{"report_id":"c1b9af9f-9c21-40ff-a1f3-10bfee696e07","version":6,"status":"done","tags":[],"date":"2026-02-07T09:44:09Z","url":{"schema":"https","addr":"trezorshield.cloud/","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":0,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"trezorshield.cloud/","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"title":"Exchange - Home","dom":{"size":82925,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (460)","md5":"de781424725983ab1765bc9d3743cde8","sha1":"ce529e37eccfe340965f04671fc2bd1e3cfcc3b3","sha256":"9ee677e9c5ef1274bcaa1b3a1ec08a888a389e225483a9e6185c4383dc47a374","sha512":"453c99a170a1439dc59f27659a08fb4a7289ba7568b6f8bee899098797d38c9ecd7ab50c78bc315432126bfe43f6f0a34f2cf3e47a9cfb216fda6eae778eb66a","ssdeep":"384:XmI6SH0OhXwe423fZBX34fuAwiHaIIjLhQqEClFV0YZC/BCIw81KOK0KpKqKi7Xh:eOhXj1BX34p481TtQz1cdIxw1R4RWU","tlshash":"cb830f2250f661774193e0c6b6262b1bafd2d607ca9b4206f7fc07885fd6d82dc53a2d","dom_hash":"domhashe88d507762ec21c34df93d3ffe4813dd","first_seen":"2026-02-07T09:44:14.656656Z","last_seen":"2026-02-07T09:44:14.656656Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"trezorshield.cloud/","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":0,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-14T09:44:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ws-------------------.pusher.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"1997-06-03","domain_rank":0,"first_seen":"2025-01-15T11:03:46.202363Z","last_seen":"2025-12-12T22:39:05.090247Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1288,"comment":"","tags":null,"fingerprints":null},{"fqdn":"trezorshield.cloud","ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":120,"request_count":60,"received_data":2483326,"sent_data":35688,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.3.6","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-01T22:14:44.580478Z","alert_count":0,"request_count":7,"received_data":253314,"sent_data":3777,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sockjs-------------------.pusher.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"1997-06-03","domain_rank":0,"first_seen":"2025-06-17T04:09:25.161558Z","last_seen":"2026-02-07T09:04:16.111013Z","alert_count":0,"request_count":3,"received_data":0,"sent_data":1967,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-01T22:17:46.954894Z","alert_count":0,"request_count":1,"received_data":7737,"sent_data":509,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trezorshield.cloud/assets/templates/basic/js/main.js","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa1e9f48519f5fccbfd52f173738f6d8","sha1":"e2959ae60ec5712ae1894559622ece83cfa12364","sha256":"c92056e1fa477231d124a9a668dfb9d8b1801edf8f4abc9d1dc470aba5678c8e","sha512":"094f65fe89133b156acc8171494b5377563ea9e59867aa49632310bb8c0d3cb2c6ebcddd2cce42f4f037f5b1fedb9d1c1605fdd5696b6bb04e833ca03aceb16a","ssdeep":"96:jjgQeDRc1klEmRoXDRpOE9z5QqyaGUHc4Y0N:UDR08EmRoXDRpIq59HcZ0N","tlshash":"35d1314ef01124b180bf3375ae5be115fa670a3b8251cb04befc08d92fb97925291e9d","size":6454,"data":"","first_seen":"2025-06-28T00:51:38.037222Z","last_seen":"2026-07-27T04:26:10.406766Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"89f2594e9f0d11a98b05f269ef14b0ce","sha1":"1222ae0c91e752ab77de945e3e8290bc8275d66c","sha256":"46512579f377fe3984d1918e04daac80f75a10d22ec5c55096d0d379e20cc823","sha512":"96a3077a5e0816df60ed777a2a64036c3e95139a4e4c8037924a1e553b147535f3c91089b0ffc5b5d3e2d8dc335185faa75bcccc94c270216251fb72f4bc115f","ssdeep":"","tlshash":"56d01219590769913775341a7d12f64122f2426f18015401bb1f424d5fe9c171890378","size":243,"data":"","first_seen":"2026-02-07T09:04:21.337578Z","last_seen":"2026-02-23T15:02:25.896127Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/templates/basic/js/swiper.js","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"341193defd9a293dc46459bf53a2d49f","sha1":"953cfcac207943131455d66411b24ec44c7f89fa","sha256":"c1ff9ea5cd950927f6892d9587012b247d05b562b0db90f42c0ce44bd840438b","sha512":"ab24a44177fd2d117b944f3c5d6477779589034e9b0176f43d63e00c9da10c756ca367324b33df4de0ec868516b4655ea08fb8d99d0ea1af15ef2d32739d8e0f","ssdeep":"1536:6IJOfGPQLP8NE6WGKF+EzFolxU/yBkt+TSD8jv1nTNlU9ymp8Mj0HEOu5qAsVupm:BJJNiTlyBkeZvU9tp8Mj0kB5q5cp9U","tlshash":"40d3f8896221b57646e316db93e4c621a3b50540b80ac8f470bd4c9f597ec9813feffa","size":139624,"data":"","first_seen":"2023-12-29T00:16:32Z","last_seen":"2026-07-27T04:26:10.391439Z","times_seen":93,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/global/js/iziToast.min.js","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a05a127c793145cec6b721f14fced3e5","sha1":"5d753b1c803de12f4d2217ab0d143d4dcf047010","sha256":"ac860be79a4cfe434ea68f002638f79371d9a85a3b045a1aaf10dc98df551497","sha512":"ee5a4c561a267f7a96635cb529a5e670aebe766289fe358e6b394585db4b76d5df215cad4b358a07425deaada36d4f4e42c06c2c44d9c192f03ac1afeb9bdc64","ssdeep":"384:ShKmhCPzlc5gVCPBpcG/0CEvXArKKpQi8VREgO3MrnHzxJBkHI4505P:+K5PzlcN8DXArhpQzRHO3M7TxfGIYUP","tlshash":"6a82c894722032374aa329a960ff534a3772156ca9c641a4243fcdad5b34f8939f77f8","size":18481,"data":"","first_seen":"2023-03-07T01:10:25Z","last_seen":"2026-08-07T17:35:40.748551Z","times_seen":3379,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"90684535f459421260927ed59f70e4c9","sha1":"388f43f170c1dcf4d7c6fb3768cf3c1db2486b04","sha256":"5949ccdf961507730b09c5211558421caf3bb3394d6a69cc7e58c016a2d2a8d0","sha512":"a61769808cdf0622d8c67c9120f918c234ea6b1345584eb2bccadd02e0ff2d344541eb2d8ef49099525043b00cfd65d5779e14c2d12d359b8742fc0a4e691f08","ssdeep":"","tlshash":"2731ca685e6254060d2b30bd298f1516ae3708075d1bb67abdcc52400f9987cdbf5fa8","size":1463,"data":"","first_seen":"2024-07-18T03:39:19Z","last_seen":"2026-06-06T14:57:44.554289Z","times_seen":382,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/global/js/broadcasting.js","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f43cade3a12d7d87851efefcd1525987","sha1":"b436714ea9dc206f41da9b7a88b37951707b8379","sha256":"91f58c69d35f087a01b7aeb88b28f655b9d26a47d8a8add42a83c132886d2b30","sha512":"9afcd197a2b82e88db101e0ceb3bc2b664263b9b1c83680dc590236631d4fc6e16989bc97468812ba7f1092ed11d518224c814e96313f9d76ac04c61590f0196","ssdeep":"","tlshash":"4f51bd2eb0b0101511bb6697095acb50dc365b3bc3d25202be1ec4f62f3267db556fe9","size":2750,"data":"","first_seen":"2024-08-19T16:03:13.64006Z","last_seen":"2026-07-27T04:26:10.323922Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f3f3e30bfa740ca1d006aeb80297aa9","sha1":"7cbfefea57affcc879a31558de164b3cbceced6d","sha256":"06a1a917afc7fa4fd353229de454ed6167c2fe3d191085b390dd8df957e142fc","sha512":"7c58a87db1a1a84d67ab4b7e4a39f21c86a5f6c1a62ab36dd7f8edba16cef6a69f9b9eb39a5169ee6af19c777a76c0ed55adb70551b3d3fb8697af0c4422d997","ssdeep":"96:xhrpDyOby/bZFgVyIHTBCkoM3lJ3spnPOG97OO7WyrMnKIc:zRkblIHBf3n3w59KOKyrOc","tlshash":"e922420571f3622200e3b09e973f6f1a5fa9c50bc5894a06be6c06d51f84de5e8d3f89","size":10519,"data":"","first_seen":"2026-02-07T09:04:21.339386Z","last_seen":"2026-02-23T15:02:25.89826Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/global/js/pusher.min.js","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"06903a1dad766b0db2d4ef1c6b4b4868","sha1":"fd6f04b16d5fba14706f1dd111449d60d77dab1b","sha256":"be165a75e28d58889ccfec2e8962ea338bff9603e7a0db5c357c69e00d8c31a4","sha512":"149fd72261877d456c291f09747f011a866eeb428268cc4c08fd4da3acd076285f28d29b1aa09d73b840d861aaff7208cbdfae3d016cea60bca42e1d193b84fa","ssdeep":"1536:EyWbCh/k212N6e4goJRJmml/ZBMOXPsaLbkvhzYIh487:82i21hJ9l/ZB1XPsaLbkvhpB7","tlshash":"45e3ef4a6ef770209263b0b98e5f94097639559f198add043d4cd3e08f2953c87bafac","size":154200,"data":"","first_seen":"2023-12-29T00:16:32Z","last_seen":"2026-07-27T04:26:10.366159Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"531a3475fa85c2f7f9e619c584b38179","sha1":"531ec9825f8d55b25bb273ec38c776c7bd8ed809","sha256":"e654a3768daaf9df866f29ce0f0fd0ecf50cb4c26b0a0b04a5d3af4507365d4f","sha512":"01bb4a62af670f400ed8456bbc26ab1a028b3d9a86234d7232e81ad984f3a7094365fc5c797808c1aa4d58ed62858f339385bf73914039e59dda0a66ac1e3b87","ssdeep":"","tlshash":"f6a0020e90ab544805b324d8b77b89976810126b0148d9527d9d51465f1643d1532a5c","size":83,"data":"","first_seen":"2023-12-29T00:16:32Z","last_seen":"2026-05-10T03:37:16.062844Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/global/js/bootstrap.bundle.min.js","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b75ae000439862b6a97d2129c85680e8","sha1":"90d15036ef48fcb336a135bae812b45669f19044","sha256":"9520018fa5d81f4e4dc9d06afb576f90cbbaba209cfcc6cb60e1464647f7890b","sha512":"8bd7047c9c14c158843c529d0b57a7cf86511818fc610a3a401c854c5f766171e2ef0682ab27b1bd10fbe52e4d553b12893bfbaca5aa1bd639785c6646c3a7d0","ssdeep":"1536:p4SMTGR2t4n+3ifBHJR9WbUHk3j8YY+PwRM3CGJI9BqQM6kF:b4Fj8GPwRM3CiI9Bt8","tlshash":"6973c6593254b4770ade45b68037420bf2265d98b24b802cb5bcadde2a7dc863277f7c","size":80420,"data":"","first_seen":"2023-03-08T16:08:57Z","last_seen":"2026-08-08T04:44:22.732318Z","times_seen":9452,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/global/js/jquery-3.7.1.min.js","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87532,"data":"","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-08-08T05:14:17.585502Z","times_seen":30766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/templates/basic/js/binary-trade.js","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b1a75740a3a502f691cbf12ded9848c","sha1":"5b8a132dad048a39a7fae1afe3ad5efb7986b48d","sha256":"191a939c1c54140605f23f7585821fddb531c8ef3cb731895fdf36dcf5ce6432","sha512":"483a44a409d6ea98734557ea8f6099071cf9d4aebe17506f35322f73930a9030e03db1bf7b338a159feb781eb14ecd6b9e898ee7e8cd89440bce8390b0b74e7c","ssdeep":"","tlshash":"3281e15b311328a6897b6632cf794018e72a063f43027b613cad94651f7635c22d7ecc","size":3828,"data":"","first_seen":"2025-01-15T11:03:51.168689Z","last_seen":"2026-07-27T04:26:10.372921Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c1a29768bbbf2442ce08d1484ea283f1","sha1":"9a6662321b66ebe5791d9eda80dc2c398504861e","sha256":"778251e8dabc101695a1db6d2ca8e9fd039d4fd72cfe6d59aea9ca89da91edcb","sha512":"aff4d8d9d743262f40ed5e2e60724d8ce8f2ae4888f3f867d3f1f4d8c3518d903ac36a7f0fc5a1692a8b5f2a64d291e8f6f3fe4fdafd3c937d50555322b55291","ssdeep":"","tlshash":"db21bd4b11f724644263b0f9895f9603b635100f8584790abedd03d49f2c52cb9b37ee","size":1384,"data":"","first_seen":"2026-02-07T09:44:14.72689Z","last_seen":"2026-02-07T09:44:14.72689Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/templates/basic/js/slick.min.js","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"481ac3f8935c805172d406c12da68e0a","sha1":"fab75193a5fe33503eb2e62d047a01e238baaa64","sha256":"032699f5abc60e8e1b3c28bfa7a9a046addb1777420acb4c599871b5d64f0888","sha512":"a103f8c26db4c1d5b02c3608da138c7f6298bf6ba20ec77232020effc3a1e4f7d8653311f2498226a6233336e0476bd5504e0fd3829ed02ae823ddd0adefbab9","ssdeep":"768:vkqQW+Z4IRuCJ312FGeQuPKFnLfZ4ZwZD/58c04qeJhII4sRA/rhJhdxHcoZlC7n:6F97uPKFI/rhJ+vQgV","tlshash":"a0338406a210177698eb25e13017c54db3fbe77a9a11c1d4b8d583da20ee8058fdfbe9","size":53179,"data":"","first_seen":"2023-03-07T01:43:45Z","last_seen":"2026-08-08T04:30:02.347739Z","times_seen":2521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8269eef9833910683e13a00d1e9e8301","sha1":"912d0e3ac045673d5ead40f6c5c3250490970e0f","sha256":"e468e4bfcfccd6064dcb899edd9372468a72153a3e867df695469eee86229162","sha512":"0c8985128895d039f674a8fa920fc51987a8c0f1e73886bfca7417bd395a93dda06d2fd3f146dd60fbfff39eac39411afdb95ab68bea7e94c4a63c216f54593f","ssdeep":"","tlshash":"6d81982f70b7403955bb70bb9a9f4558732b111740089e18fa8c46841fa4969aef1fdd","size":3884,"data":"","first_seen":"2026-02-07T09:04:21.342496Z","last_seen":"2026-02-23T15:02:25.901403Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"trezorshield.cloud/assets/images/logo_icon/favicon.png","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:48.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/images/logo_icon/favicon.png HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:48 GMT\r\nContent-Type: image/png\r\nContent-Length: 3122\r\nLast-Modified: Mon, 10 Nov 2025 20:30:49 GMT\r\nConnection: keep-alive\r\nETag: \"69124b79-c32\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3122,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 384 x 225, 8-bit/color RGBA, non-interlaced","md5":"1aae6a1e5e51dec2795aef6fa9f71d77","sha1":"10803508b5b21d000b4c32852c8b590a1d27c894","sha256":"96f9f640ad3fbde3bfddce3e4334129595bbf4fc28df29b23c73b828f83059d8","sha512":"3f50fbb2ccddce2a4200979c114b319a23d90da37c20cc5525618d9ec31aa96e7b17a6e07712ad6826247a4ee26607060cbddd9d92654bcbbb999b33959d56a5","ssdeep":"","tlshash":"3451b48930ccfc2b5558c5f545cbab8313f34365d862280fa6e1aef832b55bc0a31ea0","first_seen":"2026-02-07T09:04:21.303835Z","last_seen":"2026-02-23T15:02:25.846227Z","times_seen":3,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/global/css/bootstrap.min.css","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/global/css/bootstrap.min.css HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 22 May 2024 10:36:44 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"664dcabc-2f954\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":194900,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65306)","md5":"a535cda6f21335f130c892d0444a7902","sha1":"95c895180f4103e47281f2dc59524adc05b22dcf","sha256":"ef110c50e64cb77ff4adcec1cff87821f8bb31e56ccf14d85a8bcce0eb65e19e","sha512":"bf30a7e68070b7617a7fc9d84bf73512dc00f48625e23d092493889fe912ec53e42297e1e903b3880e088d5c8089d8648c3bfb85fa5d2a3907d35c72a10c3a1e","ssdeep":"1536:htGg9JfWgeQK5wlP72qgOfI3N9LsqkVkpz600I4lp:htGg9JfWD9kVkpz600I4lp","tlshash":"711482d6f190307d98a7c2499591fefd866fa585d7120aaaf0137b6807ca7c30963ecc","first_seen":"2023-06-18T01:05:12Z","last_seen":"2026-08-04T06:10:25.777866Z","times_seen":799,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/templates/basic/css/swiper.css","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/templates/basic/css/swiper.css HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 06 Jun 2023 13:52:54 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"647f3a36-44fa\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17658,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (17654), with CRLF line terminators","md5":"06c0a29f51d06bfa70464d40a45be1b3","sha1":"d28cac1aeb8ec73a793118597542d160b0d2c61e","sha256":"a4f45cef1d3aebbab17ae4bce58a3ef1f87ae62a29a1d3c3f63a764e4a777449","sha512":"0dfcf03277539a660b1246d6c7c22d4e365298ceed77a6f103074671a3cb2763fff965e01a94fe97cbe60bf72f031eef5859d02a9a640ddc948e3ffa16df50d4","ssdeep":"192:2mUJbiKne0JlXZHZ+SMS4nxep/a2GZb0Q5nfufKlAYfg5fyeesedOJ9A5Pz+c3Az:TUbe0JdZHZ+1nZ24tlWfF4XYz","tlshash":"d48233a86340282753274f364b71cbb9dd7444d20f9389ae91c0ee48d7f6db9136f2a9","first_seen":"2023-12-29T00:16:32Z","last_seen":"2026-07-27T04:26:10.335518Z","times_seen":93,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":30,"dns":1,"connect":27,"send":0,"wait":27,"receive":1,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/images/extra_images/trading.png","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/images/extra_images/trading.png HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 1252\r\nLast-Modified: Mon, 28 Oct 2024 10:05:22 GMT\r\nConnection: keep-alive\r\nETag: \"671f61e2-4e4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1252,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"09a04092c35c880541b9c27d093a8ac2","sha1":"4e7374c045e66acfd3ee6d304c04ae656bf865fc","sha256":"91b32353f513a774641bba9f04454d6592935f53e04a76b0ad01e304a5ae2992","sha512":"4dee52fbcdcba95c1347a943d709a38b1ca52330f3f114c7259c90086f9c62e289e3045ca2f7074850c7a3594d284a1466e9f1b0779912db3bacf303a0bb3f74","ssdeep":"","tlshash":"a6218792bb29474dc4af15a2cda68506cd76cabc1267573092705eea105a7cc24da09b","first_seen":"2025-01-15T11:03:51.133647Z","last_seen":"2026-04-17T05:21:20.96177Z","times_seen":30,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":404,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/placeholder-image/300x150","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /placeholder-image/300x150 HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:48 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 2532\r\nConnection: keep-alive\r\nX-Powered-By: PHP/8.3.6\r\nCache-Control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nSet-Cookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; expires=Sat, 07 Feb 2026 11:43:48 GMT; Max-Age=7200; path=/; secure; samesite=lax\nexchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z; expires=Sat, 07 Feb 2026 11:43:48 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.6","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3268,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"data","md5":"979653b7c791d9277a7bc503c6ffd62f","sha1":"7989f0a1b26593813b518550554e0a0e4bc4144a","sha256":"1a5ac5792381c6711dc5bd7d818a20bfce2b134033094b0a6331ec612609ec6a","sha512":"5dbc5563436e36ee1c9484e463e83f51a97969adc08616fcafbf1a74615c42e2e1021673dbd786eb5bf437f950d8af525035efbaa8b828f64913e9716dcdd50a","ssdeep":"96:g4hV1827P2TsfnuF20wHWWFjpGMOfItbuuQlgGWhxAC+LI:g+V182PismF20wHWUjsr6CLlad+M","tlshash":"8ca1f746f9d4ee34cfd406a4320bc46a97f46ab465c81f68c6d3c2e349d4bb43cae205","first_seen":"2026-02-07T09:04:21.324827Z","last_seen":"2026-07-08T10:38:32.971198Z","times_seen":4,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":550,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/templates/basic/images/shapes/table-12.png","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/templates/basic/images/shapes/table-12.png HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:48 GMT\r\nContent-Type: image/png\r\nContent-Length: 13883\r\nLast-Modified: Wed, 07 Jun 2023 14:02:04 GMT\r\nConnection: keep-alive\r\nETag: \"64808ddc-363b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13883,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 281 x 512, 8-bit/color RGBA, non-interlaced","md5":"0f96b6c25ac11ae49b1261c3397317c6","sha1":"0a847d4f7726024a2bac380d4866745d8ddbc473","sha256":"9ce9429a6b22ea507fefc62340e74a230431c9521577e183148e1447a578b5d0","sha512":"4a5f3c32c7c8c535de406ccb71c251910bd73e4c298f8e73e7e18e609980811caa79f5b623e368a45d11e802c6e5e09be91cdf6ba29eb5c026497b7ba8164574","ssdeep":"384:eyr/tFVrIw/LqLQtsz5Tyip8CZtgJ9E4PdQ0Y:vrFFVkwDmywk8i6","tlshash":"e052c001b380a1c1787a7940077b79aefbcc9784979cff6c2c4a19db21a04da21c7d9c","first_seen":"2023-12-29T00:16:32Z","last_seen":"2026-07-08T10:38:32.953731Z","times_seen":63,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":488,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/images/currency/691330ce76ba11762865358.png","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/images/currency/691330ce76ba11762865358.png HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 2855\r\nLast-Modified: Tue, 11 Nov 2025 12:49:18 GMT\r\nConnection: keep-alive\r\nETag: \"691330ce-b27\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2855,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"f0ac3ad2b53527258dfae4f56bb4624a","sha1":"5bfeb5916301b5928df3b40155b543d4bc4955d9","sha256":"8648eee38462440c90761c057fa89c1c8d06520a6fd7a71f3b87cc52c13df92f","sha512":"ebd5de1b728a0ad2c0212ef993a9a26f53d867f0d4ce3239d601129ad845cb252c9abe30bf5c6d192b2f529b7144a07a75c0343c4e936c8b6d2b44d08814c1ea","ssdeep":"","tlshash":"5c514adfe7cf8c0792eb19d9e719c524c42e8700a9a725e17ad01ab715289c8c6b6826","first_seen":"2025-09-03T18:44:12.08638Z","last_seen":"2026-07-08T10:38:32.983624Z","times_seen":8,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":197,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/images/frontend/faq/648e8d9b941781687063963.png","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/images/frontend/faq/648e8d9b941781687063963.png HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 46355\r\nLast-Modified: Sun, 18 Jun 2023 08:52:44 GMT\r\nConnection: keep-alive\r\nETag: \"648ec5dc-b513\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46355,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 535 x 535, 8-bit/color RGBA, non-interlaced","md5":"9b2818fab443fbf190cdb7622eb6ba8b","sha1":"2fdf1285b46c5b47beab5b5d425743b31df2164f","sha256":"e68459f6236dbbff2965e468dc65c55b6521c3fe17e2c55b527315eb0619a99e","sha512":"2a3159ad21e00ca66be9e65012c3b832b4220a4b35dc7e5d1065908db849457b971493858c5f2f429b6a2ede97847b7b9aa9b3c63954b94ceef73952cb717da9","ssdeep":"768:jWa9VEgyJxh7Iqbez+ImUmP4pga06qu7ZeGkIAO4k7DLYH0H609cqvWVsaOq2:jWoVsNbeiI6P4OkvgqAePLE0vaqvzq2","tlshash":"9f23d0dc9a41f9b9ae7126dd0bc98726ddacccc404bb0023239cf5a0a9d3cb5fad5564","first_seen":"2024-08-19T16:03:13.391125Z","last_seen":"2026-07-08T10:38:32.959819Z","times_seen":57,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":242,"dns":0,"connect":0,"send":0,"wait":52,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trezorshield.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Feb 2026 21:15:08 GMT\r\nexpires: Tue, 02 Feb 2027 21:15:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 390520\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-08-08T05:10:56.058012Z","times_seen":28617,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":183,"dns":0,"connect":0,"send":0,"wait":22,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/global/js/bootstrap.bundle.min.js","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/global/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Wed, 22 May 2024 10:36:44 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"664dcabc-13a24\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80420,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"b75ae000439862b6a97d2129c85680e8","sha1":"90d15036ef48fcb336a135bae812b45669f19044","sha256":"9520018fa5d81f4e4dc9d06afb576f90cbbaba209cfcc6cb60e1464647f7890b","sha512":"8bd7047c9c14c158843c529d0b57a7cf86511818fc610a3a401c854c5f766171e2ef0682ab27b1bd10fbe52e4d553b12893bfbaca5aa1bd639785c6646c3a7d0","ssdeep":"1536:p4SMTGR2t4n+3ifBHJR9WbUHk3j8YY+PwRM3CGJI9BqQM6kF:b4Fj8GPwRM3CiI9Bt8","tlshash":"6973c6593254b4770ade45b68037420bf2265d98b24b802cb5bcadde2a7dc863277f7c","first_seen":"2023-03-08T16:08:57Z","last_seen":"2026-08-08T04:44:22.732318Z","times_seen":9452,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/templates/basic/js/slick.min.js","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/templates/basic/js/slick.min.js HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Mon, 29 Aug 2022 09:15:32 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"630c83b4-cfbb\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53179,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (53179), with no line terminators","md5":"481ac3f8935c805172d406c12da68e0a","sha1":"fab75193a5fe33503eb2e62d047a01e238baaa64","sha256":"032699f5abc60e8e1b3c28bfa7a9a046addb1777420acb4c599871b5d64f0888","sha512":"a103f8c26db4c1d5b02c3608da138c7f6298bf6ba20ec77232020effc3a1e4f7d8653311f2498226a6233336e0476bd5504e0fd3829ed02ae823ddd0adefbab9","ssdeep":"768:vkqQW+Z4IRuCJ312FGeQuPKFnLfZ4ZwZD/58c04qeJhII4sRA/rhJhdxHcoZlC7n:6F97uPKFI/rhJ+vQgV","tlshash":"a0338406a210177698eb25e13017c54db3fbe77a9a11c1d4b8d583da20ee8058fdfbe9","first_seen":"2023-03-07T01:43:45Z","last_seen":"2026-08-08T04:30:02.347739Z","times_seen":2521,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lexend/v26/wlpwgwvFAVdoq2_v-6QU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/lexend/v26/wlpwgwvFAVdoq2_v-6QU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trezorshield.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39680\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 06 Feb 2026 13:20:28 GMT\r\nexpires: Sat, 06 Feb 2027 13:20:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 73400\r\nlast-modified: Mon, 08 Sep 2025 18:15:35 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39680,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39680, version 1.0","md5":"2077a5271e5c1164bdd3fbe1744157a7","sha1":"91313f8a6f0a223205216ab3b6083d135dad61bd","sha256":"b7e7538f59bff1812841d7627f8e49e70fe86438f9f7b397a028c0d05301c874","sha512":"322ed8166992e29dc0be1e3e7d4f576cf1ef6bd70718ee142941271e31b195743c0f81bde2c0ca8e66693b668a7de9136be109b9fdbd5f92d0a2e2a41877988e","ssdeep":"768:p30StOXMA65YrEtTPMSzK/s7n0/YXUxK1SSI8e/x3aHCBiciuZW:p30SGMAWYQJMiK/k0/gUQ0S0kum","tlshash":"9a03014933314d5238093239ff91edefae57c321e908f9184594e58ffc8a71e5aa091a","first_seen":"2025-09-09T15:01:21.644742Z","last_seen":"2026-08-08T05:39:52.627713Z","times_seen":7519,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":219,"dns":5,"connect":10,"send":0,"wait":25,"receive":2,"ssl":204},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/images/logo_icon/logo.png","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/images/logo_icon/logo.png HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 15556\r\nLast-Modified: Mon, 10 Nov 2025 20:30:49 GMT\r\nConnection: keep-alive\r\nETag: \"69124b79-3cc4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15556,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1301 x 247, 8-bit/color RGBA, non-interlaced","md5":"f0d0aa99084dbdb376fe4060624c1bac","sha1":"92266936b9026d94593cc750eab48456158e15f0","sha256":"2ffd74d9dc1f6e680df7b7e3efbbe619c17b7bc866e9e11df74a43ea43946526","sha512":"3f05262485a261f36226a7c0f419088540547782144a5ef40839823c79e56998b2607428b434015fa21d5ff44b053c2ec8718b41925fa1f9a4d6ed4445155b21","ssdeep":"384:65P5Pb/hDKa2KHwj9boYW1bLmArGsR3HoA:sPcazQjloJbLmUJ33","tlshash":"44629d8032d1fc4741a2a07e99b599d5a310c3bbd57eeee4fd7e9391820139f2416ad1","first_seen":"2026-02-07T09:04:21.285804Z","last_seen":"2026-02-23T15:02:25.867625Z","times_seen":3,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":239,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/images/extra_images/future.png","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/images/extra_images/future.png HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:48 GMT\r\nContent-Type: image/png\r\nContent-Length: 1804\r\nLast-Modified: Sun, 20 Apr 2025 15:31:28 GMT\r\nConnection: keep-alive\r\nETag: \"68051350-70c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1804,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"28573e90f9dd6090428bfc19f134e2e8","sha1":"6b42327f18cf8ab4969228f53733a5edb3d707fc","sha256":"5fe1b9bd68e05d05739c06e037f55c572480e89fb5a39fb8861cb7c60f134fef","sha512":"1437a5337fef3f5963f37f285d0c9ac5a3750a9d83071c18d84c9653627feca12bebe610577949b68fe91fe56aba9a2a50950ecf74c33f2ab265f69ae2bc5ea6","ssdeep":"","tlshash":"5731c9e936dc7425cf593a250af34e64e0203ae5ab03c985504b0d2b971aed1beb189a","first_seen":"2025-12-12T22:39:12.269928Z","last_seen":"2026-07-08T10:38:32.963523Z","times_seen":19,"resource_available":false,"data":null}},"time_used":566,"timings":{"blocked":540,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/images/frontend/product/648dbd4f0b6951687010639.png","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/images/frontend/product/648dbd4f0b6951687010639.png HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 100843\r\nLast-Modified: Sat, 17 Jun 2023 18:04:00 GMT\r\nConnection: keep-alive\r\nETag: \"648df590-189eb\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":100843,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 630 x 470, 8-bit/color RGBA, non-interlaced","md5":"19be2e44dccd2d731faea2239e057ad5","sha1":"4513c5f9300dea0a9b98f224f59d2c933d3a136b","sha256":"54427d843641dc599c2023ce60b7a1ce0af2a71d1e8e21a9ccb9037c41f78a43","sha512":"7ece7b0104c5728823aec93c9c46f836a0999dca389761474b2d98234fb0f8530d7f4c282f59403c3630e514984574c373e775de60e8df2bd2e9b26a460bbd28","ssdeep":"3072:XDixp0mop8imMq/wxGFL9pVivow+bUMn9Tuyo3L:XD7+7D4od9pVKow+bB9TuF","tlshash":"e7a302ccc59ca1141fea7c1684d8e7944ce7a4856bafc53af13a61d022fc212b9ad0da","first_seen":"2024-08-19T16:03:13.407368Z","last_seen":"2026-07-08T10:38:32.972261Z","times_seen":57,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":192,"dns":0,"connect":0,"send":0,"wait":26,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/images/frontend/subscribe/648e95af142521687066031.png","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/images/frontend/subscribe/648e95af142521687066031.png HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 674\r\nLast-Modified: Sun, 18 Jun 2023 09:27:12 GMT\r\nConnection: keep-alive\r\nETag: \"648ecdf0-2a2\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":674,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced","md5":"37d25029e89d75bb5a24ad2c01ea0063","sha1":"33ac9f7d3024aa82138697eb9bbd5b5aaf9e162a","sha256":"f79533a477fb01aa3938f65158e4d05f9269df88cf95c08e732a5fef1be1e297","sha512":"fc91bb7dbcab4904e981db7faeba73fba6e3fb8d91b39107916fd2b0a432986449dfe03dba07a7d1f6a12d0f84b4030b6e225b34576d0b919338e5b30257fc8d","ssdeep":"","tlshash":"ff0183c3a689687bcbc41684ef41bf18a0ab5308a3c60f021391643512e2cfd1860778","first_seen":"2023-12-29T00:16:32Z","last_seen":"2026-07-08T10:38:32.945738Z","times_seen":71,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":216,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/templates/basic/js/swiper.js","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/templates/basic/js/swiper.js HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Tue, 06 Jun 2023 13:55:14 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"647f3ac2-22168\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":139624,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65532), with CRLF line terminators","md5":"341193defd9a293dc46459bf53a2d49f","sha1":"953cfcac207943131455d66411b24ec44c7f89fa","sha256":"c1ff9ea5cd950927f6892d9587012b247d05b562b0db90f42c0ce44bd840438b","sha512":"ab24a44177fd2d117b944f3c5d6477779589034e9b0176f43d63e00c9da10c756ca367324b33df4de0ec868516b4655ea08fb8d99d0ea1af15ef2d32739d8e0f","ssdeep":"1536:6IJOfGPQLP8NE6WGKF+EzFolxU/yBkt+TSD8jv1nTNlU9ymp8Mj0HEOu5qAsVupm:BJJNiTlyBkeZvU9tp8Mj0kB5q5cp9U","tlshash":"40d3f8896221b57646e316db93e4c621a3b50540b80ac8f470bd4c9f597ec9813feffa","first_seen":"2023-12-29T00:16:32Z","last_seen":"2026-07-27T04:26:10.391439Z","times_seen":93,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":26,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trezorshield.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Feb 2026 21:15:08 GMT\r\nexpires: Tue, 02 Feb 2027 21:15:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 390520\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-08-08T05:10:56.058012Z","times_seen":28617,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":178,"dns":0,"connect":0,"send":0,"wait":11,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/templates/basic/css/binary-trade.css","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/templates/basic/css/binary-trade.css HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 03 Feb 2025 14:03:12 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"67a0cca0-97ea\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38890,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"16117750f3e7f67cf227496230057547","sha1":"fc658180340c488275dbd608c584de4ddbb71de7","sha256":"e72ab1df7ee3f07c95e4e5630395a265117ac6783ec58e7b691ba4172eafe60f","sha512":"8ebd3f612939dc038ee0c41517d33c761e6613e0cc10491ae027af7d8f29b10ed60ce1343a0743b4aac3c158709ff1fdc747cd9914d8955f986eeff9317f8b7e","ssdeep":"384:oKponNQBXm2a9xqU+fx5pC3inQcrUtD9zNRzzvbAIoWWDRmC/j+NBSVHQC//84Op:Lgb5WQAKv3","tlshash":"4b0363a5ea0611561133ae28a345173efba211234b0a13f9bdf5ad58b3c17f44621fef","first_seen":"2025-05-07T12:52:11.403572Z","last_seen":"2026-07-27T04:26:10.351637Z","times_seen":33,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/templates/basic/css/color.php?color=0066FF","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/templates/basic/css/color.php?color=0066FF HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: text/css;charset=UTF-8\r\nContent-Length: 66\r\nConnection: keep-alive\r\nX-Powered-By: PHP/8.3.6\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.3.6","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":74,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"6ce5e76e77037280aeebaf8fca72eb4a","sha1":"9a740776e3e30ed483bbbcd7d8b5fa98d0c58da0","sha256":"c639b1baed5666472d3cbc7ba2fae37109e6ea0410770f7dab80091eff21cec8","sha512":"d5f5d439a5bbef7f3d4e5fa43b956bf7d0203116bff1fce8154c2ed3bc7cc17c4cab4c3226c4728b84a7edeb23b506eed5a4945b55a657c3e9dbe270dba52e9e","ssdeep":"","tlshash":"0ea0016605087a6d17215512a2e1036be468024a4ba43c9935e114260a62a2b3443840","first_seen":"2024-08-19T22:46:19.303588Z","last_seen":"2026-07-08T10:38:32.927345Z","times_seen":35,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/images/currency/691330d94afd31762865369.png","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/images/currency/691330d94afd31762865369.png HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:48 GMT\r\nContent-Type: image/png\r\nContent-Length: 2820\r\nLast-Modified: Tue, 11 Nov 2025 12:49:29 GMT\r\nConnection: keep-alive\r\nETag: \"691330d9-b04\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2820,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"907bcdcd87eca3a0c559246b5725856d","sha1":"a2020eec8ebe9f9039cf485f4bb1c7e9a43565e3","sha256":"d6ac90f4d7fee0a3278b52546541edaa928488f705e306c17d45302ba06a66aa","sha512":"c8bf4e138f0ec797b16a1e0a43f713538c7f2f542f5606c51fd6979c5ddd37075d5428f2b59741d318810fbd4660fb893315ffe39072254a065f78636df5a111","ssdeep":"","tlshash":"e8514efc67c419ce1cc2e0884cd211b76ff7da4a185b0dd025920ea572fb2212475e36","first_seen":"2025-09-03T18:44:12.062612Z","last_seen":"2026-07-08T10:38:32.978561Z","times_seen":8,"resource_available":false,"data":null}},"time_used":565,"timings":{"blocked":538,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/images/currency/691330ff6bf921762865407.png","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/images/currency/691330ff6bf921762865407.png HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 3631\r\nLast-Modified: Tue, 11 Nov 2025 12:50:07 GMT\r\nConnection: keep-alive\r\nETag: \"691330ff-e2f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3631,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"fa73c553dd78ded1e51793ce00d30433","sha1":"42ea9bad590f841c1cfbaab5f6892e3a6170e00f","sha256":"dce7e11b970e834657eed1b07b1b75f3b8a40242977dbc902bdfbd7fce7798ab","sha512":"94e76afe0f9c6d5fd2b31088928b3e35bd87b244b536d399c25a7e997e0a68803b26591e257e1c4b55b7ae1f3aef6a72e744569e9203c6f4c715cd0a33ac4d45","ssdeep":"","tlshash":"10713ba813d571a6c6dd7ebeda873249c36f2cc2ed800e5dc45c9d517ea97082323426","first_seen":"2025-09-03T18:44:12.056544Z","last_seen":"2026-07-08T10:38:32.982512Z","times_seen":6,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":192,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/templates/basic/js/binary-trade.js","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/templates/basic/js/binary-trade.js HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Tue, 29 Oct 2024 15:46:02 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6721033a-ef4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3828,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"1b1a75740a3a502f691cbf12ded9848c","sha1":"5b8a132dad048a39a7fae1afe3ad5efb7986b48d","sha256":"191a939c1c54140605f23f7585821fddb531c8ef3cb731895fdf36dcf5ce6432","sha512":"483a44a409d6ea98734557ea8f6099071cf9d4aebe17506f35322f73930a9030e03db1bf7b338a159feb781eb14ecd6b9e898ee7e8cd89440bce8390b0b74e7c","ssdeep":"","tlshash":"3281e15b311328a6897b6632cf794018e72a063f43027b613cad94651f7635c22d7ecc","first_seen":"2025-01-15T11:03:51.168689Z","last_seen":"2026-07-27T04:26:10.372921Z","times_seen":41,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trezorshield.