ecf0d92ccf19573a1a9cfdd8b95a","sha256":"07e5965a748f247cc2cb6b1064bc1950325268817a8c532a567efd6f0a0a362f","sha512":"bfa2355894eadccfef6ee60f9aa62b8a5eb53b85776e793b13503640e60c950eead03fd8791d9668b9f5af07e4f6666985988df90550983958a7b589efb37dcd","ssdeep":"12288:5SpZ9SemAIfKjAa1Qo/0GPIzgEJa+FGfWWmol+k/sUphh:07mtyjAauo/dP2FWWWm01phh","tlshash":"40254b9c7282b06146e7657a803f510bf33a394a244d8464f135ccdabd79a4da37bfb8","first_seen":"2026-05-06T09:00:43.52911Z","last_seen":"2026-08-12T01:39:51.737166Z","times_seen":13,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-12","alert":"Phishing Block","trigger":"www.trezor.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor.win/js/app.556309cd.js","fqdn":"www.trezor.win","domain":"trezor.win","tld":"win"},"ip":{"addr":"172.67.174.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trezor.win/?naps","date":"2026-08-12T01:39:06.820Z","timestamp":1786498746820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 05:10:09 GMT","end":"Sun, 20 Sep 2026 06:08:43 GMT"},"fingerprint":{"sha1":"F2:54:7F:C0:1C:F5:A6:37:ED:76:BB:F2:9F:84:F3:E9:02:9A:6A:AB","sha256":"8A:D6:13:F4:F0:00:2A:AC:15:5E:BF:85:F5:4E:F6:FB:35:75:DB:C7:CE:EE:94:47:63:2E:05:4D:F9:3C:4C:62"}}},"request":{"raw":"GET /js/app.556309cd.js HTTP/1.1\r\nHost: www.trezor.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor.win/?naps\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 12 Aug 2026 01:39:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Jul 2026 03:53:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a697950-37fb09\"\r\nexpires: Wed, 12 Aug 2026 13:10:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1729\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bl9%2BJy8pew2nf1ef0K0%2FscAd6dCLdrHTA8cAaw0c0ulKkx36tDA%2BrmY16wVgCEFQsYvCfYUCyg9nKuvgSS4RPsxo%2BxpqMu5f3JHpcNLPbyGXWN2RTo6moLukuAYqZ895iA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a29bc3af9f96b51b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3668745,"size_decoded":1262494,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"30202a99a62dca4f62e01c21ba610de8","sha1":"917381293ecc4b0365e3ece564a48e66db1b5a1a","sha256":"28bd45f7fdb536359510b85a2b1c5e6873a13c9af577977ec70b9298a79314e8","sha512":"9ffef3b377be401db09dbde90533cea62108cdd0dc8399fdeda6c580f61b66357a1169c02a7f99905478e5795eced450a0d187d0e9b88963ab27237def83cd83","ssdeep":"24576:mEcK75r5SkocdUnAdA7p757qWFLbO7Ski:H7HSkocdUnAdAF757qWFLbO7Ski","tlshash":"d9253baad146e2b8cd6b9292601e0674b3773ee8d105404cf7b8ced636c8964275ef7c","first_seen":"2026-08-12T01:11:06.818401Z","last_seen":"2026-08-12T01:39:51.737647Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-12","alert":"Phishing Block","trigger":"www.trezor.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor.win/js/chunk-vendors.6142f832.js","fqdn":"www.trezor.win","domain":"trezor.win","tld":"win"},"ip":{"addr":"172.67.174.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trezor.win/?naps","date":"2026-08-12T01:39:06.822Z","timestamp":1786498746822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 05:10:09 GMT","end":"Sun, 20 Sep 2026 06:08:43 GMT"},"fingerprint":{"sha1":"F2:54:7F:C0:1C:F5:A6:37:ED:76:BB:F2:9F:84:F3:E9:02:9A:6A:AB","sha256":"8A:D6:13:F4:F0:00:2A:AC:15:5E:BF:85:F5:4E:F6:FB:35:75:DB:C7:CE:EE:94:47:63:2E:05:4D:F9:3C:4C:62"}}},"request":{"raw":"GET /js/chunk-vendors.6142f832.js HTTP/1.1\r\nHost: www.trezor.