{"report_id":"a61a959f-82e0-469c-a5bc-7430e823677a","version":0,"status":"done","tags":[],"date":"2026-08-26T11:30:07Z","url":{"schema":"http","addr":"trezors.net/","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"trezors.net/","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"title":"Log in","dom":{"size":47495,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1061)","md5":"a04c2867e6b3b7cee5dd3285ab762a3b","sha1":"e6f6729b4f2fce4022ea482265728613ed9ac2bc","sha256":"e931d0cea3077b0e4efa7260ea224027611c2386b7fec9f83f81a58079998319","sha512":"597b8b9213787101489515be6ddcabaf83a5eadd3576bf7f8db32ba051cd0e2cd8b64494d45b91dce0c27d3918d41339477fcce3a10e37fd9bf03b403967522f","ssdeep":"768:AcEtlVI4IVIkIHMIIIYIzIAItIyIYIzDoW3ySsZrdqw31TKHAozssGYnW:c/ZDoW3y+w31TKHAanW","tlshash":"fc23a60092fd04236033a0c7eaa6af29b0db9537d36a4444f3fe1a6b6fc7d186d1655e","dom_hash":"domhash570e500c4cbfce3a76ee428b065d567d","first_seen":"2026-08-26T11:30:09.561637Z","last_seen":"2026-08-26T11:30:09.561637Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"trezors.net/","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-30T11:30:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"trezors.net","ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-08-23","domain_rank":0,"first_seen":"2026-08-26T10:30:12.692384Z","last_seen":"2026-08-26T10:30:12.692384Z","alert_count":180,"request_count":90,"received_data":2717045,"sent_data":51796,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]}]},{"fqdn":"trezors.co.uk","ip":{"addr":"138.252.248.225","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-08-23","domain_rank":0,"first_seen":"2026-08-26T10:30:12.693627Z","last_seen":"2026-08-26T10:30:12.693627Z","alert_count":0,"request_count":1,"received_data":208,"sent_data":577,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trezors.net/static/mobile/js/iosapp.js","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c2f59781d7868eff1bed99be0478af8","sha1":"d8bd7c15428c99cdbb38795df05438471953ba6e","sha256":"b16d7795b265d380540612bfed9739a90fb46aade4228c670fc8d17abce9adaf","sha512":"2e979baf0d2f94e91eef9665df48555ab4dcf4e7b8bc149465ec25d9e09a07dd625edf0750a6f9d7e47f64162f8099663c7986c4a4840948b177237581b4ff6b","ssdeep":"","tlshash":"c94132999a9d683919d3b42d1a3fb15c72333aa5a4428110bc0fbf943b34a4a162db98","size":2054,"data":"","first_seen":"2023-09-23T10:36:02Z","last_seen":"2026-08-26T11:30:09.638945Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/js/index/index.js?v=1.1.1.6","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0dcd53515a6992b2222ee4d9f4a3e682","sha1":"0aa981db906694ccb7650bd5defc855bf01a2f18","sha256":"4cf6b72d4faa38b5a6d0500c798cdabeb6a4f241d34d0612bbc6c328773cdca0","sha512":"795e3c8e0b69f8875b02c8ab820c1eadea220864ae64192e419ef354898b01684fbc71b54a49bbbd344e5bb090c96999459eb5df90e5be998791a2072b5509f9","ssdeep":"48:4NHsJYS7AEGyUjmHAuEZBnZBJOt9dxGiKsu5RtpmJpZzPDvuli+hIg:mHsJ/oQARZJZTADoPtpI3v4ikIg","tlshash":"88915606e4e314536e23909a8feb4005a1adc033d20acc4dbb9ed69e2f5c9ac5555ede","size":4625,"data":"","first_seen":"2025-02-26T18:00:22.704148Z","last_seen":"2026-08-26T11:30:09.573639Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/plugs/layui-v2.5.6/lay/modules/element.js","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"784379625afe1516f69075a78007e7bf","sha1":"4eca1e2bd313d46ddcf113095074da797b145aa6","sha256":"763c30063a00b2698ab3aa17948b5008a33d477fd7dfd45f11f3d4a49e29b73c","sha512":"f08d8e5c3c091ca2a0f00109cc55dcf9a7ce055996f1fd2d6cc2f7b414e533c0b8356fb5bd3ec7eea1692e5aa56d2be0465465f60479f3eb2afb783cec3ca87a","ssdeep":"192:nZKp8KKtRtwFC2q6IsTPJB91RGRtX9uEUn0Gs:nZltcF+6IsTP5ONN","tlshash":"bfe19518b05236f73197b5d143bfa21da03f4636e70246ac3066d4ba09bbd891673f9b","size":7264,"data":"","first_seen":"2023-03-07T13:00:48Z","last_seen":"2026-08-26T11:30:09.645367Z","times_seen":294,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"403cca2b2f8330bdb133e5dd3426abc9","sha1":"a525aa567e8f07235b3222e0b7d506bed6928334","sha256":"b9c3136768e11c3f9f81bfbe14c38bd67b638e9fa3182bdf454e74d10a9a28f2","sha512":"552e80dfc6ce9a5df0dbed7158dc430e46d80f1a5abdd7fbdabbf917e8fe7bf3aaf04c80376b4ab485231373fd09c2121df51820186d9a9bd4afc701f88cd1ae","ssdeep":"","tlshash":"6ee0209480474052075509154b4ff291310388770781c400b74c92f59fe1bbf9286ed9","size":355,"data":"","first_seen":"2026-06-15T11:55:05.889084Z","last_seen":"2026-08-26T11:30:09.660472Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b7b3f9eca746edfd949c5f4ff56d6363","sha1":"3ca3e6cf6dc4ceccca48c89342c3616cdaeede55","sha256":"099a040bddc8325701c2e0fddc27204da812e9a3fb227bf2c82d83663c4fd74d","sha512":"7b5bb03332d5ead25e4903aec4042d43afb1eb95014d2fda83ac95149579fdb1fef7132fbd35a1f74e041b4184fa9d88599768b2fccb42ab0c7ec31abf0b4e2c","ssdeep":"","tlshash":"47e0c204cad79686bd181841236e14777092c90311cad612fd6db1178f5364f99e83dc","size":313,"data":"","first_seen":"2026-08-26T10:30:22.315633Z","last_seen":"2026-08-26T11:30:09.661195Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d5f43b53493837c5a76ca0615cb8648e","sha1":"a54430f91ea9516e5c177a309e19c8789041b706","sha256":"896bcf7955215e18a64cda948146e25254a08da7e584718cc25a92de58452598","sha512":"585de81043384b0f28b6b86e16999583f1020efeba3d854d5b038c6fd87534b5295c2e1ea9b5769878f693b2a8356d419ee526d17d0265080942a01c859a92cc","ssdeep":"","tlshash":"7ec02bed102421000283324d8e0f6278103b0077dc49c241788e5a20df327df6202f5e","size":147,"data":"","first_seen":"2026-08-26T10:30:22.317353Z","last_seen":"2026-08-26T11:30:09.662626Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fa27e72b69b1d665f676d930707b020b","sha1":"b9492fa8b2a8b471aa1b437c7a192f695d203357","sha256":"594b9b202c72367a7fb9be73c9bafe69f29a3b288532663913cd46cfa4fbafa8","sha512":"e91ec431e464b7993f77b5a42c90f72438e32ce64fe74aaffe24fefdc503b657d3b83b72881eb0d7aeb2afe12f43c1e5d1e1c603d4962a5decbce99b05ebe6f6","ssdeep":"","tlshash":"e72190da80d55309a5bb28969b8b2a01312390b714cc9007be1cf6691f4a31f5acbf9e","size":1249,"data":"","first_seen":"2026-08-26T10:30:22.318995Z","last_seen":"2026-08-26T11:30:09.66346Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b079015879110e8d38fbde163d145292","sha1":"c38f410062f607117a5cb1de8cbc1d6673aa9210","sha256":"acd5895bd78407e9ea93750a80a9c12ae0d5d0609809a4861dab028f128597a4","sha512":"a0006071d2bb6658c336f092a73160f967a13f74d75f07bbd0269b218e7f4fa24dc76a602377f1747cdc0908f035f99ee85a16ea7dec4e7cb63b920dd11eba64","ssdeep":"","tlshash":"a470000c8f2a8000a00a8cc0208082000ca8200222200000a80a0e0030802a0802a0a8","size":20,"data":"","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-08-26T11:30:09.664306Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d040da45fcac92c58026c72e065be260","sha1":"f35e385f9c808acec7d06714f8b8c6671a9b077d","sha256":"5b81808352995e758a0f7a8e3408b7ce02722867e7c8838481387157ffbce22d","sha512":"2e1786562506018169e8a32f327cae6a5621d7c441893674ab8f34b8111dfa5961cbaf2012fc7b37114e3a38475e6f25ca79c12aed5c3a2581cca6a8248a9f9f","ssdeep":"","tlshash":"8b01e16b6df775301e2370699fea97853334621f80c8ee093e3d41941fa0c2146f69d5","size":772,"data":"","first_seen":"2026-08-26T10:30:22.321226Z","last_seen":"2026-08-26T11:30:09.665553Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"10e65baa6b54b9eeb59efcfbe9c9f5ad","sha1":"df33eee288cc2c84498396a48ade5e4e13b5e365","sha256":"b7493f88cf2d5bdc1f4b68640783c4489aa24416839ad781caaab29a9f3d6e03","sha512":"c59f48a0d712c65d7a40187e8f0d9c98eb0c5008133fe944a523c5ff43928e35eb1f65d239025c54e37806da92bbb3c2d95c9c97075082223aedb068fd39458c","ssdeep":"96:E0tlpFO2+xGVssG1tBVcARtkirM2SiDHBHM7z2NF3P:hXWvassG1lct2mn2NF3P","tlshash":"d0c185d8eb4c15161d6721a45b9f30cc315d0437d824cc23fe1daa76bfe27499a14e9e","size":5650,"data":"","first_seen":"2026-08-26T10:30:22.322771Z","last_seen":"2026-08-26T11:30:09.667256Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/plugs/layui-v2.5.6/lay/modules/form.js","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a55a0aaf3d84264e3373f58f347a18fb","sha1":"921760fdababb5639192c73866c1b3b5f2ca0644","sha256":"03315f4a8fa90d66f3115d686bcb50d9356136607f92edbc9c59d4f27090a0f3","sha512":"7295dd0874606a2605b16a49ca696bfe305e16d769a7d037cfba0e074591e4def8dea94e4157cbd7c52e85e8de4ae496155c0af6d21b00943ba04ab6164edc13","ssdeep":"192:7U7m+EjWnSTmyANS4B7R6EoHv9w5iaHe16GL:7U7msqmHBV6LP9yiaH6n","tlshash":"1312a319715135e2367b60a1405f981ba0bf4635ab09c8947093d4f92ebec9493f3faf","size":9591,"data":"","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-08-26T11:30:09.632003Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/plugs/layui-v2.5.6/lay/modules/slider.js","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c35742db2e72cd4f30cefa23690ecf5","sha1":"b50d4268f547cefd984c069d276c956feef395e8","sha256":"2fdaaa9935b2d19fb54e0798e6e42fc3528d1b2772b46b9aa8731b1ab6947609","sha512":"44d0ab3649b35cec891738e6eb4f28d1857fcb900e2369b9395ea54854717108268c8ce729591923fb094cfe1b34dc0f9b2e9bf35b17b77f34c479ef80deb391","ssdeep":"192:z8Syuw2bmz0DLKypMjYXVp5D8IlM/eq9zwtyd4UduKN:z1yuw2UOPSBMj8/","tlshash":"53e19615314ab5732172c263b59fc84eb2f20779b303c564a6a540a51ebece82b37f63","size":7091,"data":"","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-08-26T11:30:09.599328Z","times_seen":131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/plugs/layui-v2.5.6/lay/modules/carousel.js","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4b94959b4b5ad34cdc1dd2c12a6bd1c","sha1":"303a72c6380c4277062e85eac689d1dc5ebc60df","sha256":"ec7b67ac49f660eae790c97c9e47fd86973a01478947c603f458667fb322351c","sha512":"b4d24dd32769ad42ed0d4e7b61b80c0ef9f41e9d001a48f5bfd3a328e58e715724a2df8bb97e8078e6b1fc44be5ede4b53233f987578eaf9f3d6e0a3ec936831","ssdeep":"","tlshash":"d7811181775f386741972453935f4c0896b719ba9b06d054f2a264fa6dfbc88223eb0f","size":3862,"data":"","first_seen":"2023-03-10T09:41:51Z","last_seen":"2026-08-26T11:30:09.649047Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/lang/ko-kr.js?v=1.1.1.6","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"263e38f18f7d50140cbaee979fdd6ee2","sha1":"6f45de9fa3df5f7d42622688baf9d1f92532ad11","sha256":"6a6274e684fbf7ce78e0fb5cedfd4ed978f177ce1e6a1dcbe0f69856cab48a8a","sha512":"fe6e45cb67dcb2e71056ff8b16df6d8b842de16ffa5c28af827ed6b8b2f7164211d84c0bdb6379cd88be819d4dba3ac1420ced28fb5049ba371dc7b6177fbcaf","ssdeep":"","tlshash":"0c211ed626af82e414fb044a2a48b0d8e7c883eb2757104ff5bc4c0c8fb5f8589c64b4","size":1177,"data":"","first_seen":"2026-08-26T10:30:22.271733Z","last_seen":"2026-08-26T11:30:09.642626Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/js/index/d3.v4.min.js?v=1.1.1.6","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e899651bcf1a3591032d7213daeab171","sha1":"607e02087446eb2efadcbee253db3aca3d794a7b","sha256":"8585db4092b8a9d26201e0d58e343d1b40fa034c4b9c343878923d7649bb1699","sha512":"44927534d0bcf1084deddc29098f2b9bfe8ec48f987503f8f03acb19efde48077e9feb353d7c10924a73cc082825ee1c6455b61802d0a31a31eb5812636c907e","ssdeep":"1536:wJdNAq50g6ds5VIG2pUfpgBU3gPDSb7+CmeoA08h6Vh5Lbg5ECfmDoo5rfIrTGE9:wrN3F2pHSYlyLG1sVAupFmuFyiI7R6","tlshash":"092494ccb682b096936320b0417f244bf33b2d59684f4568e029e9d97c7895e51bbfbc","size":221957,"data":"","first_seen":"2023-03-07T21:28:45Z","last_seen":"2026-08-26T11:30:09.58597Z","times_seen":462,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/js/jquery.cookies.js?v=1.1.1.6","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"de952eda41b0edc0b5c416ee48f7028e","sha1":"dc07de882ab68370534fbf9440ac7b8c068695a7","sha256":"631ea2bc942c1791920270ba02eef37774aa10db3994b4936a2b5f891a970ff7","sha512":"674fd3c9db480ecf8680822131fc80f904ddfb3907a1033ae9ce06019a87ac6f9eb6d6535e6aba0ee0b601d039d55da7e7cd247a67db5cf7bbcb8408116a03d1","ssdeep":"","tlshash":"1b516554b6cc375f07ab22416b6f50aca63cbf72255808dc885965f82c60c37db9bd2a","size":3139,"data":"","first_seen":"2023-03-07T12:09:28Z","last_seen":"2026-08-26T11:30:09.618486Z","times_seen":3115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/js/i5scroll.js","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"229ae241044a0a16861b8583b4435079","sha1":"8051376b7ff4f9eb4c40389985ceed910bd8a868","sha256":"00323fb404aa8d1151ba1d3842ace6e1b7dfd723faa7b0402c20bcbd7d93e59a","sha512":"edafd940bd292208de80d57343ef7dba5360bc21f5dd691f24b13d167b15b3f5529bae2735c1d2c67fb23de10ea4b907f7adf371db7d150724a2ee5d1ef82cc5","ssdeep":"","tlshash":"cc3167c47000b636859620b271ab56d9f3398ad7346d881174beb189bd1cdb50d2fda4","size":1779,"data":"","first_seen":"2025-02-26T18:00:22.707066Z","last_seen":"2026-08-26T11:30:09.635442Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/plugs/layui-v2.5.6/lay/modules/layer.js","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ffd5603784dbfeef189498c1a705c15","sha1":"983f2308aab1a1addad5be4f1c49099f5dd589cc","sha256":"2aa83aee413f9b91a2dcc536cfd6acd6e44b3fcdb59c26586e32d083396a8db5","sha512":"76d0b3952e17783ab3b597d0db1f734bf7b933ef8ff316c8107f5192f1ecf318c3f11c9ba10a4d15063b26cbb32133af7581070d7c782ebbbcd6580cfd21545a","ssdeep":"384:619Cih92A3igTLXSt/SdMrXqE6K+LxzAOTElH0jjhtjfs8:614iV3iaWtXIKiF13k8","tlshash":"b4a2b66a754034976323906ad11fba0b31f21d24d7078128f22ba4be1dbcd95a2b7f5f","size":22041,"data":"","first_seen":"2023-03-07T01:06:17Z","last_seen":"2026-08-26T11:30:09.571775Z","times_seen":466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/js/script.js?v=1.1.1.6","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"311a6195ec7c0a2970eb968d35753037","sha1":"0160f0238bfdc4fcf03af95b451c643065e12ac6","sha256":"bbb124339bc2c67ba8cb7db1bc6b9e44aeec89fa4d48fa25833308ade68ebdb4","sha512":"20f102d312a8a03e23397c00793a6a0cef3c24f8e4b26b4a3e467e649290da5c0aa532b3669b3d6d5fae8d86bb62b21182f92142a533bf3eaa73623e5f46838f","ssdeep":"96:z9+ApqIu5ja5j6bYVslqc6v1SYs23vh831GhMxCrXH/H:5+AgIejaj6Ev1js23vh831GhECX/H","tlshash":"269193a87156222d82f233340cfe4425dc3ed665460b8964f0a9b9842f7063e4eebecd","size":4520,"data":"","first_seen":"2026-08-26T10:30:22.246987Z","last_seen":"2026-08-26T11:30:09.600441Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/js/clipboard.min.js?v=1.1.1.6","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa7c9d74f567a8877522f816d7c387cc","sha1":"d79bfe29e732477cb27598dedff9495ddc05f390","sha256":"6717dbf025d81f537cc639903fb560e01912c0467e8da579fcdf92c6f58f7a65","sha512":"da4a20fae935b42cb957a322479c0e779835b37291c6ac8cb41f300dde796847897f788e849ff6153a32004cff087615d37f9f2cb8aa5751cdb1b8bab2534b16","ssdeep":"192:q0Z14dOk1XSHkKpI/230xlH3G4Ly9+vxo53CoD87JxKllkvc363Pw/3JyUZu5MpL:HZCQfI/wsXCz3rbllC3P83JVu5/Gz","tlshash":"6122a68cb29071b156eb50ba802f420fb271c42db06e40a8b21de8f56c7de9d4627f3d","size":10111,"data":"","first_seen":"2023-04-08T01:19:22Z","last_seen":"2026-08-26T11:30:09.579313Z","times_seen":2274,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/js/websocket.js?v=1.1.1.6","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f13fb7d2da6effcacdcd1c1561d0db2","sha1":"6b67198a5b8746436fe217e38b8f8515dc3198b5","sha256":"45ef29269b90d072e58c1a34e70157047611ffdd7c7ff249f60f30e10e99cb13","sha512":"0f1cc98bf2dba06bbf19ba1339ae690295086195509ee5f8d8ef78e3a6cb9bbb799d930f6dbafa1d09ccc2ae2d61d8d3a2e5b443fe50b65af1881e3119340342","ssdeep":"192:KO/IyXiscXXCYkcJqX0DJpBko7F9s+uyYIlaGTrccjt4HywGb3DDFr:KeIoIXSYkODJ/kMrs+uyYIlaGHIH8l","tlshash":"95728fa0b3ac1a5f41f6161580bc66c4cfecc671837945e7f2aaa4e05358b09116beff","size":16604,"data":"","first_seen":"2026-08-26T10:30:22.231871Z","last_seen":"2026-08-26T11:30:09.595719Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/js/jquery-3.4.1/jquery-3.4.1.min.js?v=1.1.1.6","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-08-26T14:38:28.365687Z","times_seen":139826,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/plugs/layui-v2.5.6/layui.js?v=1.1.1.6","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"055cb5361d0dadf75de67f6875def943","sha1":"97ddce827fedb8869a9d0248a16b70c14da2a8ec","sha256":"91ffac1a9d64f3dae4e8091b4feea25981e750d279cb71491b25dc24b33ecaf2","sha512":"3c074594a667484aa78b2227f834c4bebab07a6b4bd795f94570d3e3da911aa48275e13c54e1c6848cd2ec1fbb2bad5cb104e9a6bc1f71c967e93dfde62aa9b2","ssdeep":"192:TDTGeNtb7/j9Eg3JMunJYJjdlrr1+p8XqlPBOTXLLRUweK:TDTGeNtHj9Eg3JMunOJjdlP1+K6Pw7Lz","tlshash":"c7e1a898b5b27452473b306572af901ea67b44ad284c8090d1ced9e63cb6cbe4377f9c","size":7395,"data":"","first_seen":"2023-03-07T01:06:15Z","last_seen":"2026-08-26T11:30:09.605664Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"object","filename":"https://trezors.net/","line_number":798,"column_number":19}]},"http":[{"url":{"schema":"https","addr":"trezors.net/static/mobile/imgn/bar-left.