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Feb 2026 21:15:08 GMT\r\nexpires: Tue, 02 Feb 2027 21:15:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 390520\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-08-08T05:10:56.058012Z","times_seen":28617,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":189,"dns":0,"connect":0,"send":0,"wait":18,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/global/webfonts/fa-regular-400.woff2","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/global/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/assets/global/css/all.min.css\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 25452\r\nLast-Modified: Wed, 22 May 2024 10:36:44 GMT\r\nConnection: keep-alive\r\nETag: \"664dcabc-636c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25452,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25452, version 773.768","md5":"023a4a925fa3fce0f66b769ef6bbb264","sha1":"2ed706340547d19c10a409ee02fb08f3d52ff670","sha256":"2bccecf0bc7e96cd5ce4003abeb3ae9ee4a3d19158c4e6edfd2df32d2f0d5721","sha512":"40f3ef2bfde073d33a2d3cbc280fb40ea50dc2b0c3619c8d9717d665351ae219caa5f17ae67cc87e777ff73c1275c1f3778b26e95f19459594d2f42ab95aecc1","ssdeep":"384:Uf5wuZ+wxJe5X/l55lwWB8jCYpdKMH4aL0a6nYEd4Mjxx6e6RERnoJ8ZwC3UmFs:0wFwxM5/1G3UIya6n9dft6RERnomFs","tlshash":"04b2e008d6d6bd12d57196f83bf74ca04bc0464b0a976b2545a2bde30ed00eec86bb79","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-08-08T04:36:42.635912Z","times_seen":9604,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":137,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/templates/basic/images/shapes/table-1.png","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/templates/basic/images/shapes/table-1.png HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 15095\r\nLast-Modified: Wed, 07 Jun 2023 13:47:18 GMT\r\nConnection: keep-alive\r\nETag: \"64808a66-3af7\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15095,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 281 x 512, 8-bit/color RGBA, non-interlaced","md5":"01b7f7e0bbbc6c4906f26ce23b9f2d5a","sha1":"0220c43ff2d1c036c2e39e2016bb6084a55e20ce","sha256":"2b41ba75c9042ea669af194975b658102ede77f489551f10b61e2bbc16e92fc5","sha512":"4f95e33e67134d2dd2f0163ad00712d6f95aba1d24a5927eefecfe38a5e36c090999544765a4371c7cfd416889ca2f7381e29d69cc8c7da69d310fa8f81e5123","ssdeep":"384:eO4EHLb13S4s83eDDm2KRmmbicUfezlgZVO1VLzs5vpEim:rLFP13Mm2MDYeJG01VLzs5xE7","tlshash":"e762e10532b284ede85baf707231ccf510e14ebf9af86d47ea4cf9531a530616b09027","first_seen":"2023-12-29T00:16:32Z","last_seen":"2026-07-08T10:38:32.952269Z","times_seen":63,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":371,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/images/currency/691330e0720eb1762865376.png","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/images/currency/691330e0720eb1762865376.png HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:48 GMT\r\nContent-Type: image/png\r\nContent-Length: 2450\r\nLast-Modified: Tue, 11 Nov 2025 12:49:36 GMT\r\nConnection: keep-alive\r\nETag: \"691330e0-992\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2450,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"55e2ba1518d609225883aecac48ede8e","sha1":"483caea04811c519a3413bd3d48c7b2d60792f1f","sha256":"1290d99aa6ddc88f2ad6f844565b2a83e85f9b8092f793fddd6bc1515a833041","sha512":"6f18389e0e6470d8d47fd07d64f06400da022e907f2f8f906373da0a9bc2adc22abbc5d42058fe2ddf1d0f40f2952408ea2f67f1925d2430ac2007663fb1ba69","ssdeep":"","tlshash":"aa510cfe44c35aecad3b1d79091d8b82179fe74ec84874047dee1c187c346a52a58925","first_seen":"2025-09-03T18:44:12.094788Z","last_seen":"2026-07-08T10:38:32.950132Z","times_seen":8,"resource_available":false,"data":null}},"time_used":543,"timings":{"blocked":518,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/global/js/pusher.min.js","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/global/js/pusher.min.js HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 13 Jul 2023 17:31:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"64b034fa-25a58\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":154200,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"06903a1dad766b0db2d4ef1c6b4b4868","sha1":"fd6f04b16d5fba14706f1dd111449d60d77dab1b","sha256":"be165a75e28d58889ccfec2e8962ea338bff9603e7a0db5c357c69e00d8c31a4","sha512":"149fd72261877d456c291f09747f011a866eeb428268cc4c08fd4da3acd076285f28d29b1aa09d73b840d861aaff7208cbdfae3d016cea60bca42e1d193b84fa","ssdeep":"1536:EyWbCh/k212N6e4goJRJmml/ZBMOXPsaLbkvhzYIh487:82i21hJ9l/ZB1XPsaLbkvhpB7","tlshash":"45e3ef4a6ef770209263b0b98e5f94097639559f198add043d4cd3e08f2953c87bafac","first_seen":"2023-12-29T00:16:32Z","last_seen":"2026-07-27T04:26:10.366159Z","times_seen":81,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":27,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/global/js/iziToast.min.js","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/global/js/iziToast.min.js HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Wed, 22 May 2024 10:36:44 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"664dcabc-4831\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18481,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18398)","md5":"a05a127c793145cec6b721f14fced3e5","sha1":"5d753b1c803de12f4d2217ab0d143d4dcf047010","sha256":"ac860be79a4cfe434ea68f002638f79371d9a85a3b045a1aaf10dc98df551497","sha512":"ee5a4c561a267f7a96635cb529a5e670aebe766289fe358e6b394585db4b76d5df215cad4b358a07425deaada36d4f4e42c06c2c44d9c192f03ac1afeb9bdc64","ssdeep":"384:ShKmhCPzlc5gVCPBpcG/0CEvXArKKpQi8VREgO3MrnHzxJBkHI4505P:+K5PzlcN8DXArhpQzRHO3M7TxfGIYUP","tlshash":"6a82c894722032374aa329a960ff534a3772156ca9c641a4243fcdad5b34f8939f77f8","first_seen":"2023-03-07T01:10:25Z","last_seen":"2026-08-07T17:35:40.748551Z","times_seen":3379,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trezorshield.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Feb 2026 21:15:08 GMT\r\nexpires: Tue, 02 Feb 2027 21:15:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 390520\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-08-08T05:10:56.058012Z","times_seen":28617,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":169,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/global/css/line-awesome.min.css","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/global/css/line-awesome.min.css HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 22 May 2024 10:36:44 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"664dcabc-15e81\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89729,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"73db02545cf13e8c82b51b62782df0d6","sha1":"c1bd14187b6dcb36efad21e51711f8941801de0f","sha256":"ce61a18cf084f15003798340044643f329ac5f90045acb2d9e778368bd799854","sha512":"bde6d4962ab1ad5901cb782e70c842966c903fd3a7fc701641d2835d168095bfc52ae4dbc648cf294caa54ec40706c050e46bbf5e4c5f985f07e47b5877ff07e","ssdeep":"768:1b+0d/C5eXnu2nnY8G3104xUse1LN9abc4VNRvTdgBngf79IcjJv5IopdU6:1b+754u2nOW4xUse1exx7HD9hU6","tlshash":"cd938abbd52d69c4b321c847bf4133b92886f56daaa20d50f28f544cacc269612e4f7d","first_seen":"2023-04-05T07:54:02Z","last_seen":"2026-08-08T04:52:51.452951Z","times_seen":7320,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":26,"dns":0,"connect":28,"send":0,"wait":49,"receive":3,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/images/frontend/banner/648d9ecedc3c91687002830.png","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/images/frontend/banner/648d9ecedc3c91687002830.png HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 32610\r\nLast-Modified: Sat, 17 Jun 2023 15:53:52 GMT\r\nConnection: keep-alive\r\nETag: \"648dd710-7f62\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32610,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 450 x 285, 8-bit/color