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor.win/?naps\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 12 Aug 2026 01:39:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Jul 2026 03:53:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a697950-3f90a2\"\r\nexpires: Wed, 12 Aug 2026 13:10:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1729\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U8U0ktpk69%2FUcmnuVh6hIsryr4bKe9kAW6DmkiXt0wvn4VViM0eQN%2BksslxM2WA%2FGSW8zl3V0c%2FfPtHr8NBraVGpna9e%2B7i1nsYhhCHw8kDVkwDOsweCA3f3cSLWb0%2BIbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a29bc3afaf97b51b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4165794,"size_decoded":1285900,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15095)","md5":"ed27604cacc59f5d73cba6fb898b0c95","sha1":"72821e3558a871762774b09a51bdf39d376003f0","sha256":"895ee382a66c0c049ec5bee36090b0e01cb53882462bd77d4a64515e920f9c0c","sha512":"44e060b5c38dae2a1b05265cb68206ca7d98b1ea02ac4fca7c43488a36d5bc8d2ff4bc95a45ddcfebd6bc9ce23d2dc41f5da60091d84419d95319b73fcdc1c62","ssdeep":"12288:KddR4z+Q5kvFpsA9SIdGTBarO/JoOVt+5E/HZERTKj5gG:KddR4z+94lvB3/JQEeR+lgG","tlshash":"ed353a5cb204a17c9ea667b8853b1016a37e55ae74858720f32ecce076710dcf36bdad","first_seen":"2026-06-29T06:22:15.924607Z","last_seen":"2026-08-12T01:39:51.73825Z","times_seen":5,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-12","alert":"Phishing Block","trigger":"www.trezor.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor.win/static/tradeview/charting_library/charting_library.min.js","fqdn":"www.trezor.win","domain":"trezor.win","tld":"win"},"ip":{"addr":"172.67.174.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trezor.win/?naps","date":"2026-08-12T01:39:06.631Z","timestamp":1786498746631,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 05:10:09 GMT","end":"Sun, 20 Sep 2026 06:08:43 GMT"},"fingerprint":{"sha1":"F2:54:7F:C0:1C:F5:A6:37:ED:76:BB:F2:9F:84:F3:E9:02:9A:6A:AB","sha256":"8A:D6:13:F4:F0:00:2A:AC:15:5E:BF:85:F5:4E:F6:FB:35:75:DB:C7:CE:EE:94:47:63:2E:05:4D:F9:3C:4C:62"}}},"request":{"raw":"GET /static/tradeview/charting_library/charting_library.min.js HTTP/1.1\r\nHost: www.trezor.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor.win/?naps\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 12 Aug 2026 01:39:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Jul 2026 03:53:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a697950-2e7d\"\r\nexpires: Wed, 12 Aug 2026 13:10:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1729\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BAC3LHtwNnxfFyVaZIJwMfJ7UgLcngUBRE82FD9okDYIhk4TVE5XeOuSlHhOllJFn4MvZaXJxbU6w5x4CyHh3oXIFvx%2F3QS3lSZ4WNxUL9A4mourF5RXp3s98kv6zf7GJw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a29bc3ae6f8fb51b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11901,"size_decoded":4003,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2132), with CRLF line terminators","md5":"38e628745bfe6be6bac3f336a6e806cc","sha1":"d58cb707ff7bab2304e888dc91d02fa260fd4e52","sha256":"dba3717e46ccf9687d725c825219349248e90bac7a805b5e77057863018c563e","sha512":"ea51203227931f43ad23c3d99061fb751a3bd5f9ed4cfb6aff31fb2a7507221b3f9d2741794297027c17a213e4138ebdc937b43fd08cd3809d1d9dbbf49634c4","ssdeep":"192:3gWbnhkcii1HMYE8qxwXTPDgFhQ+/JMH1aonM95si5Vp3830J13ndPWxPRnLYDML:9bhkclDkGVlu9PWVRnL00u3OH8A","tlshash":"f7323154fb6c6c3605c722f4c47f680b913ee27ad0a544ac38c491dc58fd446baabab9","first_seen":"2023-03-10T14:26:46Z","last_seen":"2026-08-12T01:39:51.738786Z","times_seen":136,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-12","alert":"Phishing Block","trigger":"www.trezor.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"at.alicdn.com/t/font_2302506_w05z3emunp.css","fqdn":"at.