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:37.369Z","timestamp":1787743777369,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/imgn/bar-left.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/static/mobile/css/mobile.css?v=1.1.1.6\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 2041\r\nlast-modified: Fri, 10 Mar 2023 01:41:18 GMT\r\netag: \"640a8abe-7f9\"\r\nexpires: Fri, 25 Sep 2026 11:29:37 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2041,"size_decoded":2382,"mime_type":"image/png","magic":"PNG image data, 210 x 16, 8-bit/color RGBA, non-interlaced","md5":"3534398517d4c701b134c0b54373012b","sha1":"8059eee19b3eef33d698f232c7986943835978ce","sha256":"2792e2bc2f685e496ea34677dfb172585e80f7c346994836e8a82caefa6638ca","sha512":"39b6e50b92170da611ac8bf6475a996f20b56f964fd9b6dc03ab8d445d5869d9f5c45a8b3c13cff5f3d9e7227cb70a9abc55257b08a4a4dda5d2e6af10632da1","ssdeep":"","tlshash":"2641b389f9519a02350df746b9faa0ab663743c4cac08591bce24b63a0711fccd1c1e7","first_seen":"2025-02-26T18:00:22.72948Z","last_seen":"2026-08-26T11:30:09.570005Z","times_seen":51,"resource_available":false,"data":null}},"time_used":1294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1029,"receive":265,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/plugs/layui-v2.5.6/lay/modules/layer.js","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:37.430Z","timestamp":1787743777430,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/plugs/layui-v2.5.6/lay/modules/layer.js HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 May 2021 05:44:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b477be-5619\"\r\nexpires: Wed, 26 Aug 2026 23:29:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22041,"size_decoded":8706,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21984)","md5":"3ffd5603784dbfeef189498c1a705c15","sha1":"983f2308aab1a1addad5be4f1c49099f5dd589cc","sha256":"2aa83aee413f9b91a2dcc536cfd6acd6e44b3fcdb59c26586e32d083396a8db5","sha512":"76d0b3952e17783ab3b597d0db1f734bf7b933ef8ff316c8107f5192f1ecf318c3f11c9ba10a4d15063b26cbb32133af7581070d7c782ebbbcd6580cfd21545a","ssdeep":"384:619Cih92A3igTLXSt/SdMrXqE6K+LxzAOTElH0jjhtjfs8:614iV3iaWtXIKiF13k8","tlshash":"b4a2b66a754034976323906ad11fba0b31f21d24d7078128f22ba4be1dbcd95a2b7f5f","first_seen":"2023-03-07T01:06:17Z","last_seen":"2026-08-26T11:30:09.571775Z","times_seen":466,"resource_available":true,"data":null}},"time_used":968,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":968,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/js/index/index.js?v=1.1.1.6","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.549Z","timestamp":1787743776549,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/js/index/index.js?v=1.1.1.6 HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 25 Aug 2021 08:26:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6125feaa-1211\"\r\nexpires: Wed, 26 Aug 2026 23:29:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4625,"size_decoded":2054,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"0dcd53515a6992b2222ee4d9f4a3e682","sha1":"0aa981db906694ccb7650bd5defc855bf01a2f18","sha256":"4cf6b72d4faa38b5a6d0500c798cdabeb6a4f241d34d0612bbc6c328773cdca0","sha512":"795e3c8e0b69f8875b02c8ab820c1eadea220864ae64192e419ef354898b01684fbc71b54a49bbbd344e5bb090c96999459eb5df90e5be998791a2072b5509f9","ssdeep":"48:4NHsJYS7AEGyUjmHAuEZBnZBJOt9dxGiKsu5RtpmJpZzPDvuli+hIg:mHsJ/oQARZJZTADoPtpI3v4ikIg","tlshash":"88915606e4e314536e23909a8feb4005a1adc033d20acc4dbb9ed69e2f5c9ac5555ede","first_seen":"2025-02-26T18:00:22.704148Z","last_seen":"2026-08-26T11:30:09.573639Z","times_seen":52,"resource_available":true,"data":null}},"time_used":779,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":779,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/css/style.css?v=1.1.1.6","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.523Z","timestamp":1787743776523,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/css/style.css?v=1.1.1.6 HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 21 Feb 2026 14:18:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6999beab-58eb\"\r\nexpires: Wed, 26 Aug 2026 23:29:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22763,"size_decoded":6363,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text","md5":"ea788e218065f960ccc1f516474a0454","sha1":"21efaef87757d8d31314890f8f4df405e2c157b8","sha256":"e5de0593f9aa4bc2d714b6eccfb23ed14a2cb6700b72f4290a80e3a24ad57611","sha512":"d48d0a63ec8137d2818c05ae1835428dfa6b9c7a811b592dd1b7bf7207b124d57b81208959cf0c95ec55e8ca022280bef3156bc731fb59b0b8a08fe5ea93c6d9","ssdeep":"192:MI8pkCzLGbV81/uGzsYyh4OKImsk9Lz7Jo7fKaucG5jjo4CUY4o+hnMD6rFd1VdZ:MMC681/bzsVKFBo7IcGRDfFKP/FIX","tlshash":"10a2842b77021c46b116d0b6ee6da7b1b33d5413a94f9eb4f588312dcbc089590b7b8b","first_seen":"2026-08-26T10:30:22.234192Z","last_seen":"2026-08-26T11:30:09.575441Z","times_seen":2,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/js/clipboard.min.js?v=1.1.1.6","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.544Z","timestamp":1787743776544,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/js/clipboard.min.js?v=1.1.1.6 HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 17 Aug 2021 08:01:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"611b6cbc-2780\"\r\nexpires: Wed, 26 Aug 2026 23:29:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10112,"size_decoded":3964,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10002)","md5":"aa7c9d74f567a8877522f816d7c387cc","sha1":"d79bfe29e732477cb27598dedff9495ddc05f390","sha256":"6717dbf025d81f537cc639903fb560e01912c0467e8da579fcdf92c6f58f7a65","sha512":"da4a20fae935b42cb957a322479c0e779835b37291c6ac8cb41f300dde796847897f788e849ff6153a32004cff087615d37f9f2cb8aa5751cdb1b8bab2534b16","ssdeep":"192:q0Z14dOk1XSHkKpI/230xlH3G4Ly9+vxo53CoD87JxKllkvc363Pw/3JyUZu5MpL:HZCQfI/wsXCz3rbllC3P83JVu5/Gz","tlshash":"6122a68cb29071b156eb50ba802f420fb271c42db06e40a8b21de8f56c7de9d4627f3d","first_seen":"2023-04-08T01:19:22Z","last_seen":"2026-08-26T11:30:09.579313Z","times_seen":2274,"resource_available":true,"data":null}},"time_used":783,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":783,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/imgn/Dark/winer_ico.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.591Z","timestamp":1787743776591,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/imgn/Dark/winer_ico.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 4427\r\nlast-modified: Sat, 19 Jul 2025 06:58:38 GMT\r\netag: \"687b421e-114b\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4427,"size_decoded":4769,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"76bf06ea2b16023a313751b3e062fc74","sha1":"648bd68ccad10cdc314465bdf3ca5d4d57e2eb59","sha256":"b02aa298d797125411a2c8577a5c7c8ed8e577342c3b007dd5ec5419213bae11","sha512":"be90626e610393259d7f45271141a261012ce5e61050c504ee7d03d525352a5fca97d9c4c182c89955e75f5cd3a7f401db7b522f39aee1260223e5d1d0e65188","ssdeep":"96:SSMllcHitlIxv9vk7C1+I4wWHLihk/xuoG6u9JnRr4Ihr+CL7GgrGkaD:SSHIIHUCD4wamh9dKBCLNE","tlshash":"98918d49cce8099a104f0676345bed151a17c60083565d1cdba6a28fd731ee07ea6b8b","first_seen":"2026-08-26T10:30:22.263159Z","last_seen":"2026-08-26T11:30:09.580723Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1806,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":740,"receive":1066,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/upload/20230305/b4e05190842a3134ba7f8861a3a75519.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.601Z","timestamp":1787743776601,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /upload/20230305/b4e05190842a3134ba7f8861a3a75519.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 39502\r\nlast-modified: Sun, 05 Mar 2023 08:46:58 GMT\r\netag: \"64045702-9a4e\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39502,"size_decoded":39845,"mime_type":"image/png","magic":"PNG image data, 577 x 433, 8-bit/color RGBA, non-interlaced","md5":"63118ccd7177a991ff802982be1e1fbc","sha1":"3ed2af0322917dbb8c16107025dc88c4c5ee4d31","sha256":"50aa0ecd50119d1a04f475aa05f8cb55240536f31498590553a1a8c52388e917","sha512":"060e9d1bf9401fc9fcab0bdfc540d37453c25c1e84263912a48e11224b84bafffae0a93aa11299be00d585d3b02054c2a5d5d91f10121c197bff6b02ad428a16","ssdeep":"768:eTR7KLdQMEZIg/ArEYyO3pDZYe22F42zSQGsjDCed58lBf1dozBnO:uR7KLdPEZv5YyOJZfF4xsTmIO","tlshash":"9b03d04b87d00c2803f8f6985b408819ff0c36bdbdd4929567f74b2373999d9948a96f","first_seen":"2024-08-20T10:15:14.353165Z","last_seen":"2026-08-26T11:30:09.583011Z","times_seen":31,"resource_available":false,"data":null}},"time_used":1798,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":731,"receive":1067,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/upload/20210908/315ba4b3a7c32f5dd920eea7dfb1ef7f.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.606Z","timestamp":1787743776606,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /upload/20210908/315ba4b3a7c32f5dd920eea7dfb1ef7f.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 7037\r\nlast-modified: Wed, 08 Sep 2021 13:17:36 GMT\r\netag: \"6138b7f0-1b7d\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7037,"size_decoded":7379,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit colormap, non-interlaced","md5":"04579b0e931d4de1eff2108468ad518c","sha1":"3731484ee0b9ab9b0f4fa977f861f6fb6cdec8b2","sha256":"48cc3486a90c7cc75e9b675e62abfc5ac78c17ba81b54f7f1053f569bad73c7c","sha512":"f63b21e39f1e00ec70ffe4d20871a3759f8851ddf22ed7549be613529a3ad33e5deca1b507911d7bb21e4b751d183d21fc87953ad30a56ea5684d8e06ad66121","ssdeep":"192:CrZ3rmpzbvJlngM1TD+g1IqdfzWP76dkFfRyNxOJcU:CtwvDgMNdfzLQR4OiU","tlshash":"4ae18d878101ed88ec2f4722639b0c6d2fde4f9c86059ff199d30b322a49d661008c3b","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-08-26T11:30:09.58408Z","times_seen":60,"resource_available":false,"data":null}},"time_used":2059,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":726,"receive":1333,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/imgn/Dark/four-common.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.619Z","timestamp":1787743776619,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/imgn/Dark/four-common.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 2567\r\nlast-modified: Fri, 21 Aug 2026 01:23:01 GMT\r\netag: \"6a87a875-a07\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2567,"size_decoded":2908,"mime_type":"image/png","magic":"PNG image data, 130 x 130, 8-bit/color RGBA, non-interlaced","md5":"e429702f5f1b70ad2130c6bc74c579ca","sha1":"f7e4af0eaaae3b8847e9b8f6c97869c9ae42f0b3","sha256":"af2ce80481cbcf8e4401f85e2f964089270827c2866f05f7c7662dda5a9656d6","sha512":"efbc70339f6a29c3109763a936b472712b399e8f28fe070768102b86938d0d068c4eaee394d28bda77625a0c750eca06f591d3a55d1ae8d553f9f14c3c135ee3","ssdeep":"","tlshash":"e351398fc624b4e6e638cfd2c3a5a50cd11622838fdb91709c5a7089006ed3026a0b87","first_seen":"2025-07-30T14:30:57.622336Z","last_seen":"2026-08-26T11:30:09.585042Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2047,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":714,"receive":1333,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/js/index/d3.v4.min.js?v=1.1.1.6","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.547Z","timestamp":1787743776547,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/js/index/d3.v4.min.js?v=1.1.1.6 HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 17 Aug 2021 08:01:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"611b6cbc-36305\"\r\nexpires: Wed, 26 Aug 2026 23:29:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":221957,"size_decoded":82825,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65471)","md5":"e899651bcf1a3591032d7213daeab171","sha1":"607e02087446eb2efadcbee253db3aca3d794a7b","sha256":"8585db4092b8a9d26201e0d58e343d1b40fa034c4b9c343878923d7649bb1699","sha512":"44927534d0bcf1084deddc29098f2b9bfe8ec48f987503f8f03acb19efde48077e9feb353d7c10924a73cc082825ee1c6455b61802d0a31a31eb5812636c907e","ssdeep":"1536:wJdNAq50g6ds5VIG2pUfpgBU3gPDSb7+CmeoA08h6Vh5Lbg5ECfmDoo5rfIrTGE9:wrN3F2pHSYlyLG1sVAupFmuFyiI7R6","tlshash":"092494ccb682b096936320b0417f244bf33b2d59684f4568e029e9d97c7895e51bbfbc","first_seen":"2023-03-07T21:28:45Z","last_seen":"2026-08-26T11:30:09.58597Z","times_seen":462,"resource_available":true,"data":null}},"time_used":781,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":781,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/img/b01.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.558Z","timestamp":1787743776558,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/img/b01.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 4452\r\nlast-modified: Sat, 21 Feb 2026 16:14:22 GMT\r\netag: \"6999d9de-1164\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4452,"size_decoded":4794,"mime_type":"image/png","magic":"PNG image data, 130 x 60, 8-bit/color RGBA, non-interlaced","md5":"0aec74e7bc730dadae32f39b574c57d2","sha1":"f5dee7ddcddce4f937043684a72757141b159d18","sha256":"c4e5c0d1f0de7a0349435bfceeea107bfd7b718f078f7006b80c996c9ec7e823","sha512":"41524aad64287cd065fde016e20f23b844d1c8753710d43bda3ec95a7d81bfa35f665ddc8280545f91e0e06b716a9bfc5b94f96bdf38ff5e7585b73833a712be","ssdeep":"96:LllcHitlIxv9vk7C1+I4wWHLihk/xarrot4rTQPfLG/sH28hDBE+:YIIHUCD4waMYtzjG6Di+","tlshash":"66914cca984c4d89280e0b5538b25d15861ef284461b6e8e8ded465e5a31ccabcf7f4f","first_seen":"2026-08-26T10:30:22.293597Z","last_seen":"2026-08-26T11:30:09.586932Z","times_seen":2,"resource_available":false,"data":null}},"time_used":819,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":770,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/imgn/Dark/notice.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.575Z","timestamp":1787743776575,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/imgn/Dark/notice.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 539\r\nlast-modified: Sun, 19 Feb 2023 16:24:58 GMT\r\netag: \"63f24d5a-21b\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":539,"size_decoded":879,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"7891a0219f54f843fd5d8d8a33426825","sha1":"fcd8d245752e3c7c9ce5ab8cf1deb5e1aef29682","sha256":"660da6387b18b407a644cc8586b438d93d5843a3463442cb489c67543cd297b4","sha512":"818d564fe544d35dab7e644dbf67395690fbbb800b480935c20a3582e19b71fea357de54dc5bd4c724e6fc96485b1626b1ece0388e584c9c2aa748d5f9e1ae89","ssdeep":"","tlshash":"d9f075432548513697afa07feae336a1bf26373a7f01c4aabd44c1042f6f1664cd0b29","first_seen":"2025-02-26T18:00:22.730452Z","last_seen":"2026-08-26T11:30:09.589815Z","times_seen":45,"resource_available":false,"data":null}},"time_used":1288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":755,"receive":533,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/img/banner04.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.587Z","timestamp":1787743776587,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/img/banner04.