RGBA, non-interlaced","md5":"f01ff80e3ba5138cf1662e8cab089de0","sha1":"cb75afff1abd01cd666e1fdc1b1330f714fd9c90","sha256":"ab20551b727776cd8738f132dee17914af8fdb3779b665f817678f84f29db1c9","sha512":"ff5b37091dcff6cdd9573cb0cfa9fdbb0760bccf55ca114537e829a546094d96701727d82f5476f829982e6aa654e29698b82eb22de381b8ab2c7211747ed786","ssdeep":"768:e3eWsIP43zcNFVQsFfrV5KK+TqTSI9vzeQiU+awCfn4Qa:keCg3QDQsZreKIhI9vzDi5yn4Qa","tlshash":"4fe2e1a007e78ee1ccdbc4573f1e9e6fa11d08aa41d25d2341b53d6c762a3c2a81fe25","first_seen":"2024-08-19T16:03:13.405105Z","last_seen":"2026-04-03T04:41:22.477081Z","times_seen":51,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":338,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/global/js/jquery-3.7.1.min.js","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/global/js/jquery-3.7.1.min.js HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Wed, 22 May 2024 10:36:44 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"664dcabc-155ec\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87532,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-08-08T05:14:17.585502Z","times_seen":30766,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":29,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/images/currency/691330f0e46991762865392.png","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/images/currency/691330f0e46991762865392.png HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 3321\r\nLast-Modified: Tue, 11 Nov 2025 12:49:53 GMT\r\nConnection: keep-alive\r\nETag: \"691330f1-cf9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3321,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"4a08116a307c678c29cb66238b8289f0","sha1":"2120291e1e49c4412613e77e70e3a21e19ca08fe","sha256":"3dcbd462b89e636a34da9bb155d86bbc12ef8285ab280a826dc9dfd9820b7311","sha512":"ea8842affa967dd7930452a68e565f75b6e67801906c8b60d2e8a2189cf838e0ec0e7bc685a2d2ccca0bfed6f6c4035d40d6b9846ae83b379cde498baeb34c73","ssdeep":"","tlshash":"1b615caf1b0ee85294004341d5effe9e8622c01fa65b5404fc5d61be6cca2e6510a2dc","first_seen":"2025-09-03T18:44:12.054469Z","last_seen":"2026-07-08T10:38:32.96586Z","times_seen":8,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":194,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/images/frontend/faq/648e8d9be35f01687063963.png","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/images/frontend/faq/648e8d9be35f01687063963.png HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 46651\r\nLast-Modified: Sun, 18 Jun 2023 08:52:46 GMT\r\nConnection: keep-alive\r\nETag: \"648ec5de-b63b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46651,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 535 x 535, 8-bit/color RGBA, non-interlaced","md5":"93b9bab5e57974038d1d013f932fa096","sha1":"a70914c162ccf66a657c971fcbea7eacbd336ba5","sha256":"1bed1d9f16b98df31dc9ac519b17731f6b8a5d14863fe6d49656e9ec2891dcb0","sha512":"881675d44f8bd7417236799aaf5b32a84d2cdb9d856e375127874a5d9fe943dfbab34c47b00bac460bd9fe7a52ad31ab4e4e27a32633d89461264b667b98d860","ssdeep":"768:AupYRjuVAXDeCa3XhAPZx3X14HjDtz3GNscmnbmAdwyt9Opcu0pxYQN28g/x2:AupYRiuDeCGhAP/3X1WjDmibDdwZzGxV","tlshash":"d123e15608b2fc84fd2e724889bc70933f432d9af15b5b49270da98714d6d2b3c989e5","first_seen":"2024-08-19T16:03:13.397697Z","last_seen":"2026-07-08T10:38:32.99768Z","times_seen":59,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":217,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/templates/basic/js/main.js","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/templates/basic/js/main.js HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Sun, 27 Apr 2025 09:45:34 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"680dfcbe-1936\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6454,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"aa1e9f48519f5fccbfd52f173738f6d8","sha1":"e2959ae60ec5712ae1894559622ece83cfa12364","sha256":"c92056e1fa477231d124a9a668dfb9d8b1801edf8f4abc9d1dc470aba5678c8e","sha512":"094f65fe89133b156acc8171494b5377563ea9e59867aa49632310bb8c0d3cb2c6ebcddd2cce42f4f037f5b1fedb9d1c1605fdd5696b6bb04e833ca03aceb16a","ssdeep":"96:jjgQeDRc1klEmRoXDRpOE9z5QqyaGUHc4Y0N:UDR08EmRoXDRpIq59HcZ0N","tlshash":"35d1314ef01124b180bf3375ae5be115fa670a3b8251cb04befc08d92fb97925291e9d","first_seen":"2025-06-28T00:51:38.037222Z","last_seen":"2026-07-27T04:26:10.406766Z","times_seen":24,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/global/webfonts/fa-brands-400.woff2","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/global/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/assets/global/css/all.min.css\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 117372\r\nLast-Modified: Wed, 22 May 2024 10:36:44 GMT\r\nConnection: keep-alive\r\nETag: \"664dcabc-1ca7c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":117372,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 117372, version 773.768","md5":"b6356c957274676e6571c1ff5e11c9a8","sha1":"4022f95e001d734ca8f082b8e7627abd205609ec","sha256":"3a8924cd5203a28628716aedb5cef0943da4c3b44e3ffcee90ab06387b41c490","sha512":"83de79c74480fafc62cdac4012ff2a129d8701772ee16216c3d9488826ac21a9c2f8a416fe3208a61bfea7e12c24ac1cc2d26f6d22bd2b0ba39a22d630238b59","ssdeep":"3072:U3JKgVzg5ybfXYe5W59JPQaPWKSsx/DBMnVnqedkAFqPQTzIBIOK2vDMF:IVM5A5GJPQaH/NMtBkAvcnYF","tlshash":"c4b312f88b7ac9a5e304e67b55e4613555a0aec8b180f35453be7c2c221e10dc67afe3","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-08-08T05:08:51.805089Z","times_seen":29862,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":26,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sockjs-------------------.pusher.com/pusher/app/-------------------/409/8np951ok/xhr_streaming?protocol=7\u0026client=js\u0026version=7.0.6\u0026t=1770457429887\u0026n=1","fqdn":"sockjs-------------------.pusher.com","domain":"pusher.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:49.893Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /pusher/app/-------------------/409/8np951ok/xhr_streaming?protocol=7\u0026client=js\u0026version=7.0.6\u0026t=1770457429887\u0026n=1 HTTP/1.1\r\nHost: sockjs-------------------.pusher.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://trezorshield.cloud/\r\nOrigin: https://trezorshield.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T05:24:27.754443Z","times_seen":17773657,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/templates/basic/images/shapes/banner_1.png","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/templates/basic/images/shapes/banner_1.png HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 38007\r\nLast-Modified: Tue, 30 May 2023 14:17:28 GMT\r\nConnection: keep-alive\r\nETag: \"64760578-9477\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38007,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 619 x 797, 8-bit/color RGBA, non-interlaced","md5":"b0779c3b67cb181bb57c95208e667322","sha1":"9b09d002f65b0377f44e8084e6a8aa2ca4cf1a9c","sha256":"1c16c2f7e635bc2a29c3b1b40c71befbddd5914675d22dfa60f5af7f61a8bb9b","sha512":"ce579e5cadaf9b468cc409980edd01f18978ef55b794054f8cc6c7faf590de3d67fa9eed25bb4d1068881a2e273603efb623f6b84df9221c5641422a08b74bc4","ssdeep":"768:0gdY6VV1x5NI+wDV0rWYh1CJWqgjjbuKZAP2Uh6YmUPIlq8LqjhrQZr:7dzV7/IrxCqgjiPBh6TifWq1rsr","tlshash":"a903f10e1f288aace85bb2bdffbc1bb4171958a53178648fa11997038f00576f6d45d8","first_seen":"2023-12-29T00:16:33Z","last_seen":"2026-07-08T10:38:32.944572Z","times_seen":77,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":264,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/images/frontend/choose_us/648dae2a2ab661687006762.png","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/images/frontend/choose_us/648dae2a2ab661687006762.png HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 53824\r\nLast-Modified: Sat, 17 Jun 2023 16:59:24 GMT\r\nConnection: keep-alive\r\nETag: \"648de66c-d240\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53824,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 920 x 480, 8-bit/color RGBA, non-interlaced","md5":"27b7139eb906095a2a9813b2427b4385","sha1":"4a716fd9c3ddd10739f23e29b412a4dbe5e421c1","sha256":"ef729961cd8c17792a1a1de844777f02073c7113f32d1dd294e90d76f7529cdc","sha512":"fc26c57c4436eb25e6a0754a775da0cd86cd0203217fdd0853efd3a3c779af72e1f50afee4d5f11e3417c41e2f86e7bab017a71375ed5f9e88816240e0d1f64f","ssdeep":"1536:pPlpJGlrZks0nGYRiUBMLO+IfoIKotMgr7dkSwc:pECFdRZMO+qoI6kyNc","tlshash":"c033f146e4b9f908eea6a07448e3de726b77a191202f03b4c35668b911cb4f92e16d43","first_seen":"2023-12-29T00:16:33Z","last_seen":"2026-07-08T10:38:32.959118Z","times_seen":68,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":381,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lexend/v26/wlpwgwvFAVdoq2_v-6QU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/lexend/v26/wlpwgwvFAVdoq2_v-6QU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trezorshield.