{"report_id":"9bd84473-8d3e-4caf-bb76-bea5331e854e","version":6,"status":"done","tags":[],"date":"2025-09-12T01:15:44Z","url":{"schema":"http","addr":"trezor-io-start-cdn.pages.dev","fqdn":"trezor-io-start-cdn.pages.dev","domain":"trezor-io-start-cdn.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.148","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"trezor-io-start-cdn.pages.dev/","fqdn":"trezor-io-start-cdn.pages.dev","domain":"trezor-io-start-cdn.pages.dev","tld":"pages.dev"},"title":"Trezor.io/Start Wallet Guide – Secure Bitcoin \u0026 Ethereum"},"submit":{"url":{"schema":"http","addr":"trezor-io-start-cdn.pages.dev","fqdn":"trezor-io-start-cdn.pages.dev","domain":"trezor-io-start-cdn.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.148","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-17T01:15:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-12T01:15:22Z","timestamp":1757639722,"ip_dst":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":35446,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2025-09-12T01:15:22.698718+0000\",\"flow_id\":2102972555888609,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":35446,\"dest_ip\":\"188.114.97.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"trezor-io-start-cdn.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3498,\"start\":\"2025-09-12T01:15:22.690145+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"trezor-io-start-cdn.pages.dev","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2025-09-12T01:15:44.098271Z","last_seen":"2025-09-12T01:15:44.098272Z","alert_count":0,"request_count":2,"received_data":18542,"sent_data":963,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-12T01:15:22Z","timestamp":1757639722,"ip_dst":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":35446,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2025-09-12T01:15:22.698718+0000\",\"flow_id\":2102972555888609,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":35446,\"dest_ip\":\"188.114.97.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"trezor-io-start-cdn.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3498,\"start\":\"2025-09-12T01:15:22.690145+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trezor-io-start-cdn.pages.dev/","fqdn":"trezor-io-start-cdn.pages.dev","domain":"trezor-io-start-cdn.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ec6d6cd6880de3147720b02b9d687314","sha1":"23db78b04f9922dce599e635ca8d9822f8db5b25","sha256":"e72af3fb76fc64e874eb6860b021afb2275ef1261e0acc85dacaf3743c6b9467","sha512":"08d0b64887f86228d5303c6a50b5acb1ae064a7d7732fa70ee043af68a4a37e6512e250447230c3029fd1db841a5c4be98c9cba0b1db76cda3d47c78cbfeae75","ssdeep":"","tlshash":"2ed0a75d1dc9213478232d185adb604024b441170209fc50fd1cf0025f56e1114d6dd0","size":266,"data":"","first_seen":"2025-08-11T11:27:52.181327Z","last_seen":"2026-02-17T15:35:42.529091Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezor-io-start-cdn.pages.dev/","fqdn":"trezor-io-start-cdn.pages.dev","domain":"trezor-io-start-cdn.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d982bb02d7e5b6255662b45822c4f8c4","sha1":"2d678f24230ea91dec2c91c8c71665a33c5450f0","sha256":"e678b02a3dbb728351ab671f4a5fff70a50632f36046e1a4fd5bf3d04c15d890","sha512":"d16f55b6188ad02a020fe751202e9e609ee33d8c4a14d86e3d9bff9c00368451cc0f6c41a09e6e809cf941b2639748b86e0261f60e65b477fd22d54f6cf688c7","ssdeep":"","tlshash":"900146faac3e05333e93f3c847835007b051ed571aa8d18a741eab520f80437f4a42ea","size":763,"data":"","first_seen":"2025-08-11T11:27:52.182471Z","last_seen":"2026-02-17T15:35:42.533139Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"trezor-io-start-cdn.pages.dev/","fqdn":"trezor-io-start-cdn.pages.dev","domain":"trezor-io-start-cdn.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-12T01:15:22.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor-io-start-cdn.