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 300083\r\nlast-modified: Sun, 23 Aug 2026 07:12:45 GMT\r\netag: \"6a8a9d6d-49433\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":300083,"size_decoded":300428,"mime_type":"image/png","magic":"PNG image data, 690 x 300, 8-bit/color RGBA, non-interlaced","md5":"218d7c60c6a0b5c80061dfbcf04cf23d","sha1":"2fad4e6618fee09862e5d417c5c70883db290780","sha256":"9860840e8515c19a8c5bf644936e6cd0ffa11dedc9e2bb1dd5316b9321a41efa","sha512":"1b2d8d171ae9b74b3cdb4f359a32027c3d1772c8b3ddc3012fca05260b53f00a427d655a2f0f879c517a15a7e4ca79a8e7d324433c64776585bc90dbb66ef4c5","ssdeep":"6144:aRyS9o+nGBEsqSef1qtu3nfAYrzg7anNohUVKEkUZaAx7y:o99UrPA33fWcNtWhiy","tlshash":"7054234464ea8e387cf91749c70cfb583aa57adf93321f1d5fa2ad0288365d14f1b09a","first_seen":"2026-08-26T10:30:22.267765Z","last_seen":"2026-08-26T11:30:09.59081Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2619,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":744,"receive":1875,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/upload/20210908/05b753051a4d9379614370e96ade2ac8.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.604Z","timestamp":1787743776604,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /upload/20210908/05b753051a4d9379614370e96ade2ac8.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 18553\r\nlast-modified: Tue, 07 Sep 2021 16:36:40 GMT\r\netag: \"61379518-4879\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18553,"size_decoded":18896,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"41173f1fac2d8fe9fcf0285d0e7d6acd","sha1":"2262cedafbeddfe8d47ffbd2ac442b0b92e681fa","sha256":"25f2ced7253fac8937192733091dc789301446bb306bdda4e7814999d03dc692","sha512":"73354a1dab8eec7ae4d2ea5c65ae235c9b9fe2860806f1a4825284a6971a001754649f868c91bd9e29e4141e6ac8bbad092296439678b02a26e9d3463e0ea070","ssdeep":"384:ci7lfIt9MsjkET7AlZaxL9qiCH5cAWs0IMzz9zgDlV52smW7NZorx:lRfTstPSa9SDIzVgbkXWAN","tlshash":"c682e0aee2d37c184a5bcb144be634b26cd23e694b636c43703dc70c9e5481963a327b","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-08-26T11:30:09.592589Z","times_seen":370,"resource_available":false,"data":null}},"time_used":2061,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":728,"receive":1333,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/mobile/ajax/findcpm.html","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:37.702Z","timestamp":1787743777702,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"POST /mobile/ajax/findcpm.html HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 16\r\nOrigin: https://trezors.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":16,"data":"type=2\u0026site=home"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: lang=ko-kr; path=/\nPHPSESSID=738619d947da54bcab9abc01192ac058; path=/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"lang","value":"ko-kr","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"lang=ko-kr; path=/"},{"name":"PHPSESSID","value":"738619d947da54bcab9abc01192ac058","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=738619d947da54bcab9abc01192ac058; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10,"size_decoded":272,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b9e754add75d51d888ce7585dc9dfe41","sha1":"0fd53114199a1a46e887032b7efa05f1fd74c807","sha256":"7a97b9b4d758a3929b8a2be53fbe189c9ba9378d6fbb8190d37f7cc14f5cf5d3","sha512":"6ea97d926607e77cda3275af2c3ba966fd45c1d4b4aa97b53d63a718f0941d93c1d4e67939885740dc6bfd59a0021ed049073ddfc61cfd0e8a5553efb449b539","ssdeep":"","tlshash":"2f500000003c000300030000000c0000c33f00000c0000000c0c033000000000000030","first_seen":"2023-04-06T21:01:20Z","last_seen":"2026-08-26T11:30:09.593525Z","times_seen":5396,"resource_available":false,"data":null}},"time_used":1506,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1506,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/js/jquery-3.4.1/jquery-3.4.1.min.js?v=1.1.1.6","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.529Z","timestamp":1787743776529,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/js/jquery-3.4.1/jquery-3.4.1.min.js?v=1.1.1.6 HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 17 Aug 2021 08:01:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"611b6cbc-15851\"\r\nexpires: Wed, 26 Aug 2026 23:29:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88145,"size_decoded":34848,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-08-26T14:38:28.365687Z","times_seen":139826,"resource_available":true,"data":null}},"time_used":533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/js/websocket.js?v=1.1.1.6","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.551Z","timestamp":1787743776551,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/js/websocket.js?v=1.1.1.6 HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Jun 2025 01:35:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"684b8065-4204\"\r\nexpires: Wed, 26 Aug 2026 23:29:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16900,"size_decoded":4994,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"6f13fb7d2da6effcacdcd1c1561d0db2","sha1":"6b67198a5b8746436fe217e38b8f8515dc3198b5","sha256":"45ef29269b90d072e58c1a34e70157047611ffdd7c7ff249f60f30e10e99cb13","sha512":"0f1cc98bf2dba06bbf19ba1339ae690295086195509ee5f8d8ef78e3a6cb9bbb799d930f6dbafa1d09ccc2ae2d61d8d3a2e5b443fe50b65af1881e3119340342","ssdeep":"192:KO/IyXiscXXCYkcJqX0DJpBko7F9s+uyYIlaGTrccjt4HywGb3DDFr:KeIoIXSYkODJ/kMrs+uyYIlaGHIH8l","tlshash":"95728fa0b3ac1a5f41f6161580bc66c4cfecc671837945e7f2aaa4e05358b09116beff","first_seen":"2026-08-26T10:30:22.231871Z","last_seen":"2026-08-26T11:30:09.595719Z","times_seen":2,"resource_available":true,"data":null}},"time_used":777,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":777,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/upload/20210908/1daa415d3161b100b21eda14d61a99cc.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.609Z","timestamp":1787743776609,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /upload/20210908/1daa415d3161b100b21eda14d61a99cc.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 14216\r\nlast-modified: Wed, 08 Sep 2021 13:28:56 GMT\r\netag: \"6138ba98-3788\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14216,"size_decoded":14559,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit colormap, non-interlaced","md5":"39f7b58012edd7f003da1056cf2dc725","sha1":"c44d086f0b415930146f8bdf3483121b1248f739","sha256":"799db04a5d13f456cf8e146818025e8afb4e457d2f225ab69f5593efede4f2fc","sha512":"2d2e010a00cdd1a45bcace62ff8f1d52398ef210bbb7d76f12b2cead465d42d2ac749c29dea69f73128760e0649c62d31ea3f6e97496d85c2e2b46674907f956","ssdeep":"192:AlZ5KKIOKfs8xgjWQRyVqHc5TAYA02gvH3j4oqduETvLQm+rJTDixLvrMLaiFdR8:wlK3gbHc5T1Argf3j4FwEv+4tvguZ","tlshash":"8a52d1cf6adfee009b6d4076d4386509c7bee0db6067663c4405c8413fe146fda5546d","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-08-26T11:30:09.598281Z","times_seen":55,"resource_available":false,"data":null}},"time_used":2056,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":723,"receive":1333,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/plugs/layui-v2.5.6/lay/modules/slider.js","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:39.230Z","timestamp":1787743779230,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/plugs/layui-v2.5.6/lay/modules/slider.js HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 29 Aug 2021 07:25:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"612b365e-1bb3\"\r\nexpires: Wed, 26 Aug 2026 23:29:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7091,"size_decoded":3034,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6929)","md5":"6c35742db2e72cd4f30cefa23690ecf5","sha1":"b50d4268f547cefd984c069d276c956feef395e8","sha256":"2fdaaa9935b2d19fb54e0798e6e42fc3528d1b2772b46b9aa8731b1ab6947609","sha512":"44d0ab3649b35cec891738e6eb4f28d1857fcb900e2369b9395ea54854717108268c8ce729591923fb094cfe1b34dc0f9b2e9bf35b17b77f34c479ef80deb391","ssdeep":"192:z8Syuw2bmz0DLKypMjYXVp5D8IlM/eq9zwtyd4UduKN:z1yuw2UOPSBMj8/","tlshash":"53e19615314ab5732172c263b59fc84eb2f20779b303c564a6a540a51ebece82b37f63","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-08-26T11:30:09.599328Z","times_seen":131,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/js/script.js?v=1.1.1.6","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.543Z","timestamp":1787743776543,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/js/script.js?v=1.1.1.6 HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 02 May 2025 13:47:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6814ccdf-11a8\"\r\nexpires: Wed, 26 Aug 2026 23:29:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4520,"size_decoded":2093,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"311a6195ec7c0a2970eb968d35753037","sha1":"0160f0238bfdc4fcf03af95b451c643065e12ac6","sha256":"bbb124339bc2c67ba8cb7db1bc6b9e44aeec89fa4d48fa25833308ade68ebdb4","sha512":"20f102d312a8a03e23397c00793a6a0cef3c24f8e4b26b4a3e467e649290da5c0aa532b3669b3d6d5fae8d86bb62b21182f92142a533bf3eaa73623e5f46838f","ssdeep":"96:z9+ApqIu5ja5j6bYVslqc6v1SYs23vh831GhMxCrXH/H:5+AgIejaj6Ev1js23vh831GhECX/H","tlshash":"269193a87156222d82f233340cfe4425dc3ed665460b8964f0a9b9842f7063e4eebecd","first_seen":"2026-08-26T10:30:22.246987Z","last_seen":"2026-08-26T11:30:09.600441Z","times_seen":2,"resource_available":true,"data":null}},"time_used":785,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":785,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/upload/20210908/0e3bc88bcf1739272a781dc68ee40b00.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.605Z","timestamp":1787743776605,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /upload/20210908/0e3bc88bcf1739272a781dc68ee40b00.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 55728\r\nlast-modified: Tue, 07 Sep 2021 16:38:12 GMT\r\netag: \"61379574-d9b0\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55728,"size_decoded":56071,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"48384a67185dbdfeef3aa43c99d3319c","sha1":"23e15189bebafbbec8b23e8ed0f3392a9b7979ee","sha256":"1ceba4efa6a645fbe532e520385f37001922e14b6aa7b4ebeb19e755014feb39","sha512":"2f7a13f56ff64b874a76994d00f198c5fc2b7424181935e641eb81bcf171db54fa50b711502c0c4a7e8f5c934ed5747233d87ae0602916244947d3724eb3ce10","ssdeep":"1536:5ko5w6RHlzxqElMwBI6M3iD+oLKTn6EPwhk6g9p6uP5I:x5fR9xjlMGnMSDYLPJ6bOq","tlshash":"0d430247c0529ed2c68853aa0e3de48a84779d12358f80577ce6525a82e2df29bd770f","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-08-26T11:30:09.602342Z","times_seen":959,"resource_available":false,"data":null}},"time_used":2060,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":727,"receive":1333,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/upload/20210920/655b8a658553425ccb4adb1a03312d4d.jpg","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.613Z","timestamp":1787743776613,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /upload/20210920/655b8a658553425ccb4adb1a03312d4d.jpg HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 958\r\nlast-modified: Mon, 20 Sep 2021 13:29:26 GMT\r\netag: \"61488cb6-3be\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":958,"size_decoded":1299,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 48x48, components 3","md5":"876feddecbd65e609538fa3f775ee50b","sha1":"112a9d1de8151bac9e72b249c32114cfc41041f4","sha256":"d54560600d5ecf3b41c477bca8591e9a8689a10d1613874fb56e1a56c698c4ef","sha512":"27894657fa4dcbfa352f53552d78a92114bf26c1b1fca460ee3453c15d654eb8b2a33e6bc503dc2b119fc7ae274962ba6b08cc3324dc02462c26f3e55c48c45f","ssdeep":"","tlshash":"e31196de3d789e22dd35353413f41284331f3f576790ab60159e6854adbe4ca4f4aac1","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-08-26T11:30:09.603544Z","times_seen":31,"resource_available":false,"data":null}},"time_used":2053,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":720,"receive":1333,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/imgn/table-bg.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:37.368Z","timestamp":1787743777368,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/imgn/table-bg.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/static/mobile/css/mobile.css?v=1.1.1.6\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 76980\r\nlast-modified: Tue, 18 Jul 2023 09:22:18 GMT\r\netag: \"64b659ca-12cb4\"\r\nexpires: Fri, 25 Sep 2026 11:29:37 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76980,"size_decoded":77324,"mime_type":"image/png","magic":"PNG image data, 750 x 1344, 8-bit/color RGBA, non-interlaced","md5":"3b228f3d9512fa00dc595c224e159cd3","sha1":"b31ef95165b22656e57542b02f1ae6fe7a4ab006","sha256":"6066de4ee64a6d6eaf1aea82051f163f8e0fb37a0e592209faf70e7bee992536","sha512":"4efa02ba8b089b6ce84b97aef347c9ca4d72be0e2dc59a8ed62f87b8646ad07ad05bf58ecd8b92abbe48554b163213f92af5c8f83126c203b49bbc3ce0cc8060","ssdeep":"1536:+e6a2j5Ca7gYzI/ZBn2suJFfBUd1fq9yZEpQoNpKuxd1lG2U8xSmm+jAFBnAGJ:/ijc/ZBtqdBUdUWEpQo+KmD8xbBjALAm","tlshash":"71730213f4840f3ec64f7a7020364fb26d2b348266cd94bd195a6a59ca443aee485bf6","first_seen":"2023-05-25T05:38:33Z","last_seen":"2026-08-26T11:30:09.604642Z","times_seen":55,"resource_available":false,"data":null}},"time_used":1300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1031,"receive":269,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/plugs/layui-v2.5.6/layui.js?v=1.1.1.6","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.534Z","timestamp":1787743776534,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/plugs/layui-v2.5.6/layui.js?v=1.1.1.6 HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 May 2021 05:44:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b477be-1ce3\"\r\nexpires: Wed, 26 Aug 2026 23:29:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7395,"size_decoded":3631,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7324)","md5":"055cb5361d0dadf75de67f6875def943","sha1":"97ddce827fedb8869a9d0248a16b70c14da2a8ec","sha256":"91ffac1a9d64f3dae4e8091b4feea25981e750d279cb71491b25dc24b33ecaf2","sha512":"3c074594a667484aa78b2227f834c4bebab07a6b4bd795f94570d3e3da911aa48275e13c54e1c6848cd2ec1fbb2bad5cb104e9a6bc1f71c967e93dfde62aa9b2","ssdeep":"192:TDTGeNtb7/j9Eg3JMunJYJjdlrr1+p8XqlPBOTXLLRUweK:TDTGeNtHj9Eg3JMunOJjdlP1+K6Pw7Lz","tlshash":"c7e1a898b5b27452473b306572af901ea67b44ad284c8090d1ced9e63cb6cbe4377f9c","first_seen":"2023-03-07T01:06:15Z","last_seen":"2026-08-26T11:30:09.605664Z","times_seen":586,"resource_available":true,"data":null}},"time_used":793,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":793,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/imgn/Dark/user_recharge.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.577Z","timestamp":1787743776577,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/imgn/Dark/user_recharge.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 435\r\nlast-modified: Sun, 19 Feb 2023 16:37:38 GMT\r\netag: \"63f25052-1b3\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":435,"size_decoded":775,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"629caac7156bd72c571289dab0b11043","sha1":"7b47e3b6f463461dc8f77d8c8905921fcbe19f5d","sha256":"4c20009cb9dba53afe93da3f12c2c69b9fc9121215064a268aed7536ad799969","sha512":"f623a92d7cfd810a3c23579740969cbec7574d7f9c76b7921df12d7a67af05642fea82d44e406af6fe73a38fe751baf2c1ab1934d810107e3b4f7a493c494e8f","ssdeep":"","tlshash":"f1e023e743433d5d363a8a620c2d2414ee230b4485a678049c2b7739648b30a735c703","first_seen":"2025-02-26T18:00:22.718535Z","last_seen":"2026-08-26T11:30:09.606645Z","times_seen":54,"resource_available":false,"data":null}},"time_used":1285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":753,"receive":532,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/upload/20210908/48e303e31b11578b9b228243c6e2f8f7.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.608Z","timestamp":1787743776608,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /upload/20210908/48e303e31b11578b9b228243c6e2f8f7.