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39680\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 06 Feb 2026 13:20:28 GMT\r\nexpires: Sat, 06 Feb 2027 13:20:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 73400\r\nlast-modified: Mon, 08 Sep 2025 18:15:35 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39680,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39680, version 1.0","md5":"2077a5271e5c1164bdd3fbe1744157a7","sha1":"91313f8a6f0a223205216ab3b6083d135dad61bd","sha256":"b7e7538f59bff1812841d7627f8e49e70fe86438f9f7b397a028c0d05301c874","sha512":"322ed8166992e29dc0be1e3e7d4f576cf1ef6bd70718ee142941271e31b195743c0f81bde2c0ca8e66693b668a7de9136be109b9fdbd5f92d0a2e2a41877988e","ssdeep":"768:p30StOXMA65YrEtTPMSzK/s7n0/YXUxK1SSI8e/x3aHCBiciuZW:p30SGMAWYQJMiK/k0/gUQ0S0kum","tlshash":"9a03014933314d5238093239ff91edefae57c321e908f9184594e58ffc8a71e5aa091a","first_seen":"2025-09-09T15:01:21.644742Z","last_seen":"2026-08-08T05:39:52.627713Z","times_seen":7519,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":207,"dns":0,"connect":0,"send":0,"wait":31,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lexend/v26/wlpwgwvFAVdoq2_v-6QU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/lexend/v26/wlpwgwvFAVdoq2_v-6QU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trezorshield.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39680\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 06 Feb 2026 13:20:28 GMT\r\nexpires: Sat, 06 Feb 2027 13:20:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 73400\r\nlast-modified: Mon, 08 Sep 2025 18:15:35 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39680,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39680, version 1.0","md5":"2077a5271e5c1164bdd3fbe1744157a7","sha1":"91313f8a6f0a223205216ab3b6083d135dad61bd","sha256":"b7e7538f59bff1812841d7627f8e49e70fe86438f9f7b397a028c0d05301c874","sha512":"322ed8166992e29dc0be1e3e7d4f576cf1ef6bd70718ee142941271e31b195743c0f81bde2c0ca8e66693b668a7de9136be109b9fdbd5f92d0a2e2a41877988e","ssdeep":"768:p30StOXMA65YrEtTPMSzK/s7n0/YXUxK1SSI8e/x3aHCBiciuZW:p30SGMAWYQJMiK/k0/gUQ0S0kum","tlshash":"9a03014933314d5238093239ff91edefae57c321e908f9184594e58ffc8a71e5aa091a","first_seen":"2025-09-09T15:01:21.644742Z","last_seen":"2026-08-08T05:39:52.627713Z","times_seen":7519,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":205,"dns":0,"connect":0,"send":0,"wait":28,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sockjs-------------------.pusher.com/pusher/app/-------------------/895/3jqs82td/xhr_streaming?protocol=7\u0026client=js\u0026version=7.0.6\u0026t=1770457444889\u0026n=3","fqdn":"sockjs-------------------.pusher.com","domain":"pusher.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:44:04.902Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /pusher/app/-------------------/895/3jqs82td/xhr_streaming?protocol=7\u0026client=js\u0026version=7.0.6\u0026t=1770457444889\u0026n=3 HTTP/1.1\r\nHost: sockjs-------------------.pusher.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://trezorshield.cloud/\r\nOrigin: https://trezorshield.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T05:24:27.754443Z","times_seen":17773657,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/templates/basic/images/shapes/bg_dark.png","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/templates/basic/images/shapes/bg_dark.png HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:48 GMT\r\nContent-Type: image/png\r\nContent-Length: 36141\r\nLast-Modified: Tue, 06 Jun 2023 17:07:28 GMT\r\nConnection: keep-alive\r\nETag: \"647f67d0-8d2d\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36141,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 716 x 792, 8-bit/color RGBA, non-interlaced","md5":"10c323c5a2beddb3e0831dbcaf88a3f1","sha1":"9aa21cda89481572af365a9a4a1a5e68a040821d","sha256":"ea1d62d8b0edda32640a0908df8956175b448a79e1eca4e4f62ea797356eabce","sha512":"6a44c8f875074c390b8b201443dbb4da034f19a3569e5da682c533e69e95899bd63b4edd9795ee2be73e8dee98bf2120e17ae18c93c7f6ad058f9820b743f6ab","ssdeep":"768:2FVIXDqOuIw4tYQSwRoOjQnvyHERZIpDC9nC5GXkt3:muXDBuIF+wiNn6HWxnC5GXu3","tlshash":"3af2e1c0eba8874de99cef8f14d23559602b7c499f07e04526f2e7f80d2776ce622650","first_seen":"2023-12-29T00:16:33Z","last_seen":"2026-07-08T10:38:32.937931Z","times_seen":76,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":524,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/images/currency/691330e726f7e1762865383.png","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/images/currency/691330e726f7e1762865383.png HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 4577\r\nLast-Modified: Tue, 11 Nov 2025 12:49:43 GMT\r\nConnection: keep-alive\r\nETag: \"691330e7-11e1\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4577,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"86387638656cf7d5a92b36bc6ed0681d","sha1":"29f5162142048799ceed0befbfea9099a2ebc062","sha256":"76779c5e9b4061a57bfa6ec3ef90f18c2886dbbe76fb20e3ebc912a825c9e684","sha512":"85567941557c6dcb944b6c05999547b7dd735b3a9da8e3f25c4c7c350d64db89c9b90c4303fa7a54fae5685776f27fa3d9044560685afdd5003ceac783e60492","ssdeep":"96:IS+Ej5kkC0RlpG8EDR4CN9CzppTv9iL6grlJAkEP/FI/y2fv:IS7jOD8WJDOpTFiLPlJ7qtIK2n","tlshash":"df91aec624e2f1452fa1e67ba80079c08bcb3a21270ac317f5bf4979b38240d6e44c67","first_seen":"2025-09-03T18:44:12.10159Z","last_seen":"2026-07-08T10:38:32.954884Z","times_seen":11,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":220,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sockjs-------------------.pusher.com/pusher/app/-------------------/693/shhif94b/xhr?protocol=7\u0026client=js\u0026version=7.0.6\u0026t=1770457433890\u0026n=2","fqdn":"sockjs-------------------.pusher.com","domain":"pusher.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:53.897Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /pusher/app/-------------------/693/shhif94b/xhr?protocol=7\u0026client=js\u0026version=7.0.6\u0026t=1770457433890\u0026n=2 HTTP/1.1\r\nHost: sockjs-------------------.pusher.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://trezorshield.cloud/\r\nOrigin: https://trezorshield.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T05:24:27.754443Z","times_seen":17773657,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/templates/basic/css/custom.css","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/templates/basic/css/custom.css HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 28 May 2024 10:13:08 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6655ae34-1207\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4615,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"2fbb5d4dc16dafd52ed689e8f400a74c","sha1":"085b217847911cd2ae9b255f29195d48a0876be4","sha256":"ca9175f97c8a3361f0d821adcb6d0e1101fdf2da963fa0e8dbf685d5afa33c0c","sha512":"2e5b1f8bf74835fb2fd47b9ff40695a62c386e124d16656b16830a87db330e400a6994a274e0beaddcbb35c45def2da4b16ed0707b227a3cf400cb49c7959d0b","ssdeep":"96:hLVMREKFnIN1ybdBUpfWMg0dblMrUZFyE24IJD:hLVMRE2IN1KHUpftg0dpME24C","tlshash":"5f91cf59ee06114222379b289be2479dfb3810639f120a7cb7cd23a50fb51ac9761fdd","first_seen":"2025-01-15T11:03:51.124875Z","last_seen":"2026-04-17T05:21:20.961288Z","times_seen":62,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/images/frontend/how_to_invest/648db7736066c1687009139.png","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/images/frontend/how_to_invest/648db7736066c1687009139.png HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 72880\r\nLast-Modified: Sat, 17 Jun 2023 17:39:00 GMT\r\nConnection: keep-alive\r\nETag: \"648defb4-11cb0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72880,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 630 x 470, 8-bit/color RGBA, non-interlaced","md5":"86002032d194ec09dc1a2fc91696a87c","sha1":"dfe17b6092fe0705eb44d5952789335b867dfcfb","sha256":"2a46fd69c6da7dbc730ebc9d6ac147792c72ff613a0f92b3145f2c1557d0440d","sha512":"03f0192ccfe7cbd51af9d3992ea22e1d758aa86817ba7d46e8cb853ba4411a0883bb819301482be8fa2ece925f0d3f3a39db7eab1884e1b438937c28121c827f","ssdeep":"1536:nCfsZO7/Rhw5Exn2SQV0pOj4KZUYUdZE//sQZ3QgZcfSd3FqbA441Gl:npOjjFnhqtnUXEtJHWQwbA4yc","tlshash":"8a630202a9f5e2c013d68b7479a18917c8fc22219b279ccf09ada9b9643f771ccd557c","first_seen":"2024-08-19T16:03:13.408123Z","last_seen":"2026-07-08T10:38:32.985792Z","times_seen":64,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":287,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/images/logo_icon/logo.png","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:48.