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 12:23:58 GMT","end":"Tue, 09 Dec 2025 13:22:37 GMT"},"fingerprint":{"sha1":"D0:25:1A:A0:2C:D3:A9:5A:EE:E4:BA:D0:3D:A9:C3:62:A6:37:76:0B","sha256":"75:9E:F3:53:2E:51:A2:1B:23:6F:3F:59:9D:B5:1C:BD:B7:E8:32:5D:04:4E:22:04:EB:CB:98:DF:70:AD:02:DC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trezor-io-start-cdn.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 12 Sep 2025 01:15:22 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7DCJTyHdVobilJqh8oetW3mMrKEfx2vy6IvAoeQplMuKrA3HYG9SEcCDynbodsl8pT49BD81vMcPFqr7n%2FxWBnFEqTvb0BS6PPqHkspOwXf90u97Xq%2FywSLIX7WP25oVhVI1%2FgM6kGtubc0SuqVUMQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 97db8dab08c0b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5819\u0026min_rtt=444\u0026rtt_var=10755\u0026sent=7\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3253\u0026recv_bytes=1135\u0026delivery_rate=6950400\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=c05c607a3ed99ad6\u0026ts=221\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8286,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (507), with CRLF line terminators","md5":"007ba4cbf7bedb13839156a9b089d25c","sha1":"e2b62a852b6f4666f4135357c4a0985a65a996bd","sha256":"72ee602a62de3c4826d35efb64928ee1bac150c5617bed46965eca890eb941de","sha512":"51a54a2a1614b8910d5988adc84b98ef217f878e80033136ec7a00025ad5aad1fb182e1d09a7b253fb063927a8420cbfdece2dc37440889d7380a2159741dbc4","ssdeep":"96:QNzRwLn/IOZHtf3vmufvcbpt+MDBZ3qaorOdrGnSz2Osais:iW5Htf3UbL+MDPuUW4saL","tlshash":"8b02981be60a31151a7383e86fb357aaff6b5477c10282a83adda1459fb1181c593fcc","first_seen":"2025-09-12T01:15:46.172626Z","last_seen":"2025-09-12T01:15:46.172626Z","times_seen":1,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":30,"dns":3,"connect":1,"send":0,"wait":200,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezor-io-start-cdn.pages.dev/favicon.ico","fqdn":"trezor-io-start-cdn.pages.dev","domain":"trezor-io-start-cdn.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezor-io-start-cdn.pages.dev/","date":"2025-09-12T01:15:23.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor-io-start-cdn.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 12:23:58 GMT","end":"Tue, 09 Dec 2025 13:22:37 GMT"},"fingerprint":{"sha1":"D0:25:1A:A0:2C:D3:A9:5A:EE:E4:BA:D0:3D:A9:C3:62:A6:37:76:0B","sha256":"75:9E:F3:53:2E:51:A2:1B:23:6F:3F:59:9D:B5:1C:BD:B7:E8:32:5D:04:4E:22:04:EB:CB:98:DF:70:AD:02:DC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: trezor-io-start-cdn.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trezor-io-start-cdn.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 12 Sep 2025 01:15:23 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=55z29qyMxcxJTkPwF%2FoTw8CnyuWA9fDfOTLFQvMCqn1WJBV%2FdpfKFw8U3dLmhFjG8U1L6vZ5LxpC8fj7lob1eyhcKWUAn4Q4skbSTX%2FHT%2FmoG7cWGjO1X9oZEP1%2BEd9MgSyiXs1UFJaj6MTyIWwD4Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 97db8dad8c763181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=7014\u0026min_rtt=3999\u0026rtt_var=3653\u0026sent=13\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=4203\u0026recv_bytes=1220\u0026delivery_rate=426284\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=5e3915582dc587fd\u0026ts=227\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8286,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (507), with CRLF line terminators","md5":"007ba4cbf7bedb13839156a9b089d25c","sha1":"e2b62a852b6f4666f4135357c4a0985a65a996bd","sha256":"72ee602a62de3c4826d35efb64928ee1bac150c5617bed46965eca890eb941de","sha512":"51a54a2a1614b8910d5988adc84b98ef217f878e80033136ec7a00025ad5aad1fb182e1d09a7b253fb063927a8420cbfdece2dc37440889d7380a2159741dbc4","ssdeep":"96:QNzRwLn/IOZHtf3vmufvcbpt+MDBZ3qaorOdrGnSz2Osais:iW5Htf3UbL+MDPuUW4saL","tlshash":"8b02981be60a31151a7383e86fb357aaff6b5477c10282a83adda1459fb1181c593fcc","first_seen":"2025-09-12T01:15:46.172626Z","last_seen":"2025-09-12T01:15:46.172626Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}