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 5075\r\nlast-modified: Wed, 08 Sep 2021 13:24:54 GMT\r\netag: \"6138b9a6-13d3\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5075,"size_decoded":5417,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit colormap, non-interlaced","md5":"637141ec9008e3829c06808e7aa42dbb","sha1":"2a21bb4ef148b775625109917cf62514f7b12800","sha256":"d52371b6eefab5bf34e7905295bbeecca542d5d4d30808d844827ebee237c03c","sha512":"b0d8d8d950c8e5054bf70c2f2eca8bb1f1078686799f01e590bad715d8ba9d6a6cb525c542554589c2418f941b3b3b4333f395eda8dff12db1a14a84d9bc7b83","ssdeep":"96:snrT20Ll0w9mDbILjuBfboPx8NjvsqAxHlAzxfZjanQA:snrTTmwibAjKoPx8NMxqzxfN6D","tlshash":"a8a19ff2f57c628d5058980b7d94ec79e1f09133522e6873a76463214428bd1e57bec8","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-08-26T11:30:09.607546Z","times_seen":67,"resource_available":false,"data":null}},"time_used":2057,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":724,"receive":1333,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/upload/20210908/1f43841470a7b1a5be381e40ac7af721.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.612Z","timestamp":1787743776612,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /upload/20210908/1f43841470a7b1a5be381e40ac7af721.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 2559\r\nlast-modified: Wed, 08 Sep 2021 13:34:46 GMT\r\netag: \"6138bbf6-9ff\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2559,"size_decoded":2900,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit colormap, non-interlaced","md5":"a6f6dbbfa8b81a764b530d6af26df859","sha1":"15e3d707247c6a2249d4fc5fde0eca9a9542ab67","sha256":"180ab392ff5f9fa71c27be78a9c7c92f16bf7973dac0cc9299f46471d5b41fef","sha512":"8a9e7e993104e721eee6c38139e68b16ccd14507fdec65b88f4f7b91674ef7d1b2cd6bcc7ee671af650219e56cff1d5be56c12aeccb68797112953996792fcf2","ssdeep":"","tlshash":"ca515dc68853f4b8ddb850231417b8ceee380c112839568d5080727f707d75416777f6","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-08-26T11:30:09.608586Z","times_seen":58,"resource_available":false,"data":null}},"time_used":2054,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":721,"receive":1333,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/plugs/layui-v2.5.6/css/modules/layer/default/layer.css?v=3.1.1","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:38.443Z","timestamp":1787743778443,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/plugs/layui-v2.5.6/css/modules/layer/default/layer.css?v=3.1.1 HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 May 2021 05:44:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b477be-3859\"\r\nexpires: Wed, 26 Aug 2026 23:29:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14425,"size_decoded":3613,"mime_type":"text/css","magic":"ASCII text, with very long lines (14368)","md5":"cdf467c11d77287b09cec22297aa06b2","sha1":"57e147ee3cf8a1ea2194bdfbad5e69083fa578bd","sha256":"ba2baf1bb08b0bff57cce75934bab7768c52567bf389479bed787004ae6e653b","sha512":"9c24a7c4d5d151652e246375c42f4ef2eb29a33dd9b4bad8c19ac2dd52086db91988d0f87c5d547f377499649f02e6ac4dbe4ee7a06d8a65cb2b445482104ab5","ssdeep":"96:Jp+Ntha8qNEp+wRY1vUPXiK6nMLPD2OtLzXyPHL/LztJDzyv2OQ7KGx1jyd2/SWz:KWmLr2OtSrzzt42OQ7KGx1jCWR2b+RcU","tlshash":"f55231e144811299b0278721d6dc7eba32f88d43e5630daef2573c1f874c6dba2b6647","first_seen":"2023-04-16T09:58:27Z","last_seen":"2026-08-26T11:30:09.609988Z","times_seen":624,"resource_available":false,"data":null}},"time_used":765,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":765,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/lib/font-awesome-4.7.0/css/font-awesome.min.css?v=1.1.1.6","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.526Z","timestamp":1787743776526,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/lib/font-awesome-4.7.0/css/font-awesome.min.css?v=1.1.1.6 HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 17 Aug 2021 08:01:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"611b6cbe-7918\"\r\nexpires: Wed, 26 Aug 2026 23:29:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31000,"size_decoded":8151,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-08-26T14:42:52.198697Z","times_seen":311656,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":534,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/css/dark.css?v=1.1.1.6","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.527Z","timestamp":1787743776527,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/css/dark.css?v=1.1.1.6 HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Aug 2026 05:08:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a868bb7-1d19\"\r\nexpires: Wed, 26 Aug 2026 23:29:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7449,"size_decoded":2656,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"9056369c8d6a3eca08e6de412aefd762","sha1":"36583bed6ad06d19208cb81f4a0ceb4e0952c4b0","sha256":"9717bcb61f8bef8bbd66e3e9d6e46c8b11652145066dad71e0a0e3697753dbea","sha512":"c3c6fd14d198413ab324f95097b141da3cb1238dc465008216f909032864c34b43ed7e55e33d861de3ac242f0ef687c601d871a98b67602a0e6b5c611e5dcd24","ssdeep":"192:gbRYVJuFExexjzSv2k9/CSCA98CSEFY22J:EIJgOexjl8OIXY3","tlshash":"bee1326be20a24cf3233c8b54b3dd230ee7d51a28d0f037db958a1b51b568a165f6c63","first_seen":"2026-08-26T10:30:22.256837Z","last_seen":"2026-08-26T11:30:09.611976Z","times_seen":2,"resource_available":false,"data":null}},"time_used":533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/upload/20210908/184d4967369e79c741e01e5815b71794.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.607Z","timestamp":1787743776607,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /upload/20210908/184d4967369e79c741e01e5815b71794.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 3670\r\nlast-modified: Wed, 08 Sep 2021 13:21:50 GMT\r\netag: \"6138b8ee-e56\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3670,"size_decoded":4011,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit colormap, non-interlaced","md5":"7e9081379bab37c4cb737bc6109b1676","sha1":"8bfc84d647da70d2443fb78d718a8340a96b883f","sha256":"09d44b86ba44a144f1e60e5056c22a7ad35d3e783c6281f3412e0f761b5b37e5","sha512":"0ec46180c768cb4be6419bd8f912f2ed8df79fafade52f191f91c454bf2fd0490ee0b56c25681cf41a15a5ec7800fb76b14fce0bbb75e4b266d70d1e3ab98ae8","ssdeep":"","tlshash":"f4716dcd048506f7d01a02738811b01da3917f5911a63da0c1305effe5b78d4267375e","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-08-26T11:30:09.61386Z","times_seen":63,"resource_available":false,"data":null}},"time_used":2058,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":725,"receive":1333,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/imgn/Dark/chat_ico.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.593Z","timestamp":1787743776593,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/imgn/Dark/chat_ico.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 8158\r\nlast-modified: Sun, 25 Aug 2024 10:35:06 GMT\r\netag: \"66cb08da-1fde\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8158,"size_decoded":8500,"mime_type":"image/png","magic":"PNG image data, 156 x 156, 8-bit/color RGBA, non-interlaced","md5":"98c9c1c37e1e0f9366a2c97f3eedec4c","sha1":"a5c3676343eb0d4598fd91f5dee7bf5b56ca79eb","sha256":"143b5cf67f5fd92f1ac863c1be2fd07a69b9fcfc4e1eaabdeaccebe88a630272","sha512":"55f5628ac27a32644ee68c2e7708d712fc8a5508f84408ed1c156a885fab7394252096e24be52dd2614e4c58d80088d55166940edb370e4efbbb48ce11a2a39f","ssdeep":"96:ngVFIQ6ZOdOPI3Cb7ZLmoli9o08P3RM8uFFKX9KSalU4wc1yV2mlqBa01bLiXQVP:FQuOdOA3CRm/WxtNLKLhLi685jre+Qb","tlshash":"65f1bf86e190ac03a5c47dc12fea6946c01d5a49fdc1d4eefcef240dc469200bc5adf6","first_seen":"2026-08-26T10:30:22.24505Z","last_seen":"2026-08-26T11:30:09.614975Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1804,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":738,"receive":1066,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/css/mobile.css?v=1.1.1.6","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.525Z","timestamp":1787743776525,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/css/mobile.css?v=1.1.1.6 HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 21 Aug 2026 01:14:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a87a66b-ccc6\"\r\nexpires: Wed, 26 Aug 2026 23:29:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52422,"size_decoded":14439,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (2654), with CRLF line terminators","md5":"644e850f5033b716f7893f1cac8eae12","sha1":"9f95b1aa683b92f3a08156b7d5c174af57862cb6","sha256":"32bb8fb799717cdacaf9a89bc7121be31e4c52486c8bfbdcf416ab5283f20107","sha512":"f55e8ec4b704d077d291c7312074ad3df18b4de508b6dd084240cf2e3170f16b1aafb188523092beb7d8615dbca7ce7be04883d8a7749043fb01c88e48dbcf6c","ssdeep":"768:anruzQ8tbNWOrfIaZCvUNCGlIiQbszS+S87:anrUfhZCvUNCGlVQbQS+S87","tlshash":"b333867ee601110b7237dca4abb91766ee6c40538a0702f8b9d072598ff396459b1fce","first_seen":"2026-08-26T10:30:22.239734Z","last_seen":"2026-08-26T11:30:09.616958Z","times_seen":2,"resource_available":false,"data":null}},"time_used":536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":536,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/js/jquery.cookies.js?v=1.1.1.6","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.550Z","timestamp":1787743776550,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/js/jquery.cookies.js?v=1.1.1.6 HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 10 Jun 2021 06:32:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60c1b1ea-c43\"\r\nexpires: Wed, 26 Aug 2026 23:29:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3139,"size_decoded":1797,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"de952eda41b0edc0b5c416ee48f7028e","sha1":"dc07de882ab68370534fbf9440ac7b8c068695a7","sha256":"631ea2bc942c1791920270ba02eef37774aa10db3994b4936a2b5f891a970ff7","sha512":"674fd3c9db480ecf8680822131fc80f904ddfb3907a1033ae9ce06019a87ac6f9eb6d6535e6aba0ee0b601d039d55da7e7cd247a67db5cf7bbcb8408116a03d1","ssdeep":"","tlshash":"1b516554b6cc375f07ab22416b6f50aca63cbf72255808dc885965f82c60c37db9bd2a","first_seen":"2023-03-07T12:09:28Z","last_seen":"2026-08-26T11:30:09.618486Z","times_seen":3115,"resource_available":true,"data":null}},"time_used":778,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":778,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/imgn/Dark/earth.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.561Z","timestamp":1787743776561,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/imgn/Dark/earth.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 631\r\nlast-modified: Sun, 19 Feb 2023 16:24:58 GMT\r\netag: \"63f24d5a-277\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":631,"size_decoded":971,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"364a83017bdcf5096652b1dc7d6c54a2","sha1":"241ac64fb0e4db0e2c1a554ce129b5d897a5683d","sha256":"8d4eefec090b8fdd600a40fbf67273a0f18a1c23af1a83972e8d1da6186f3b1a","sha512":"2af7b18054d07d8376929f2958b31d7747046324c328ab98a7db15ac1b00953d9fd93a1af5215478e4351555f672485411e0989fc191b6e69d64f633c5135fc0","ssdeep":"","tlshash":"40f062f650285f1be018e1b8a11d517bdc1b80b051d098283e2bf8da8a3a90d1196ad2","first_seen":"2023-09-23T10:36:02Z","last_seen":"2026-08-26T11:30:09.619302Z","times_seen":51,"resource_available":false,"data":null}},"time_used":817,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":768,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/index/images/hk.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.568Z","timestamp":1787743776568,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/index/images/hk.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 1520\r\nlast-modified: Sun, 12 Sep 2021 07:19:18 GMT\r\netag: \"613da9f6-5f0\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1520,"size_decoded":1861,"mime_type":"image/png","magic":"PNG image data, 49 x 32, 8-bit/color RGBA, non-interlaced","md5":"199fe88db3fdff594016f2344256f05e","sha1":"e05d0b865be8418dc92a019a2b90e61bbbf315c8","sha256":"417a37b4988d0520ea83dc2c570100c6a7a86dbcd5bf7ca1113659c38d5101d9","sha512":"4992cda3d76d807af483a733d670d7a3b5e866c5b61442462247ecec75bd4e4d416bbed256593e3b58dba94b64b5bd83ef6147aa83275bb986ea2d68e47f2fe4","ssdeep":"","tlshash":"0031f9e7cdb29da0c07b0671383af59dc4331401a5fd0813ea1a056b69a001a7cfeddb","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-08-26T11:30:09.620048Z","times_seen":327,"resource_available":false,"data":null}},"time_used":1294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":761,"receive":533,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/index/images/ko.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.570Z","timestamp":1787743776570,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/index/images/ko.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 4035\r\nlast-modified: Sun, 12 Sep 2021 07:19:18 GMT\r\netag: \"613da9f6-fc3\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4035,"size_decoded":4376,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 200x133, components 3","md5":"08db97ed0363573d61eaa015088a2559","sha1":"ef309a9c508819cad0ff80619210513f9671c441","sha256":"386bb37ce7c7097716e95618a789d011a08ff3dbc519d34a5642c5dd0c398eca","sha512":"8ac9d23f79a5c7aaa8e52a84c68f63857fb4bd93860c42d0b12364f19f169e83292bb765f22af092242b29ec61901f56e01daba863acc433998d58e9b3798685","ssdeep":"","tlshash":"f9815d937a97ce83ff28da7540a3106027da405262d787755aaeb47fb1acfb59812420","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-08-26T11:30:09.620731Z","times_seen":236,"resource_available":false,"data":null}},"time_used":1292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":759,"receive":533,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/imgn/Dark/ieo_ico.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.582Z","timestamp":1787743776582,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/imgn/Dark/ieo_ico.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 1245\r\nlast-modified: Sun, 19 Feb 2023 16:24:58 GMT\r\netag: \"63f24d5a-4dd\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1245,"size_decoded":1586,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"4b4b5b0dfc201b7dc1897dc5cb23b58d","sha1":"7e54c993639b80b58a934d18ec3d3c21288199c6","sha256":"5d85368fb1eb4d9147df8049f46041299f5dc19dead62fd76b8776b3aa4e0374","sha512":"95c9bccd8356218c674bab31359b475f739c866d1b7226d106247e281f67e81754cebfb13890e6775e91c815eff5d4988647a1231b4465124e88236d58e15d36","ssdeep":"","tlshash":"6821e7b3cf1cfe348f280c2a0b094a5ac16df39d592ab44b6c762e7052110fa2023ac7","first_seen":"2025-02-26T18:00:22.712852Z","last_seen":"2026-08-26T11:30:09.621448Z","times_seen":27,"resource_available":false,"data":null}},"time_used":1280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":748,"receive":532,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/imgn/Dark/first-active.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.616Z","timestamp":1787743776616,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/imgn/Dark/first-active.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 569\r\nlast-modified: Fri, 21 Aug 2026 01:27:05 GMT\r\netag: \"6a87a969-239\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":569,"size_decoded":909,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"8f3c8db811d21cbfce086385131357dc","sha1":"bed15b464253bbf6b0a1953f0d625eaaf35c5022","sha256":"cc3817e274035a36c9fecc80e5705076e76adfa53579ab16cfb19396e6a0990b","sha512":"584bec92ecffda97b959685eecca6e7cce19d390b5a91cc42e66f2dd34196c2a83d50a628f1d35da1978a904e813deac197425c6bb4b8fee4b527a1dabac02d2","ssdeep":"","tlshash":"6cf041c2ab690957eb897f021a5274d496b50410493a61eca324782ff069f8a6f4df4b","first_seen":"2026-08-26T10:30:22.227373Z","last_seen":"2026-08-26T11:30:09.622146Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2050,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":717,"receive":1333,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/upload/20241204/81d189158b2375eeaa85e46161b0557a.