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trezor.win/?naps","date":"2026-08-12T01:39:06.817Z","timestamp":1786498746817,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /t/font_2302506_w05z3emunp.css HTTP/1.1\r\nHost: at.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor.win/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor.win/favicon.ico","fqdn":"www.trezor.win","domain":"trezor.win","tld":"win"},"ip":{"addr":"172.67.174.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trezor.win/?naps","date":"2026-08-12T01:39:08.771Z","timestamp":1786498748771,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 05:10:09 GMT","end":"Sun, 20 Sep 2026 06:08:43 GMT"},"fingerprint":{"sha1":"F2:54:7F:C0:1C:F5:A6:37:ED:76:BB:F2:9F:84:F3:E9:02:9A:6A:AB","sha256":"8A:D6:13:F4:F0:00:2A:AC:15:5E:BF:85:F5:4E:F6:FB:35:75:DB:C7:CE:EE:94:47:63:2E:05:4D:F9:3C:4C:62"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.trezor.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor.win/?naps\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 12 Aug 2026 01:39:08 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nlast-modified: Wed, 29 Jul 2026 03:53:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TYhLpBl3tcBU%2Brn6INEwW6mhuzA13%2B3A3wWooF%2Bpkal%2F4DGiR7PKmZHLt9aEVVqI%2FQvW8hMeH%2B2gLNu1tXbiOB07r88VNL%2B0VCNk9R4HPX6kCegOh6BrtvWh29Mtk55dmQ%3D%3D\"}]}\r\nage: 1726\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a697950-423e\"\r\ncf-ray: a29bc3bbcfccb51b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16958,"size_decoded":2647,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"d0d08c63838b7329a4cb128be797217d","sha1":"c91dd7898c0b6da1d1eec9fb9d7e084c7d27ebda","sha256":"0a87c995648355d68a6f4c0d13d367af5097767bbf444b0b85caccbf5ab2c9be","sha512":"f18187a00f674ba950dc05961fdafe2f999ec7464af186121d9ac4aa9408d14f82daab126af26e20009865560b91301ef48f56a732202355ce0e5464ff9a3cad","ssdeep":"48:wo8/VNP6lkXIYCfD/d2rF4dd8X2DqHFiw/AlHq5ZknllXL6km+pIXCAOMJ5:xksLlKqBDqHF5SHq5Kn/Xtd2L5","tlshash":"687223a07d00c214c42c6530da7693f626267d6ced2021eff99ebf8ef7399a58515d32","first_seen":"2023-07-12T01:56:03Z","last_seen":"2026-08-12T01:39:51.739316Z","times_seen":40,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-12","alert":"Phishing Block","trigger":"www.trezor.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor.win/static/tradeview/datafeeds/udf/dist/bundle.js","fqdn":"www.trezor.win","domain":"trezor.win","tld":"win"},"ip":{"addr":"172.67.174.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trezor.win/?naps","date":"2026-08-12T01:39:06.629Z","timestamp":1786498746629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 05:10:09 GMT","end":"Sun, 20 Sep 2026 06:08:43 GMT"},"fingerprint":{"sha1":"F2:54:7F:C0:1C:F5:A6:37:ED:76:BB:F2:9F:84:F3:E9:02:9A:6A:AB","sha256":"8A:D6:13:F4:F0:00:2A:AC:15:5E:BF:85:F5:4E:F6:FB:35:75:DB:C7:CE:EE:94:47:63:2E:05:4D:F9:3C:4C:62"}}},"request":{"raw":"GET /static/tradeview/datafeeds/udf/dist/bundle.js HTTP/1.1\r\nHost: www.trezor.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor.win/?naps\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 12 Aug 2026 01:39:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Jul 2026 03:53:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a697950-34e4\"\r\nexpires: Wed, 12 Aug 2026 13:10:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1729\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jo9XHnPt7SIuj3s1D8%2FahjiXOA%2FqatjtWou2mhz%2FzYNl8HZZlqkepUa9E8jINWUABUPp9BArBDbNoW2Vp3k%2Bek7nbYu%2FmXY2GoNGWUhu5tynPTAVrFbjzQOUOM6n0Y1OwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a29bc3ae6f8eb51b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13540,"size_decoded":4924,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13538), with