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.596Z","timestamp":1787743776596,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /upload/20241204/81d189158b2375eeaa85e46161b0557a.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 24780\r\nlast-modified: Wed, 04 Dec 2024 08:17:42 GMT\r\netag: \"67501026-60cc\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24780,"size_decoded":25123,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"5c22f8c398a6283c1674cb778e5d8ec5","sha1":"3947617a15377a46cc0ae919e152e9374db77e92","sha256":"b677af8e77bfc0f43d40d8d0020574e0ee175ac7632ddb9ec3edf015d5364195","sha512":"8be6fdf1463c05a5e7ebab8d68244e535b34acbe528ae01aefff28af11fc79ca7dfe9992de02e334c4668a657be5a90b3175a360fb6a54d2358d5d7d921ef246","ssdeep":"384:150wzwF8bzbQOqsc2DQzCu+LnWsgFY0Orexo98JII7QKrhQv2j/zK94/ziYjxdS:X9zkXy63k0dxo9S0mrK2HNE","tlshash":"26b2e11a25ba43cef44e9f76a57bbb9ccc3c2b01875315cf98abab5c4612c417a114ec","first_seen":"2025-06-30T18:07:21.156309Z","last_seen":"2026-08-26T11:30:09.623511Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1801,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":735,"receive":1066,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/upload/20230305/dcc7c3a27c4439e944ddf52816171c5f.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.598Z","timestamp":1787743776598,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /upload/20230305/dcc7c3a27c4439e944ddf52816171c5f.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 33767\r\nlast-modified: Sun, 05 Mar 2023 08:46:32 GMT\r\netag: \"640456e8-83e7\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33767,"size_decoded":34110,"mime_type":"image/png","magic":"PNG image data, 488 x 511, 8-bit/color RGBA, non-interlaced","md5":"42dcfd352acf5b243a04cd03925965cd","sha1":"e541dba9482658398df3459f0cc14dde9f3c0546","sha256":"9586ee5c076e7e847a71d6fcb99bfbcb5a4126fb3e7ce2b6b4ef19ce8b9049b8","sha512":"20ba038e18ae4d3bbbe717845a7921a2aebcfefec8a165eb3500a9d109c3d40242dcfdbf32d43019e5012fa9f6a89da451a0c9d4c847f5ceccea97db2188ac22","ssdeep":"768:5gu/XB2GsY8HL/isrInf5wTU//2Ig19u/RioOiQv6:v2GsY8r/i5nBTg19IioOid","tlshash":"e7e2e080b2dab07a7d636177ee74eba53803985448b05e7ccf2e17521e4f8388ca9f41","first_seen":"2024-08-20T10:15:14.351824Z","last_seen":"2026-08-26T11:30:09.624114Z","times_seen":31,"resource_available":false,"data":null}},"time_used":1800,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":734,"receive":1066,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/index/images/it.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.573Z","timestamp":1787743776573,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/index/images/it.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 2537\r\nlast-modified: Sat, 18 Sep 2021 13:27:54 GMT\r\netag: \"6145e95a-9e9\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2537,"size_decoded":2878,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 268x179, components 3","md5":"6233ec64f3a49d3180070f68bae78502","sha1":"bd768fc4fa4a8a1ba5e02d990bcdce07ca5995c5","sha256":"e936376a5de002470fbfbe87523c7f5127397191ff9e46cf5704c2b85439db32","sha512":"cac5783e474d9eba995d61ce8b7ec13011ba284257db071414ef91cf7e46c577d92349f86a9aca48150dcc2bcac1c02f2df3436a1c780f77c37cb5cbf92a4a5f","ssdeep":"","tlshash":"0a517147efaa47afce938d38012cc41edaee0d225613cb118a4d28f1e31da55bc921e5","first_seen":"2023-12-07T04:32:25Z","last_seen":"2026-08-26T11:30:09.624688Z","times_seen":47,"resource_available":false,"data":null}},"time_used":1290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":757,"receive":533,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/index/images/ar.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.574Z","timestamp":1787743776574,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/index/images/ar.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 2721\r\nlast-modified: Sat, 18 Sep 2021 13:27:54 GMT\r\netag: \"6145e95a-aa1\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2721,"size_decoded":3062,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 268x134, components 3","md5":"e0205f30c0fe26018d0370dc1933582c","sha1":"485c71cb9e473e70f69b98a1aa754ab80974665d","sha256":"70ac6f473e35e7785fba3ba68c15fe9c723a4b4e68fd3d770df4d49ba9800a27","sha512":"d48a8c1f01521c7a543c9cdbe0a118f4c5a8a2b923048f5a167d407d3f29be2f29fe48b16db2f4f71d2cc08fc0100b1cc40c90b7e7311e900e1e47246cb17a5f","ssdeep":"","tlshash":"cd51d7242f96a229d295b37f85870b04c2bb1fbe472022070dd7a154e937460dc6f364","first_seen":"2023-12-07T04:32:25Z","last_seen":"2026-08-26T11:30:09.625277Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":756,"receive":533,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/imgn/Dark/notice_1.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.589Z","timestamp":1787743776589,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/imgn/Dark/notice_1.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 2123\r\nlast-modified: Sat, 11 Mar 2023 15:48:50 GMT\r\netag: \"640ca2e2-84b\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2123,"size_decoded":2464,"mime_type":"image/png","magic":"PNG image data, 29 x 26, 8-bit/color RGBA, non-interlaced","md5":"3d33a2acc4a695c388156dfb3b17a2bf","sha1":"17a540d26242e1fef6f9f5bd868d83f219009341","sha256":"9425f5977651d844092cb3dea8a101a38430bc8230e2dda6395bb653b75e2741","sha512":"a1c0d67fcf5f1474de1b3c331e13d3a078047b25240ef484242cf964a359ead14610967576ca8c7ed109b196447def6bf58d5139627e1916e0bb63266f254a2e","ssdeep":"","tlshash":"0a41e949fa90bc415848f686fde1b1a716178ac4de92d880aceb881b68711f9cd0d8db","first_seen":"2025-02-26T18:00:22.732052Z","last_seen":"2026-08-26T11:30:09.625878Z","times_seen":52,"resource_available":false,"data":null}},"time_used":1808,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":742,"receive":1066,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/imgn/Dark/second-common.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.617Z","timestamp":1787743776617,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/imgn/Dark/second-common.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 2547\r\nlast-modified: Fri, 21 Aug 2026 01:23:00 GMT\r\netag: \"6a87a874-9f3\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2547,"size_decoded":2888,"mime_type":"image/png","magic":"PNG image data, 130 x 130, 8-bit/color RGBA, non-interlaced","md5":"37a64d1b0cf9ca223ae36ba825a8034b","sha1":"48e967ca193b4792a0ba30b6fc7140cc4f94b34d","sha256":"d3abd9ee1e7dac804930f7778d9fd04f92f8f8e3a09f5a1245a09ad8950b3b20","sha512":"7d699a33dd7560af51c1ccacd16294a6899e1fbbc40b6953a41def03843711c23f6154abfcf17ed9b1ff815d353b86d1c175b5acc926bafdaeb480b881a652d2","ssdeep":"","tlshash":"4d512cb2de7c24f588d65827d317b7507107060dacdae41c73c1a82bb542c1553fa4c7","first_seen":"2025-07-30T14:30:57.656165Z","last_seen":"2026-08-26T11:30:09.626423Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2049,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":716,"receive":1333,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/layui/font/iconfont.woff2?v=256","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:37.413Z","timestamp":1787743777413,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/layui/font/iconfont.woff2?v=256 HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/static/mobile/layui/css/layui.css?v=1.1.1.6\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:37 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25964\r\nlast-modified: Tue, 17 Aug 2021 08:01:00 GMT\r\netag: \"611b6cbc-656c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25964,"size_decoded":26236,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25964, version 1.0","md5":"d8c214c89e33a7bea93d656bd865e869","sha1":"c188dbfc6951b7c305940ac3a279227aeb5617f4","sha256":"bef73f87b8a3972427dcece922ed8f59d1d01c4a3fd572316efa70de9aec9c09","sha512":"0e5897c1b874a714fbab221e97717c5bd8b6c525b539a24eca76391206f931abf5cad2441743c441239ca2830f3fb33c34d207e13ee4d1eb3eeba806763f8405","ssdeep":"768:4kZIXl8feK5HavVh7VQB+l9yDbzKu1eNxECo:4kZIV8fqxQB+l03zdeNq3","tlshash":"fbc2e1c340bb8ab8b077783c6a9e96b9d51134261dde919427cc096043feb49eace701","first_seen":"2023-04-14T13:17:16Z","last_seen":"2026-08-26T11:30:09.626964Z","times_seen":1063,"resource_available":false,"data":null}},"time_used":1021,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":986,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/favicon.ico","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:39.227Z","timestamp":1787743779227,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:39 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 6131\r\nlast-modified: Sat, 21 Feb 2026 11:55:33 GMT\r\netag: \"69999d35-17f3\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6131,"size_decoded":6404,"mime_type":"image/x-icon","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"c218daa91a85af85cfea104d8844211d","sha1":"9cfb1adbc29db498651d74631a6d794e56b96425","sha256":"2631b679305f2c5db3b4e4ebee7b925c400ecd9c9655edf26007cda46c8dabaf","sha512":"71f4cc0f2e96d8750b3fb4048792c40fd1f0f834a80d605b913d3824a767b20df082cd32167979ee82a41e6713467bbd030f17afc6a4d0842a11bc2e10e4655f","ssdeep":"96:BllcHitlIxv9vk7C1+I4wWHLihk/xxxvwB9051rx22Fg6Czsa3m5DQjq/zmvUxir:iIIHUCD4waSB941rxRFK1Yzmmi8U1","tlshash":"20c18e8d7840042ca84e5c792896bb028a22cb9992c18f2cc6fd831c9d21df97d5efd9","first_seen":"2026-08-26T10:30:22.310571Z","last_seen":"2026-08-26T11:30:09.627499Z","times_seen":2,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/index/images/ru.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.571Z","timestamp":1787743776571,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/index/images/ru.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 2823\r\nlast-modified: Sat, 18 Sep 2021 13:27:54 GMT\r\netag: \"6145e95a-b07\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2823,"size_decoded":3164,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 47x47, segment length 16, baseline, precision 8, 268x179, components 3","md5":"bf6ba80ad73b1536ca1eaadcf1e6d7ee","sha1":"3655aa6557d155cb171cf75181ff885d7024561e","sha256":"1ba143597a6f749bd4bd2234bf37a6290df1adff1efe8cee9907b7233c6a8b26","sha512":"fb74f5dc8d38d00af7e869a264279a5137b482a65b011f9cdd9d3d3a59acd46fc9913cb9194feff203b147e6ff536af8eab15a16c88c78809df5bf123ef7f1d9","ssdeep":"","tlshash":"be51256eddc17f89db60ae382079a402b2c745ef8d53679c70466e04ee17ab7140ef82","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-08-26T11:30:09.628137Z","times_seen":73,"resource_available":false,"data":null}},"time_used":1291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":758,"receive":533,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/index/images/de.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.572Z","timestamp":1787743776572,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/index/images/de.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 154\r\nlast-modified: Sun, 04 Dec 2022 20:43:40 GMT\r\netag: \"638d067c-9a\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":154,"size_decoded":493,"mime_type":"image/png","magic":"PNG image data, 92 x 92, 8-bit colormap, non-interlaced","md5":"72a365a37b672f5a20da4f8f0880e857","sha1":"1d395668bd5404aa8b26e4d9586d1129798e5f21","sha256":"3da97ff56eb98940e046126ce7c727856df8722c833128141d15c640013675e6","sha512":"7b828444c21dcb95b151bca6b8d30a8466dee73019ec8096d04f85ebcacd6131480c2cf83885559d251be96da019f74a84260109760d3dc57643624281eea934","ssdeep":"","tlshash":"f1c08caeea8928a4c34aa1b21b781c349907a17ac1a49222a085981c1d1a1281486aa3","first_seen":"2024-08-20T10:15:14.338399Z","last_seen":"2026-08-26T11:30:09.628617Z","times_seen":69,"resource_available":false,"data":null}},"time_used":1290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":757,"receive":533,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/img/banner01.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.584Z","timestamp":1787743776584,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/img/banner01.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 171258\r\nlast-modified: Sun, 23 Aug 2026 07:12:45 GMT\r\netag: \"6a8a9d6d-29cfa\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":171258,"size_decoded":171603,"mime_type":"image/png","magic":"PNG image data, 690 x 300, 8-bit/color RGBA, non-interlaced","md5":"887dd4d144a828d2b417383167b027df","sha1":"9bc5e3cb7429e12af6c3679ae0391248bca47364","sha256":"87f64c8e7b89c6452cfd0d73e0b1fd606893bc462c4bbd5f43cc407cb203f207","sha512":"b8ee3fbb4afece2134606cb59289927b786774fbc033046d722c99167a66e4729f62d9d2514f81b2615e7555fdf1666c7f85d1c9cdb1e859ff406bc2eae672b1","ssdeep":"3072:tDrO52J92w/vgdGPBiVzIz3HeWUBivzaWf15gJN61XTpBnol:82Joe4dGPBiVzIzXdUBi7aWfv8sNBol","tlshash":"37f3121b0604a972b8f08b233b735a51767daee72b9f360c992074c1493b2755df60ee","first_seen":"2026-08-26T10:30:22.26131Z","last_seen":"2026-08-26T11:30:09.629141Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":747,"receive":1651,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/upload/20210908/259232d0bde771fc930bef7532f3e086.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.611Z","timestamp":1787743776611,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /upload/20210908/259232d0bde771fc930bef7532f3e086.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 3324\r\nlast-modified: Wed, 08 Sep 2021 13:32:38 GMT\r\netag: \"6138bb76-cfc\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3324,"size_decoded":3665,"mime_type":"image/png","magic":"PNG image data, 238 x 250, 8-bit colormap, non-interlaced","md5":"30724277cb16d714c2634075aa6149db","sha1":"93a46b50196b0f53c065a0ee26e97807815d182b","sha256":"39d5f84e3ca9a8f532d434a27be910e40ceb526bd86ef08e1b7017ba846370c7","sha512":"eb3da0d961dad39e8b0bfa7814efaca012ef560e1b3c1f9764f99b69979b592d3a40a1c98b6834f02ba6177ce328e386a131bfd7552da43ad8d15c1c536e910d","ssdeep":"","tlshash":"a0614bc3986822bc8784a4563418e6bce8d4f8d373e8ee760b8bd9556138083d1d8e5d","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-08-26T11:30:09.629753Z","times_seen":66,"resource_available":false,"data":null}},"time_used":2054,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":721,"receive":1333,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/index/images/po.jpg","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.564Z","timestamp":1787743776564,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/index/images/po.jpg HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 73295\r\nlast-modified: Mon, 16 Jun 2025 07:47:00 GMT\r\netag: \"684fcbf4-11e4f\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73295,"size_decoded":73640,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS2 Windows, datetime=2025:06:08 08:41:58], progressive, precision 8, 1280x794, components 3","md5":"cb1a31af857ca0ed72749e269b81eb66","sha1":"4c1906f8c55b0ed17ad294fb637993f7c11d9902","sha256":"d8165a5b7ffcd0fea9ffb4c62df0b21a447811e84f8a56dfc99c2f829dc5c4c4","sha512":"1a0e5476dede7c680aaaf1a58f191c3e821de5f1ff1b9323cf8d5fdf198ccb4835eba03fc5231d5b3e408ba13885505d07a2e2d0f8a5b4e1c348170b3e04d800","ssdeep":"768:UfN7N6mmP5+Oi/OtDIdIbaz4dOUtoOI27EDc483+ww3lkTMnSnSHeY6ItmHZ3Fmn:AB6z59iGIFmOUtd/7hOww3hSQx6dw3","tlshash":"8663d0224f307c81ead31d704a90c58af552294fe6ab4c93794e683a3fb6fc67c5e419","first_seen":"2026-08-26T10:30:22.214872Z","last_seen":"2026-08-26T11:30:09.630281Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":765,"receive":1338,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/img/no_user.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.583Z","timestamp":1787743776583,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/img/no_user.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 74635\r\nlast-modified: Mon, 17 Aug 2026 15:10:18 GMT\r\netag: \"6a83245a-1238b\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74635,"size_decoded":74979,"mime_type":"image/png","magic":"PNG image data, 678 x 961, 8-bit/color RGBA, non-interlaced","md5":"a5751dcc20b7ca120136bf119d411f1e","sha1":"0dbc0105cfcab061215c0a24e1f8177febe86e72","sha256":"91ecbb10cdb327f3314791635293a11fa1866d2a6da7f3ec85a0da5294417a88","sha512":"fa3080500b726ad8a51c0b9f3e3033a74a51c8cbfb3520b230374fda03a83371ab49eb8b17f61ec2c5711e39d61003c7697971e9160dc07b6adb3a9d713b36de","ssdeep":"1536:JLaIOC1Ach+dFSReJ02JHc9NEYQJDFl0XeOBdmLTX1Y:JLaHch+PSqO9NRCEXd","tlshash":"e67302c925eb4f0cfa581abcfff279b54485452308908f76630c52c4ae9d9a6b548d2e","first_seen":"2026-08-26T10:30:22.190549Z","last_seen":"2026-08-26T11:30:09.630854Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2083,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":747,"receive":1336,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/imgn/Dark/third-common.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.618Z","timestamp":1787743776618,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/imgn/Dark/third-common.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 3346\r\nlast-modified: Fri, 21 Aug 2026 01:23:00 GMT\r\netag: \"6a87a874-d12\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3346,"size_decoded":3687,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"5d788bb577fa8d3260e97216d2fe1344","sha1":"d8c01f4b3e9def71911de474e932db9b81da64b0","sha256":"6ff8105fc78ff0b3f6a4baccb66558458536c08f0b6bcbeb305849db901d8a13","sha512":"dd92848a9808646b44b3129d910df9e978dcd90af46eaae8abb84efba3adc8f02a8c9563135efa58ee9a2a69928c81f787bd09c502103c35f7902967b2d838b0","ssdeep":"","tlshash":"046129e60ba79e55c956ed1f93208407cf3946343986a72ccc6718bb6473b01a0b23e2","first_seen":"2026-08-26T10:30:22.289455Z","last_seen":"2026-08-26T11:30:09.631432Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2048,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":715,"receive":1333,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/plugs/layui-v2.5.6/lay/modules/form.js","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:38.468Z","timestamp":1787743778468,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/plugs/layui-v2.5.6/lay/modules/form.js HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Aug 2021 08:56:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"610904aa-2577\"\r\nexpires: Wed, 26 Aug 2026 23:29:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9591,"size_decoded":4520,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9284)","md5":"a55a0aaf3d84264e3373f58f347a18fb","sha1":"921760fdababb5639192c73866c1b3b5f2ca0644","sha256":"03315f4a8fa90d66f3115d686bcb50d9356136607f92edbc9c59d4f27090a0f3","sha512":"7295dd0874606a2605b16a49ca696bfe305e16d769a7d037cfba0e074591e4def8dea94e4157cbd7c52e85e8de4ae496155c0af6d21b00943ba04ab6164edc13","ssdeep":"192:7U7m+EjWnSTmyANS4B7R6EoHv9w5iaHe16GL:7U7msqmHBV6LP9yiaH6n","tlshash":"1312a319715135e2367b60a1405f981ba0bf4635ab09c8947093d4f92ebec9493f3faf","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-08-26T11:30:09.632003Z","times_seen":127,"resource_available":true,"data":null}},"time_used":740,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":740,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/index/images/sp.jpg","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.563Z","timestamp":1787743776563,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/index/images/sp.jpg HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 54980\r\nlast-modified: Mon, 16 Jun 2025 07:47:00 GMT\r\netag: \"684fcbf4-d6c4\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54980,"size_decoded":55324,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS2 Windows, datetime=2025:06:08 09:33:55], progressive, precision 8, 1280x794, components 3","md5":"b14265d9edd75fb3dad96cc3fb758b58","sha1":"017c34cf0fac65bdf476ff943f069fe1e93d3b26","sha256":"e86793677011b8f62ffa7a89c01f103f3df50a4640b28af7f3351b1f2284cd67","sha512":"707e5800c550835f20dfa63d5da82281fa347b51e9a7b1efe1ca3a3de57d407251ba934db7fb4a92110bc62894c568f458e031fd4f23c0575bb7c356be654268","ssdeep":"768:lNuaSuaoJygesYyIjiMADzV03iYDXH5G27JvJkgo2zskDvVHS:TJygBEjiMADzV03LJ7vdooBvVHS","tlshash":"ef339f601e599e51d8d293749df8ea0b91518b5be1c3ac41be1e5f623f21fc20ffa212","first_seen":"2026-08-26T10:30:22.212479Z","last_seen":"2026-08-26T11:30:09.632426Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1035,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":766,"receive":269,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/img/banner03.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.586Z","timestamp":1787743776586,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/img/banner03.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 160014\r\nlast-modified: Sun, 23 Aug 2026 07:12:45 GMT\r\netag: \"6a8a9d6d-2710e\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160014,"size_decoded":160359,"mime_type":"image/png","magic":"PNG image data, 690 x 300, 8-bit/color RGBA, non-interlaced","md5":"7b3a95d8de26569ad0003bdb1e703330","sha1":"2e5a94dd617767b36efb0a03ba1732d3238e7ec2","sha256":"c3d452307d34c1ae7f6959853e4a3ddfe9136901d882cf168b7f8553ec1c6806","sha512":"ec109c1bbbc148e3878f0e3c254c403fa2a29a132e97cdaad867630b33f413b2d4cfebb0bff46aac6e154e939dcf0af27a97eca314ff80950d8e8fb86ce492e2","ssdeep":"3072:rXS3tIw1vXQ78YAtNAABXsjzGYIUFnF2KtGo/+QiCxCTEmrofxgcPlvMx/K:rOx1vXGHKsjzGnUFgXQh4ENmcPh+/K","tlshash":"4cf3131774958ef610443b2617feee49f7bf8d91981ac00e188736674a3775b28a33d8","first_seen":"2026-08-26T10:30:22.207285Z","last_seen":"2026-08-26T11:30:09.633026Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":745,"receive":1651,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/upload/20210903/4d23f281f001c087951c9c57d80dd92b.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.599Z","timestamp":1787743776599,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /upload/20210903/4d23f281f001c087951c9c57d80dd92b.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 7932\r\nlast-modified: Fri, 03 Sep 2021 08:42:52 GMT\r\netag: \"6131e00c-1efc\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7932,"size_decoded":8274,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"954ec3d9ebe1b76f4741eb6b1af54a7e","sha1":"add6dd8bbe3612b99b2931b518f9a14f8e981c36","sha256":"f073eabacf9aae474525dd0f2176e1dbe8ee8af799188aea2c1b4f5390f0ddb7","sha512":"4afc07a6c9995d1ca94beef54dcb825e1fa9a5e1639c5eb47207b6b6a23fe800bd2f481d725ce14fa69322da6caa8ceb6afde467fad19288d9665f7e4b34a388","ssdeep":"192:vIbwMz78FJPQGDYUc55peHqPt2XWB79k0goLp5JWf:gbwMzonPQ8e7EU7dfJ0","tlshash":"d8f1b01acacec79bcb19c072f2c5f61ddf5a04581c054784da59cf16077fe9c29a864a","first_seen":"2023-05-04T02:59:55Z","last_seen":"2026-08-26T11:30:09.633565Z","times_seen":187,"resource_available":false,"data":null}},"time_used":1799,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":733,"receive":1066,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/upload/20210908/9cff45c6f19606e24322bdc360a3f4fa.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.603Z","timestamp":1787743776603,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /upload/20210908/9cff45c6f19606e24322bdc360a3f4fa.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 69758\r\nlast-modified: Tue, 07 Sep 2021 16:28:34 GMT\r\netag: \"61379332-1107e\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69758,"size_decoded":70102,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"0df4aab369a6c36d83c82135515ef396","sha1":"97bdb7b344ebdca8f4ae31544508e1d1f9f67d2a","sha256":"dfffb03e0c61454ce9e192436fbfaecfbf3c64a5ba0090aaf603a30a71b1af54","sha512":"702968522498e8a124eb0a8db4ed14eb0ac7489c3c616100293c1ff6e740111cdf0236c7770c8974d5f9e68b4965dc031bcfab82d54dfbdae6bc328948d24dd8","ssdeep":"1536:7QVd1/t5rOup+XgFWGpg47y6By/xkgpvehUVdrP4PrGGmbLkQm1w0oz:yd/5p+XgFY47vBYjp7rPQGGYk5Iz","tlshash":"1e6312a8b3fc665f8ff1a44a70c28d50ea1954773474264ce97d93b29e7ce2392142f8","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-08-26T11:30:09.634067Z","times_seen":1136,"resource_available":false,"data":null}},"time_used":2378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":729,"receive":1649,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/upload/20210908/851d2468d967e3d35bfec8e7e12dff18.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.614Z","timestamp":1787743776614,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /upload/20210908/851d2468d967e3d35bfec8e7e12dff18.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 14881\r\nlast-modified: Wed, 08 Sep 2021 13:39:10 GMT\r\netag: \"6138bcfe-3a21\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14881,"size_decoded":15224,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit colormap, non-interlaced","md5":"69be70e170d43397fd1fdd93316b56a4","sha1":"3a59d13559293f7c82884cc096a0a2e44556d979","sha256":"52398d735f894782e3387013587a9e8aa14423f541f3d9a131ca440f1d30b886","sha512":"422ef75b86bbbb21ba98f09fdd00c6aaf70ab3c7b30ddb87332bf1e1fbe87ad5c00f851fc88ec53cd20337483ac1169a29a17db4989cae333aeca1cce447eb13","ssdeep":"384:2TQWUv1by4/SxzUDjiSKf//FXKFkscSDWSZPQBF10/fH:Zv1by4/S5UDjivFFn6WSeBF10HH","tlshash":"1962c07a2b24b82fb9964b5d29f4a23f45544dc378786bac2fc074283376978636d2c1","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-08-26T11:30:09.634521Z","times_seen":32,"resource_available":false,"data":null}},"time_used":2052,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":719,"receive":1333,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/imgn/bar-right.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:37.371Z","timestamp":1787743777371,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/imgn/bar-right.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/static/mobile/css/mobile.css?v=1.1.1.6\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 2064\r\nlast-modified: Fri, 10 Mar 2023 01:41:20 GMT\r\netag: \"640a8ac0-810\"\r\nexpires: Fri, 25 Sep 2026 11:29:37 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2064,"size_decoded":2405,"mime_type":"image/png","magic":"PNG image data, 210 x 16, 8-bit/color RGBA, non-interlaced","md5":"6d506e21ad1a31db63ac286259d8f5bc","sha1":"6ddca17c5680b11eb52c2c21fdbead826b5112e5","sha256":"da85579c28fbeb70f1bf970210cfb2f8026574f3530ff6e452921b1df0e9f2b3","sha512":"d7cf62f82c6dfa2ddab288e85dc1858336ff238b6860434c9660ec7dbe6372eaf6db94187abc36d66806bd0aff77e3ad4b8d501e72825a1326e4d7d99a6bba0c","ssdeep":"","tlshash":"0441810bf9457d112a4dfb066af790676b2387d09a81a5c6bcd95d07acb20fccc0c2ca","first_seen":"2025-02-26T18:00:22.731167Z","last_seen":"2026-08-26T11:30:09.634977Z","times_seen":50,"resource_available":false,"data":null}},"time_used":1294,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1028,"receive":266,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/js/i5scroll.js","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.552Z","timestamp":1787743776552,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/js/i5scroll.js HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 25 Aug 2021 06:40:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6125e5d2-6f3\"\r\nexpires: Wed, 26 Aug 2026 23:29:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1779,"size_decoded":1301,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (762)","md5":"229ae241044a0a16861b8583b4435079","sha1":"8051376b7ff4f9eb4c40389985ceed910bd8a868","sha256":"00323fb404aa8d1151ba1d3842ace6e1b7dfd723faa7b0402c20bcbd7d93e59a","sha512":"edafd940bd292208de80d57343ef7dba5360bc21f5dd691f24b13d167b15b3f5529bae2735c1d2c67fb23de10ea4b907f7adf371db7d150724a2ee5d1ef82cc5","ssdeep":"","tlshash":"cc3167c47000b636859620b271ab56d9f3398ad7346d881174beb189bd1cdb50d2fda4","first_seen":"2025-02-26T18:00:22.707066Z","last_seen":"2026-08-26T11:30:09.635442Z","times_seen":52,"resource_available":true,"data":null}},"time_used":776,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":776,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/index/images/jp.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.569Z","timestamp":1787743776569,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/index/images/jp.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 7623\r\nlast-modified: Sat, 18 Sep 2021 17:20:06 GMT\r\netag: \"61461fc6-1dc7\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7623,"size_decoded":7965,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 47x47, segment length 16, baseline, precision 8, 268x179, components 3","md5":"2c1af6592dad54dc0ca627bfa876b424","sha1":"b6d122cfae18620c59dc31c52df8fa79ac2973e3","sha256":"3fc7b561aa8629c9e0a7d904a0f75e80bcb47268a549e1bd44705bb6518aea22","sha512":"bbd01ad1bbd449cb41a45ab4e20747562bcfe75c3505a93f01a9d20d6cf01d73970c4bd8cea9518351a716af6165280335bf7b1119630bdad0cc0e0e4635e399","ssdeep":"192:BoVwrqC8KG3v7HbONd7sqi2KiD28OCha5aq:BZlwj7G/KctOF","tlshash":"6bf19e7799370b91ccafe335242e939ccf44f00217499f24c588adc2d8b2ae9db75808","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-08-26T11:30:09.635942Z","times_seen":54,"resource_available":false,"data":null}},"time_used":1293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":760,"receive":533,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/imgn/icon_night.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.576Z","timestamp":1787743776576,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/imgn/icon_night.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 2837\r\nlast-modified: Mon, 27 Oct 2025 10:33:33 GMT\r\netag: \"68ff4a7d-b15\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2837,"size_decoded":3178,"mime_type":"image/png","magic":"PNG image data, 92 x 45, 8-bit/color RGBA, non-interlaced","md5":"992438573332abf8326c5d3beda6cbf5","sha1":"7d1d9f890441fc6f035e81f55bfdec0890e0e085","sha256":"1fd997305fdbb50e6b8c10e34520d0e20fa6c90b37b52eca55d98114597fbcc0","sha512":"3b096ec5d6cfdfb7acdd77bfad48502c0cdbdc2b930c888847e35d22e6353f38fe70b874d9b29eb74930c312bd75a64d3bf036da67c38c79116773c84cb7331d","ssdeep":"","tlshash":"cf514b0adc931c9467a868e755e2817aa8abc450aff0385f98894c3f047a3b64f4f5cd","first_seen":"2025-02-26T18:00:22.734141Z","last_seen":"2026-08-26T11:30:09.636387Z","times_seen":45,"resource_available":false,"data":null}},"time_used":1287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":754,"receive":533,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/apple-touch-icon-180x180.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:39.226Z","timestamp":1787743779226,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /apple-touch-icon-180x180.