CRLF line terminators","md5":"a6466bb5a15ac244de5626cc6d58dd7a","sha1":"2b799448750e1830e07bd2f89ae2d5f11fc95a83","sha256":"f9c9b8447d430ed9f3d69aca108c253fa5541a2fcc0a98e822edc28e3046a998","sha512":"413b0b8f0c194fd397afcdfbe54018830a885b66cff309dc900d7788d1dcadc389c75e3e93755c4ebae214d1c5f8abaa07885d22ad5fa447c7f66dcdba0924e2","ssdeep":"384:kpe0jAoNzmAHgWH4NRZsPA4iCA2PHDJMJ:oBiWH4jZsDPA2PHyJ","tlshash":"7252a6c97611312182936472e87f380ba139b515688a903c71c8e9de6efdb5dea17f3c","first_seen":"2023-03-10T14:26:47Z","last_seen":"2026-08-12T01:39:51.739845Z","times_seen":123,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-12","alert":"Phishing Block","trigger":"www.trezor.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"at.alicdn.com/t/font_2302506_w05z3emunp.js","fqdn":"at.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trezor.win/?naps","date":"2026-08-12T01:39:06.815Z","timestamp":1786498746815,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /t/font_2302506_w05z3emunp.js HTTP/1.1\r\nHost: at.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor.win/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trezor.win/css/app.afe7b502.css","fqdn":"www.trezor.win","domain":"trezor.win","tld":"win"},"ip":{"addr":"172.67.174.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trezor.win/?naps","date":"2026-08-12T01:39:06.818Z","timestamp":1786498746818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 05:10:09 GMT","end":"Sun, 20 Sep 2026 06:08:43 GMT"},"fingerprint":{"sha1":"F2:54:7F:C0:1C:F5:A6:37:ED:76:BB:F2:9F:84:F3:E9:02:9A:6A:AB","sha256":"8A:D6:13:F4:F0:00:2A:AC:15:5E:BF:85:F5:4E:F6:FB:35:75:DB:C7:CE:EE:94:47:63:2E:05:4D:F9:3C:4C:62"}}},"request":{"raw":"GET /css/app.afe7b502.css HTTP/1.1\r\nHost: www.trezor.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.trezor.win/?naps\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 12 Aug 2026 01:39:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Jul 2026 03:53:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a697950-8efaa\"\r\nexpires: Wed, 12 Aug 2026 13:10:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1729\r\npriority: u=0,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2oOwZjt3Ee6QXM6fG%2B8ygsUfyuZE4UFDRQzmmROPRzx2Oq0xFVKxcpDZ30jAoPje108BVKawpZY7PEjjAbczEfFqX0pNW1sYlc1Yn2M98IijjvoIAbQNget6OF4qoW%2B4IA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a29bc3af9f94b51b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":585642,"size_decoded":104502,"mime_type":"text/css","magic":"ASCII text, with very long lines (53282), with CRLF line terminators","md5":"e18a3007b7cad931fa3b881b47401138","sha1":"185be0fddc7362a7ab3f467165acb871bf67e70a","sha256":"5f40e59b66c1043aaca5f6dc4e8d2f14422f0b468e30acd5e09ab1e8776708b7","sha512":"9229a367da33aec9cf01c0a36dc3ac9261d374274834e507d779b16e362d6b51c4e03e99680fb4aca67099fffbf689604e2c072f0c8759a1a696aeb8f3ca9354","ssdeep":"6144:CgmvLYz3i6PSXhZdgdp7nWR7TH7VNOoGaA/0gE/:CgmvLYz3i6PSXhCp7nWR7zZNOgAPE/","tlshash":"46c4c731761c242db87bd16374d1aa9e3014f763d22342aeeda27639ce875933a3274d","first_seen":"2026-06-29T06:22:15.922175Z","last_seen":"2026-08-12T01:39:51.740479Z","times_seen":3,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"www.trezor.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-12","alert":"Phishing Block","trigger":"www.trezor.win","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}