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 18665\r\nlast-modified: Mon, 12 Jan 2026 05:09:03 GMT\r\netag: \"696481ef-48e9\"\r\nexpires: Fri, 25 Sep 2026 11:29:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18665,"size_decoded":19008,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"b47f578551790c07a422c587ec7379dd","sha1":"500c02a6c3aa14e221fd32fccedfe4a88ef041e9","sha256":"63fc6824e1e5b72edbd350afbc962b48355a1814acacf015b58acdc8977fccbe","sha512":"2edbbd471452b16154cb4e3721409d729837c0011779498adef63a195f186473c3768658b080b6b7bc83cccb5c1087785d946d40bb2ee87facb865d0fc3e865a","ssdeep":"384:l50w19LbfgIn0+0Fg+KkIhrKvjhGVm9Zp/ZWL51Yg5i/D+:Hf9fh0+Og+jIIjf9fMJ5i/K","tlshash":"da82d05c4546b7b1b09d0bf91a7764888c59c478c6e40d5dba6ab80e12beca2af094f2","first_seen":"2026-08-26T10:30:22.302113Z","last_seen":"2026-08-26T11:30:09.636866Z","times_seen":2,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-26T11:29:34.860Z","timestamp":1787743774860,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: lang=ko-kr; path=/\nPHPSESSID=738619d947da54bcab9abc01192ac058; path=/\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"lang","value":"ko-kr","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"lang=ko-kr; path=/"},{"name":"PHPSESSID","value":"738619d947da54bcab9abc01192ac058","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=738619d947da54bcab9abc01192ac058; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46552,"size_decoded":11821,"mime_type":"text/html; charset=utf-8","magic":"HTML document text HTML document, Unicode text, UTF-8 text, with very long lines (1061)","md5":"0f1eeffa295f1e131e8a90b14023ae9f","sha1":"7a93116cbf9c8398c7b0e8d840bb3a7c5d771bf4","sha256":"a997595fd94fd0f5d3992395e039b0068c0a683bb2967d2124d26101ed5071f3","sha512":"d3ad278ed5c5abfc6628e52ec449ee9b43831f7ea9c3a6f050073b2eaf56b53080f7d0b922c169fc330a3afbfda8ed74cd76ca348f897a31616c9b3ee013a989","ssdeep":"768:kcEll7o4oVokoHMoIoYozoAotoyoYoHDcqfqjwZrd231w4zAozssGYn0:QZFDcqfqF31w4zAan0","tlshash":"eb23b80092fd04236033a0c7eea66f29b0dbd537d36a4448f3fe1aa76f87d186d1655a","first_seen":"2026-08-26T11:30:09.637475Z","last_seen":"2026-08-26T11:30:09.637475Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1456,"timings":{"blocked":0,"dns":114,"connect":267,"send":0,"wait":534,"receive":0,"ssl":540},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/layui/css/layui.css?v=1.1.1.6","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.521Z","timestamp":1787743776521,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/layui/css/layui.css?v=1.1.1.6 HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 18 Nov 2021 07:39:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6196032a-1224e\"\r\nexpires: Wed, 26 Aug 2026 23:29:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74318,"size_decoded":16916,"mime_type":"text/css","magic":"ASCII text, with very long lines (65504)","md5":"6490be49e910a3e2ccac0cd63ac5be57","sha1":"bc1b9e3070e5e051a9132a27f9a5ac494d4ded1e","sha256":"4d891687db5cd12b3f5fb777a151efcdc0a94bae9e4231d719d0b3f7716f8f2b","sha512":"09083b4fd7802d880b94aa6fe674f8c5ec5b7fb63b550251fa2ae04b622d6164e1551998e4d7c8aaa152e303da70b9dce2c94747655a32b7000fbad8c11efc9b","ssdeep":"768:4/nEWwcY/8zYbRzycl81JpZlwyQaIYKsR3zdVhlu9Tr1BpRBtfKa6G6nr4wdV7np:tWwcY/8fG68wjHmavq8","tlshash":"59739632e6012ca5762bd215b1dcbdfda0789512ea634e6df3823b1b87848471077f6b","first_seen":"2023-09-23T10:36:02Z","last_seen":"2026-08-26T11:30:09.638446Z","times_seen":58,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/js/iosapp.js","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.546Z","timestamp":1787743776546,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/js/iosapp.js HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 17 Nov 2021 13:32:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"61950462-806\"\r\nexpires: Wed, 26 Aug 2026 23:29:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2054,"size_decoded":1247,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CR line terminators","md5":"7c2f59781d7868eff1bed99be0478af8","sha1":"d8bd7c15428c99cdbb38795df05438471953ba6e","sha256":"b16d7795b265d380540612bfed9739a90fb46aade4228c670fc8d17abce9adaf","sha512":"2e979baf0d2f94e91eef9665df48555ab4dcf4e7b8bc149465ec25d9e09a07dd625edf0750a6f9d7e47f64162f8099663c7986c4a4840948b177237581b4ff6b","ssdeep":"","tlshash":"c94132999a9d683919d3b42d1a3fb15c72333aa5a4428110bc0fbf943b34a4a162db98","first_seen":"2023-09-23T10:36:02Z","last_seen":"2026-08-26T11:30:09.638945Z","times_seen":58,"resource_available":true,"data":null}},"time_used":782,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":782,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/imgn/Dark/user_withdraw.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.578Z","timestamp":1787743776578,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/imgn/Dark/user_withdraw.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 501\r\nlast-modified: Sun, 19 Feb 2023 16:38:48 GMT\r\netag: \"63f25098-1f5\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":501,"size_decoded":841,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"bd3e92965ba7cbf7eeb81c4dab73632a","sha1":"3fbc1882fbcaf51e8dcec54c16272cb8676dc545","sha256":"b0af5a11a40065971fcf2450e55d329970471bb1c65ba33c3aede1306027adc4","sha512":"9177a37b060423156841b3f4541fba27a9dd678645ccf3078155e92852e5de23d77d239f4903919d92add9dbd37596fa63144643b4b9d94341d7e36af6fffc2c","ssdeep":"","tlshash":"96f05c83bb38bc73ccc09f304cf61ed3c27643e08b6186490e21ee38b008aa0a0e0705","first_seen":"2025-02-26T18:00:22.713677Z","last_seen":"2026-08-26T11:30:09.639467Z","times_seen":54,"resource_available":false,"data":null}},"time_used":1285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":753,"receive":532,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/imgn/Dark/coinwin_ico.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.580Z","timestamp":1787743776580,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/imgn/Dark/coinwin_ico.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 917\r\nlast-modified: Sun, 19 Feb 2023 16:24:56 GMT\r\netag: \"63f24d58-395\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":917,"size_decoded":1257,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"09037d0ba7f00c7c7d8efd6d20d77726","sha1":"f1b2a759dc4eb7031009577d511747a71023723c","sha256":"38e06272f240d457194165df500163bd43ae71ac205233c22d7c1d2bdb70f38e","sha512":"f6b94afc5a378c1a2b896cfed11472f76548d81dc1e2dc2974596a1e817b9131437b0a626a391a9f68dd6fae1a8070e7fa0adee93832ac8b1751b857cca67517","ssdeep":"","tlshash":"9d11b79313e083eec573167e1be36d459476358c4c52662c500991ec5201c3320623a2","first_seen":"2025-02-26T18:00:22.716923Z","last_seen":"2026-08-26T11:30:09.640396Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":751,"receive":532,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/upload/20210903/de2ad50b4fd1c5cbc1ddea2bba258958.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.594Z","timestamp":1787743776594,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /upload/20210903/de2ad50b4fd1c5cbc1ddea2bba258958.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 105551\r\nlast-modified: Fri, 03 Sep 2021 08:41:26 GMT\r\netag: \"6131dfb6-19c4f\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":105551,"size_decoded":105896,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"bd8a66a284e28bc271f6d0209f2de868","sha1":"3dc24b1050b2323a1eab7e5a1c22f468bf2d2168","sha256":"e0d0a66b7a841e058be92f18728cfb51c998058845bc485bb0415faaee7762e9","sha512":"758e97ccc449483036b4d683727a18c67b0295c84a1b011fe8c9a98f85170811e8fce035994c1835fa8e56a804fb54cb3834f37dddb4593b9d306ac88b9829f1","ssdeep":"3072:1prX+roURTat7D8nCXjto/jN1HXIZ28fj3qOdAM:1pSroAatMnko/j/Y0e2fM","tlshash":"50a302646d9d1dd1ccb3f6346e3b8ecd3b4940a93956dc870872fc6dbe5a402ea4a05c","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-08-26T11:30:09.64089Z","times_seen":67,"resource_available":false,"data":null}},"time_used":2387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":737,"receive":1650,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/upload/20230305/8a663dff5ad59416d15516ad982e7c4f.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.602Z","timestamp":1787743776602,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /upload/20230305/8a663dff5ad59416d15516ad982e7c4f.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 51520\r\nlast-modified: Sun, 05 Mar 2023 08:48:26 GMT\r\netag: \"6404575a-c940\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51520,"size_decoded":51863,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"e95fe64f46fc8eaa7930f08f3a2f93bb","sha1":"f72d29d2b9728b6abde167d4e9b55b5877ef02c8","sha256":"8f5732f072f72209bf01036aa35f2a889f7a5ba73e103a501e9aa09efcfee976","sha512":"13e6b240b74c23741efcaf7e0aca786c308fb89787499bf42310c3c0b24f5f31ec936a4dc0c2f605b8dc2030c0fc5e8fab6110df79a496fc2f4b9f9abf45af83","ssdeep":"1536:cisO6La7ALrrHwxQtvUjJLUoY5+l3MqMZptFjkoR:qCAfjwiGJQzQ3ML","tlshash":"f633e11addf41620de54360ca7fbe492e1c062ab45169c3d67d887bc2c17062e2f6e2e","first_seen":"2024-08-20T10:15:14.35668Z","last_seen":"2026-08-26T11:30:09.641526Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1797,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":730,"receive":1067,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/imgn/Dark/five-common.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.620Z","timestamp":1787743776620,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/imgn/Dark/five-common.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 591\r\nlast-modified: Fri, 21 Aug 2026 01:23:01 GMT\r\netag: \"6a87a875-24f\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":591,"size_decoded":931,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"bd3d2902308fe5663a7607d9c8c98dc6","sha1":"523aae23bb03eae30012c18addffc2398b94adbd","sha256":"f2af71e01d4db50b8b225039ce807a09cccf3ad075fc5ef0c0975e3bcc1ad7b8","sha512":"637a3ebee413225cd16ec6710c0b2458c25d95ad88a6d001d62a75ad9c27d0c48a63d04c80665064b1e3d0bf8da99848b96533ee1c6cac3b535249e1ea1908d3","ssdeep":"","tlshash":"11f062d663342404a21e85641c36305cf9bfa12007848cb840f422a10b75c7c3c3cd89","first_seen":"2026-08-26T10:30:22.280964Z","last_seen":"2026-08-26T11:30:09.642042Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2046,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":713,"receive":1333,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/lang/ko-kr.js?v=1.1.1.6","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.530Z","timestamp":1787743776530,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/lang/ko-kr.js?v=1.1.1.6 HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 18 Sep 2021 13:45:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6145ed92-499\"\r\nexpires: Wed, 26 Aug 2026 23:29:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1177,"size_decoded":938,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"263e38f18f7d50140cbaee979fdd6ee2","sha1":"6f45de9fa3df5f7d42622688baf9d1f92532ad11","sha256":"6a6274e684fbf7ce78e0fb5cedfd4ed978f177ce1e6a1dcbe0f69856cab48a8a","sha512":"fe6e45cb67dcb2e71056ff8b16df6d8b842de16ffa5c28af827ed6b8b2f7164211d84c0bdb6379cd88be819d4dba3ac1420ced28fb5049ba371dc7b6177fbcaf","ssdeep":"","tlshash":"0c211ed626af82e414fb044a2a48b0d8e7c883eb2757104ff5bc4c0c8fb5f8589c64b4","first_seen":"2026-08-26T10:30:22.271733Z","last_seen":"2026-08-26T11:30:09.642626Z","times_seen":2,"resource_available":true,"data":null}},"time_used":580,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":580,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/img/banner02.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.585Z","timestamp":1787743776585,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/img/banner02.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 231873\r\nlast-modified: Sun, 23 Aug 2026 07:12:46 GMT\r\netag: \"6a8a9d6e-389c1\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":231873,"size_decoded":232218,"mime_type":"image/png","magic":"PNG image data, 690 x 300, 8-bit/color RGBA, non-interlaced","md5":"f34298fc09cb339e83212126657c4b54","sha1":"0d02c6aa75014a5abf604c7c86ec99a2a58866e7","sha256":"1c92a4ec168731f722a0bd5893f916b2924d41d89deedc18c97112900c6d5941","sha512":"ad00c4b2017040ce0b0697b923b2e5d0ba56bc39c4d09cedc6f5851b34c3e929a1df2049b34d8d16ac3d625e65f59c329ea05342ace45348ae8a2458518d21c9","ssdeep":"6144:Pkf+wJfORm1AxWMpUeQgGvzT+l2abQ8nuy7/dML:ET1WfDQgGHl56ueg","tlshash":"9f3423da1c31097159ae16360adbeb0e4f234a9398c662b2b3d8ad1411bd49f9ff4cd4","first_seen":"2026-08-26T10:30:22.193445Z","last_seen":"2026-08-26T11:30:09.643346Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2623,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":746,"receive":1877,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/upload/20210903/2e14ef300eb04ae7152f17bae563ea0c.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.595Z","timestamp":1787743776595,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /upload/20210903/2e14ef300eb04ae7152f17bae563ea0c.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 34526\r\nlast-modified: Sun, 05 Mar 2023 08:43:50 GMT\r\netag: \"64045646-86de\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34526,"size_decoded":34869,"mime_type":"image/png","magic":"PNG image data, 489 x 510, 8-bit/color RGBA, non-interlaced","md5":"3824c957aedd596398faf70639d228ed","sha1":"0f2876350b3676c6db04855898895ccfb5f3d1a0","sha256":"a53fbfa102b6f2f57c203e3d26c0652fc1b77c35a42a5183231163c5f47cac49","sha512":"5e0cd9fdc6ed03699f1b70efd4f65150252f456d62ee407a44262da3ad123bbb0bb6cd0b7200a43f35a007db659611d81eb7328a4a11c58b9ce0023127636398","ssdeep":"768:ihQPhiUPe2aQ87s6AASsz5cZrhLYBIXcp05sWIDcmf28:iBUP1aQ8/5cHY8cp0xIXO8","tlshash":"71f2d066c5e41c4b8d4a918241cf44e0c91b7783da2c8fd7be0a7ac76de9d3515ba308","first_seen":"2024-08-20T10:15:14.350734Z","last_seen":"2026-08-26T11:30:09.643961Z","times_seen":39,"resource_available":false,"data":null}},"time_used":1802,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":736,"receive":1066,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/mobile/member/getError.html","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:37.653Z","timestamp":1787743777653,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /mobile/member/getError.html HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: lang=ko-kr; path=/\nPHPSESSID=738619d947da54bcab9abc01192ac058; path=/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"lang","value":"ko-kr","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"lang=ko-kr; path=/"},{"name":"PHPSESSID","value":"738619d947da54bcab9abc01192ac058","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=738619d947da54bcab9abc01192ac058; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":103,"size_decoded":365,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6cfcd9d3e55164f634105592c5987c98","sha1":"718b7e257f4f73f81b544035e96e32d82f960ffe","sha256":"427abdaa0d8fc31382aa69f2ae82af610736e3a07a67d92bb15c49a6a1c4a0cf","sha512":"d18a2c12d7f1a08b0e5568fbe09ddb5839fec1617eb0e516e2cc0a2832b7eaee14c7ecedfc3e5abd758763c9557aec5ef813c0839f0d0da9786d08c0eed620b5","ssdeep":"","tlshash":"f2b0121d203ef04b845a1e8c44f5841892dc91d40907ce8aef6cffb84a552d63254070","first_seen":"2026-08-26T10:30:22.300029Z","last_seen":"2026-08-26T11:30:09.644614Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1555,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/plugs/layui-v2.5.6/lay/modules/element.js","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:38.445Z","timestamp":1787743778445,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/plugs/layui-v2.5.6/lay/modules/element.js HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 May 2021 05:44:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b477be-1c60\"\r\nexpires: Wed, 26 Aug 2026 23:29:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7264,"size_decoded":3110,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7203)","md5":"784379625afe1516f69075a78007e7bf","sha1":"4eca1e2bd313d46ddcf113095074da797b145aa6","sha256":"763c30063a00b2698ab3aa17948b5008a33d477fd7dfd45f11f3d4a49e29b73c","sha512":"f08d8e5c3c091ca2a0f00109cc55dcf9a7ce055996f1fd2d6cc2f7b414e533c0b8356fb5bd3ec7eea1692e5aa56d2be0465465f60479f3eb2afb783cec3ca87a","ssdeep":"192:nZKp8KKtRtwFC2q6IsTPJB91RGRtX9uEUn0Gs:nZltcF+6IsTP5ONN","tlshash":"bfe19518b05236f73197b5d143bfa21da03f4636e70246ac3066d4ba09bbd891673f9b","first_seen":"2023-03-07T13:00:48Z","last_seen":"2026-08-26T11:30:09.645367Z","times_seen":294,"resource_available":true,"data":null}},"time_used":763,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":763,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/index/images/logo.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.600Z","timestamp":1787743776600,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/index/images/logo.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 1575\r\nlast-modified: Fri, 10 Mar 2023 02:15:32 GMT\r\netag: \"640a92c4-627\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1575,"size_decoded":1916,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"d15646117985757e82b4ffbeb0d25c3e","sha1":"ef2bfabb28ced13472b02b168cee0780b21260f6","sha256":"442c59cdab36ef621ddc66ef35adb3b084e2e74dd938215b24c749501d5c750d","sha512":"4cbf635bdeba05070c36265297ec1fd55019e5c1b6e38ec78220ed21ac537bfd3ef8ad5ecd4ac5de1d45e90c45fc917b5ad9a8a5808007ff6d0eb940a6db43d7","ssdeep":"","tlshash":"7531758bbd512412465af79225e3903b9f360c90cad0f8f1e5e68c271b700ab0d5d5db","first_seen":"2025-03-18T10:56:07.795038Z","last_seen":"2026-08-26T11:30:09.645909Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1798,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":732,"receive":1066,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/imgn/Dark/user-center.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.560Z","timestamp":1787743776560,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/imgn/Dark/user-center.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 180\r\nlast-modified: Sat, 22 Aug 2026 08:18:42 GMT\r\netag: \"6a895b62-b4\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":180,"size_decoded":519,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"578e602285117d1d73cb11f3bdc9fe64","sha1":"276551e436d85306f9cdcb2e329804435693f710","sha256":"bc25f3bc7fb1c444eeaa42a209739fd9b781c9c3ce5dad442a094896b2522c54","sha512":"9ca919191259a83bf0797d25b98a077350d19e4aeedbc57acbb79dcefcd9e00fcb8c753dd197ed700b7a934916dbbd9dcaa7f031b42fa92aeb2f510b64f30d18","ssdeep":"","tlshash":"bac0c0e700c7cc2fc220503bc3160060ecf382004038c1001620b5213578824f5cd58b","first_seen":"2026-08-26T10:30:22.273219Z","last_seen":"2026-08-26T11:30:09.646456Z","times_seen":2,"resource_available":false,"data":null}},"time_used":818,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":769,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/imgn/Dark/seconds_ico.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.581Z","timestamp":1787743776581,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/imgn/Dark/seconds_ico.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 991\r\nlast-modified: Sun, 19 Feb 2023 16:24:58 GMT\r\netag: \"63f24d5a-3df\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":991,"size_decoded":1331,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"eb5a8645a22737bc2a96e6fcc99a2be0","sha1":"ddc67712433fda0e165540b3a541b2737f88ef73","sha256":"4b03282e4b7af9c6e0be37c2ed9c984558de3a5d1ea1be9ce76aae92177a4c58","sha512":"aa97e017f03fbbd4385ec3c0487c90f60e50ad54ab4e95b5ae7d48ffb7b9412edbeffd0300aa49326098523a68c93e70bfb722db7230ac0025a5212e7e5fd54b","ssdeep":"","tlshash":"5111ccb32109ce31bd7dd62ad536379486250eb56703706ca0f99030b4d204131cc963","first_seen":"2025-02-26T18:00:22.717741Z","last_seen":"2026-08-26T11:30:09.647034Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":750,"receive":532,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/img/banner05.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.588Z","timestamp":1787743776588,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/img/banner05.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 169935\r\nlast-modified: Sun, 23 Aug 2026 07:12:45 GMT\r\netag: \"6a8a9d6d-297cf\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":169935,"size_decoded":170280,"mime_type":"image/png","magic":"PNG image data, 690 x 300, 8-bit/color RGBA, non-interlaced","md5":"fb0fb9dc13d34a89ae73eaef184348b3","sha1":"149368a4faa1ec9e806fa0bdf00e5b95f25d9705","sha256":"719bb540ae6fd143ea5dc3be90fb9bf72b21e891e9e807f2c55a7be23c3903f4","sha512":"192920afef6a7f93fb312d1fc0f5cccd2bff55ea4155cf71b0eb97779dabc39dbda410d1275efb96f4453f67fa42254f855edd7135e43d25ef9d44193247368c","ssdeep":"3072:EnxLZecwH1bu59kfqrHJNgfew9N2+M/RUh/3RYrQFmGHjohYyelLm:wLZegECzJNKeUNe6/arQFmMjoGyeA","tlshash":"b3f312cb1639098ddc2c10823970e454d4c9dfa5c62a8aced33d9f82fb7f94a55a4e78","first_seen":"2026-08-26T10:30:22.236797Z","last_seen":"2026-08-26T11:30:09.647534Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2620,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":743,"receive":1877,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/upload/20210908/9911518f2ea41dffe86efc9bf3b9f07c.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.610Z","timestamp":1787743776610,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /upload/20210908/9911518f2ea41dffe86efc9bf3b9f07c.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 7083\r\nlast-modified: Wed, 08 Sep 2021 13:31:06 GMT\r\netag: \"6138bb1a-1bab\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7083,"size_decoded":7425,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit colormap, non-interlaced","md5":"32d33b7a7a8eae613f02c047312a8563","sha1":"d73de138788be5f3a0d98f5bbbb2fec67a2b7e14","sha256":"dbb41643b69f311f7417c8e28671fd3064edb363a60d315d91325010616334f8","sha512":"e83e3dfff490f6554eb807c370fae71c16ab5aeb35dc6cb760be034f9b86afacee5026fd8cbbf592fa2dba9dda8adbc66079f76cd46c9031def466de629ef3b6","ssdeep":"96:60U9UIToHr+uc5Zs/ovvIepK064q3gCPsaHaY/9ua4D7JfmOELFUzV6U8d1cESiG:60OxChgZzDpK0jqDlRFr4R9ExIbzBi4z","tlshash":"68e1bfd8f9b98a40c473b231ec5860ec37a4fd08de91916f105abf8d8372bd6c8a6117","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-08-26T11:30:09.648099Z","times_seen":66,"resource_available":false,"data":null}},"time_used":2055,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":722,"receive":1333,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://trezors.co.uk/wss","fqdn":"trezors.co.uk","domain":"trezors.co.uk","tld":"co.uk"},"ip":{"addr":"138.252.248.225","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:37.950Z","timestamp":1787743777950,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /wss HTTP/1.1\r\nHost: trezors.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://trezors.net\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: y5sbFKXJpc4zywosVgPmRg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Wed, 26 Aug 2026 11:29:39 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: tU11IcUKkMNuZtOEuSqmm+SfSG0=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":208,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-26T14:40:47.491222Z","times_seen":18114873,"resource_available":true,"data":null}},"time_used":2454,"timings":{"blocked":-1,"dns":839,"connect":1078,"send":0,"wait":267,"receive":0,"ssl":270},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/plugs/layui-v2.5.6/lay/modules/carousel.js","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:39.232Z","timestamp":1787743779232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/plugs/layui-v2.5.6/lay/modules/carousel.js HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 May 2021 05:44:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60b477be-f16\"\r\nexpires: Wed, 26 Aug 2026 23:29:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3862,"size_decoded":1839,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3805)","md5":"f4b94959b4b5ad34cdc1dd2c12a6bd1c","sha1":"303a72c6380c4277062e85eac689d1dc5ebc60df","sha256":"ec7b67ac49f660eae790c97c9e47fd86973a01478947c603f458667fb322351c","sha512":"b4d24dd32769ad42ed0d4e7b61b80c0ef9f41e9d001a48f5bfd3a328e58e715724a2df8bb97e8078e6b1fc44be5ede4b53233f987578eaf9f3d6e0a3ec936831","ssdeep":"","tlshash":"d7811181775f386741972453935f4c0896b719ba9b06d054f2a264fa6dfbc88223eb0f","first_seen":"2023-03-10T09:41:51Z","last_seen":"2026-08-26T11:30:09.649047Z","times_seen":94,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/index/images/en.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.562Z","timestamp":1787743776562,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/index/images/en.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 40194\r\nlast-modified: Tue, 22 Oct 2024 14:44:50 GMT\r\netag: \"6717ba62-9d02\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40194,"size_decoded":40537,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"7c4649b01d6cf9e820d83507041b4465","sha1":"447a82ec6fcce842fc229dc19a340a8b9894807a","sha256":"7a385d6184697fae10207c6e4edf306c018a9bf439faaee7aa302be29a0528ed","sha512":"dd9c61ea72cc53bd522dd3ffd7ec54420b798b28beb1a0942d1fab2fb218c4a4680c9da1bace4e0ccf100d62271cb4afc43546daea55a254e8ed9e5c30d3d60d","ssdeep":"768:VjW9I28b/5C999JYpYvhAEh96KV9ewvxlvmwlZvIrgxAxOLBYTLWvPtVXak:VjW9I20/g/92qH962cAlvvlZvIrgxYOP","tlshash":"ea03e1cc53e74054ee3bec8502e7912ba4cc2d4752e85f336a2f9a1ab95ecc7856d087","first_seen":"2025-06-30T18:07:21.137512Z","last_seen":"2026-08-26T11:30:09.651556Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1034,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":767,"receive":267,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/index/images/ina.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.565Z","timestamp":1787743776565,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/index/images/ina.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 7227\r\nlast-modified: Thu, 19 Dec 2024 12:16:20 GMT\r\netag: \"67640e94-1c3b\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7227,"size_decoded":7569,"mime_type":"image/png","magic":"PNG image data, 1200 x 800, 8-bit/color RGB, non-interlaced","md5":"973be09272c969be42aefd545726f752","sha1":"3b7aab5505c0e52d4fc2fd286feb686aeb85667d","sha256":"ff29e20e5572fb3552e906edc6c3ec89eda54b4f5f32b19bfc92d3015c870a31","sha512":"52487e3365d5ffee95ba4c0412530a28a74623568bde9623df73c91294d044bc8b88e707e9736bcb4c6987e521157cc9f11a4b9f6f7c338d4f23ce5646daedad","ssdeep":"96:1SMllcHitlIxv9vk7C1+I4wWHLihk/xWiG0WV4DzxY:1SHIIHUCD4wa8iw4D9Y","tlshash":"9de1c6bc866287cf403e0b1612d77cb2e4fa46b02bf8c4a8c5660b4e4218c1fded2995","first_seen":"2026-08-26T10:30:22.282888Z","last_seen":"2026-08-26T11:30:09.652056Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1034,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":763,"receive":271,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/index/images/India.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.567Z","timestamp":1787743776567,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/index/images/India.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 37342\r\nlast-modified: Sat, 14 Dec 2024 08:26:07 GMT\r\netag: \"675d411f-91de\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37342,"size_decoded":37685,"mime_type":"image/png","magic":"PNG image data, 1200 x 800, 8-bit/color RGB, non-interlaced","md5":"8b7907f7a8d0be3131284f520b77c8c4","sha1":"1e3fa52836c200e7510a962c6b3a30712c2c2d5a","sha256":"aeee52d7e102332c0313dc2cde9ad47f7c5e0aa2a0cbd8ef7deaa768bf267a21","sha512":"f44b118ace77f654e51b68b033460e18a13dcc45169e4548118e567ca5670005beb4acba05c7b3e3c18cfc14a927ce8f045fff669e9fef0106f720afa1d4315f","ssdeep":"768:7mrr/IQjsGCOhLkLYxjrvq+Zt7GEGZQU+E+AVuYgIiy6ZOcSv:7+9sOEYxjrvq+PaFyETopI3","tlshash":"5bf28e45eab2b9dfc8bd037e55c33cf836f5676aa7f14318d63912a8261250b6f224d0","first_seen":"2026-08-26T10:30:22.29604Z","last_seen":"2026-08-26T11:30:09.654973Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":762,"receive":533,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/imgn/Dark/invite_ico.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.579Z","timestamp":1787743776579,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/imgn/Dark/invite_ico.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 1295\r\nlast-modified: Sun, 19 Feb 2023 16:24:58 GMT\r\netag: \"63f24d5a-50f\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1295,"size_decoded":1636,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c82040c580b6eca49811c56ae79f3587","sha1":"f63a38832c18963d98ddc76601d71ff7b6b52a2a","sha256":"369a5bc2f018e1f969b7c60a6c76ac38be06cae378742478b20d1a644d123581","sha512":"cb66a529dac4c37f6549caed53892f3e31a259bdca73f24764736c9b8872dbca3b2fc86e9685d3e938b6ca9219345147c9a7a89bc5ddbd987e74e59df1f91dca","ssdeep":"","tlshash":"bf21eafdd546b0f4ddb2b24231d8dc4af137b55d752f665d43351017709064e81a9a0e","first_seen":"2025-02-26T18:00:22.710118Z","last_seen":"2026-08-26T11:30:09.656346Z","times_seen":27,"resource_available":false,"data":null}},"time_used":1283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":751,"receive":532,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/static/mobile/imgn/Dark/deal_coin.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.592Z","timestamp":1787743776592,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /static/mobile/imgn/Dark/deal_coin.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 5126\r\nlast-modified: Sat, 22 Aug 2026 10:57:37 GMT\r\netag: \"6a8980a1-1406\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5126,"size_decoded":5468,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"773810265e2cc9674c594dfacc6b918e","sha1":"7a168f4401f1ff1e5eaf28d27a98334742701dd1","sha256":"bfcd20e67c4abd72fc864cd4d8689a5cc2f7598d4a5404ab0b81347d4b4a4a57","sha512":"5cdda495a79f530bb066bc989cf6f16b1f9b682faadfb2cb9a07617a21ca2bcc06f5410e4aec4eed9662ab2ad624afe81ce85e2c2739d9656d791cc0c081f6c5","ssdeep":"96:SSMllcHitlIxv9vk7C1+I4wWHLihk/xVwB/tRBkxcZYx/47je3KxOjcCpvISRgU:SSHIIHUCD4waqt7kxcZY2VOICFRb","tlshash":"3cb19f8c4d15114f14095eeb396bd80a496be86497a53c4ce3ffc25bc960ca0be79e93","first_seen":"2026-08-26T10:30:22.24344Z","last_seen":"2026-08-26T11:30:09.658675Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1805,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":739,"receive":1066,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezors.net/upload/20210908/6d28f71484aaa8396aa81afc44a5040b.png","fqdn":"trezors.net","domain":"trezors.net","tld":"net"},"ip":{"addr":"138.252.248.226","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezors.net/","date":"2026-08-26T11:29:36.615Z","timestamp":1787743776615,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krzong.linkdataend.lol","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:51:25 GMT","end":"Sat, 21 Nov 2026 04:51:24 GMT"},"fingerprint":{"sha1":"F5:92:1D:1D:5E:D3:7C:0B:C0:65:90:EB:6B:41:E4:4C:FF:B2:25:56","sha256":"57:E6:BB:88:05:E3:43:B0:A7:E1:F4:F8:06:21:5A:44:5C:BC:18:3F:82:8F:40:EF:B5:0C:33:A9:8E:A8:02:00"}}},"request":{"raw":"GET /upload/20210908/6d28f71484aaa8396aa81afc44a5040b.png HTTP/1.1\r\nHost: trezors.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezors.net/\r\nCookie: lang=ko-kr; PHPSESSID=738619d947da54bcab9abc01192ac058\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 26 Aug 2026 11:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 6078\r\nlast-modified: Wed, 08 Sep 2021 13:43:24 GMT\r\netag: \"6138bdfc-17be\"\r\nexpires: Fri, 25 Sep 2026 11:29:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6078,"size_decoded":6420,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit colormap, non-interlaced","md5":"f59be5c92fd713e4563ce3960a08bb25","sha1":"2c3f91962f03e10378a8cdfba1e86697fc1267f6","sha256":"2deb48b990b5a8e3374f242f4f7fb5e66ae9b33f77ac718c13b940eb84565d84","sha512":"c99f9c03e90cde62d126ec3828182b69768a95c9ae69e625f1c5389ad8437c7eef713d76d1f313c3d3c16db18e7412c4474daa729bab5fb77f32455a083b35e3","ssdeep":"96:kU095GoMuxICKue9fv7+bUFlzgdIP+nmT23sXI//mwRNvw1dMSxaSkMm7Iiz4OF9:z095hMuSCKXfSQFlzg5nmT+/eVLMS0Sm","tlshash":"4fc18ef2ef5e83b8093577c5a43cc90abc327132e812475a6457443f16965cefaa1584","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-08-26T11:30:09.659672Z","times_seen":67,"resource_available":false,"data":null}},"time_used":2051,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":718,"receive":1333,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"trezors.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"trezors.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