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/images/logo_icon/logo.png HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:48 GMT\r\nContent-Type: image/png\r\nContent-Length: 15556\r\nLast-Modified: Mon, 10 Nov 2025 20:30:49 GMT\r\nConnection: keep-alive\r\nETag: \"69124b79-3cc4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15556,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1301 x 247, 8-bit/color RGBA, non-interlaced","md5":"f0d0aa99084dbdb376fe4060624c1bac","sha1":"92266936b9026d94593cc750eab48456158e15f0","sha256":"2ffd74d9dc1f6e680df7b7e3efbbe619c17b7bc866e9e11df74a43ea43946526","sha512":"3f05262485a261f36226a7c0f419088540547782144a5ef40839823c79e56998b2607428b434015fa21d5ff44b053c2ec8718b41925fa1f9a4d6ed4445155b21","ssdeep":"384:65P5Pb/hDKa2KHwj9boYW1bLmArGsR3HoA:sPcazQjloJbLmUJ33","tlshash":"44629d8032d1fc4741a2a07e99b599d5a310c3bbd57eeee4fd7e9391820139f2416ad1","first_seen":"2026-02-07T09:04:21.285804Z","last_seen":"2026-02-23T15:02:25.867625Z","times_seen":3,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/templates/basic/css/main.css","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/templates/basic/css/main.css HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 29 May 2025 12:45:10 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"683856d6-29120\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":168224,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"abdad8fd9ab5e22e6487fb54f26d2150","sha1":"98103ce5a22c470931e4994e8882a5c52f9deffe","sha256":"d0cd0458824cc2e27637b0cc07a4321a951286e5a9b4a48bcc857baf12e043a1","sha512":"678f794172a4f87c4e72865829b896e3c2aebb501275fa9747f827e6ed0911ae7e432ac9e251fe54d8162180af70c352cea3a88d10f23168dc0ebb953bf7d6f5","ssdeep":"1536:YWJM+Ar+LpUdAS3oEBpeM/8Y4nkqbJIwfTf83z:nJU4n/6","tlshash":"1ef386a1c912206a2637bf39939d473cfb7520328f0a17e9bdd5606497c17f84126eee","first_seen":"2026-01-04T08:23:17.203483Z","last_seen":"2026-07-27T04:26:10.414713Z","times_seen":14,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":28,"dns":1,"connect":25,"send":0,"wait":51,"receive":2,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/images/extra_images/p2p.png","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/images/extra_images/p2p.png HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 1846\r\nLast-Modified: Sat, 09 Dec 2023 17:20:56 GMT\r\nConnection: keep-alive\r\nETag: \"6574a1f8-736\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1846,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"6b83fb83a101de206189ea9e9e21282a","sha1":"030e74eba0ecfad64371d11c35d80f1e84636fa4","sha256":"5026cb4246bcc5b5b5ee3f6b2e65bb54555aa580857eb08489ed9299ff6b0e2f","sha512":"5b1e1833050e9601ca11f83eab0a6d86348328203a017efea6330c47461e68dd8f8eb2b0c65f791daac380dc7235d50ada86edce9279ff8fbff8b1fbe6f1c896","ssdeep":"","tlshash":"8b31197b066c9babf209507ee34bb47c5d15509b289b648c546a5234932d39fd5e80c0","first_seen":"2024-07-22T23:51:08Z","last_seen":"2026-04-17T05:21:20.966126Z","times_seen":54,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":401,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/images/frontend/how_to_invest/648db77371abe1687009139.png","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/images/frontend/how_to_invest/648db77371abe1687009139.png HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:48 GMT\r\nContent-Type: image/png\r\nContent-Length: 69900\r\nLast-Modified: Sat, 17 Jun 2023 17:39:00 GMT\r\nConnection: keep-alive\r\nETag: \"648defb4-1110c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69900,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 630 x 470, 8-bit/color RGBA, non-interlaced","md5":"aaff6ccfc12e6f5e9ff4720a2424a057","sha1":"57f7032faf463d5194296f4c23f38d9914b7ea28","sha256":"510c1440979bda076551b2ed5578e479120d20b06754ebbb4eb1012bdf75f4c1","sha512":"fbc6577ffeb19fc08a7f667952bd88cdc2deb7f7cb6f40ec9396cdc272f8ad15bd022218214270f85eefddafe3b14f7fae70b86107282a8fe1996dc7b56fcb6a","ssdeep":"1536:d5TtUq1Bgq92mJ/zCPfc/s/nC9YwtRLSTPMaEgzA:d5TtBga28rCXc/6qt+UZgM","tlshash":"a9630229d5419fb7904fa7f90c1aa3d3c78005629e31fb0767043ae9a7f3c6c6187a09","first_seen":"2024-08-19T16:03:13.406551Z","last_seen":"2026-07-27T03:05:49.197437Z","times_seen":68,"resource_available":false,"data":null}},"time_used":522,"timings":{"blocked":493,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/images/currency/691330f704c251762865399.png","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/images/currency/691330f704c251762865399.png HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 5778\r\nLast-Modified: Tue, 11 Nov 2025 12:49:59 GMT\r\nConnection: keep-alive\r\nETag: \"691330f7-1692\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5778,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"d71bd64e82c63d2b0e74b473801e0d0a","sha1":"a151ca01ff15e637726bfc7cfdeafe1d3883abcb","sha256":"2e9d1d3a8ad3793e26ea12976b164148fee0e82e7e63e21fa8a9852ffcaede62","sha512":"2a9134c1e107cf39554a28f9bc8153eafa2c318f3497121e7b7ba03bc21dd6143145cfe23129f7dd8b415fda75a9e996ff47347970d54117d17c8176b0571fbb","ssdeep":"96:oQY7cc5IANCvydL6Od8zaP9MK5/j8j293H1L9exDEJEi6:oQwcPvxOd8eMK5Ie3HbmDEJEv","tlshash":"28c18ef36697fc6a2055cef9c3541c1a46875d0f8a26c0847abe4c18d05d3d4ef286ea","first_seen":"2025-12-12T22:39:12.239833Z","last_seen":"2026-07-08T10:38:32.956281Z","times_seen":5,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":193,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/global/css/iziToast.min.css","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/global/css/iziToast.min.css HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 22 May 2024 10:36:44 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"664dcabc-a21c\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41500,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (41419)","md5":"ca2f839e9a41207ce4d486b75b0dc926","sha1":"398acaa4eca2baa749a90175fe24d3c2a35f19ca","sha256":"20b2776eaee552defc7c9b25bfef14a891f0dd4a12ac7320d689d749e1ca0fa7","sha512":"d9feb978fe3c1c26cbb2efb380a70eeb7501f5631343a998abfc84766f9a6d2f1e521cee40bcff6b381515a7a1d8fb4726af583502ee23549934757766257f5c","ssdeep":"384:pV5zpPVWahj8Ik/4kYip7pHRiJhkgL6LlG1oLzlRCPoA50UhLoMPFPsR4lweGbzi:zPVNhlHgppGf1oWQA1","tlshash":"711345fd15f0124454c6ab4296da6a980e3fcd9770ea1cef32cd344b8b46b9e136532b","first_seen":"2023-04-10T01:39:17Z","last_seen":"2026-08-07T17:35:40.736893Z","times_seen":2379,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Lexend:wght@300;400;500\u0026family=Outfit:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:56 GMT","end":"Mon, 06 Apr 2026 08:37:55 GMT"},"fingerprint":{"sha1":"DE:3B:B4:94:98:33:3A:CB:2A:A9:96:A1:CB:19:8C:84:B5:8D:23:E9","sha256":"D0:A1:5A:83:80:77:19:74:AA:CB:27:69:4A:C7:2C:F0:DA:06:9C:79:1E:07:77:9A:4D:7B:5D:AA:A2:D2:D4:E9"}}},"request":{"raw":"GET /css2?family=Lexend:wght@300;400;500\u0026family=Outfit:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 07 Feb 2026 09:43:47 GMT\r\ndate: Sat, 07 Feb 2026 09:43:47 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7051,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"5e38bb8c9016010620bb8aa6882e60ff","sha1":"954357c0bb2bbc9bb2b64727edf259a633a0747f","sha256":"1d90f4f5dadbefb42ced6d4224dc359472b09418cd1869191333e5f003319eb7","sha512":"3e2a5bcd3380db352cb2c41369a6781806e2c749b3288129f51df6bb9b03ee379927b859db21a6dd539f3de46077e655961d5faeb8e6fc435310be8389f7b96f","ssdeep":"96:cUgO1aAXgO1aA3Jc+uggO1aAXNDUgOEaAXgOEaA3Jc+uggOEaAXNDUgOXaAXgOXm:cJhuQOUMudO7TueFh6OhprhwEhXV","tlshash":"46e1cda1086ba100db970dc122ce7e37ee5f62517440d938affd18dcadabd265356b0d","first_seen":"2025-09-22T13:12:09.987425Z","last_seen":"2026-07-27T04:26:10.348774Z","times_seen":32,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":90,"dns":1,"connect":21,"send":0,"wait":31,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/global/webfonts/fa-solid-900.woff2","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/global/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/assets/global/css/all.min.css\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 156496\r\nLast-Modified: Wed, 22 May 2024 10:36:44 GMT\r\nConnection: keep-alive\r\nETag: \"664dcabc-26350\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":156496,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 156496, version 773.768","md5":"6c4eee562650e53cee32496bdfbe534b","sha1":"1aae708e3b94ee981b452a918d28ed037fbb5e18","sha256":"9fc85f3a4544ab0d570c7f8f9bbb88db8d92c359b2707580ea8b07c75673eae2","sha512":"ebcb5a2e2a908228f77ecd03b45491778cad73ddc39fa3a6334b129aaf9fa36c16c0307aeaad74d77f616b5b34aac52d91e9f4816945253dc9a826ddd71f4d12","ssdeep":"3072:OvM6gZMLmY8uGpjVnlooQ+GQs8jic0f/KkMdE:OU65LoP5QSsuic0f/cdE","tlshash":"8ce31200d620498d9978fd5b2a1fa1ffa7a939c95ed210bad3c30cb93257143bbc2556","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-08-08T05:09:48.640891Z","times_seen":49781,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":115,"dns":0,"connect":0,"send":0,"wait":26,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"ws-------------------.pusher.com/app/-------------------?protocol=7\u0026client=js\u0026version=7.0.6\u0026flash=false","fqdn":"ws-------------------.pusher.com","domain":"pusher.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.937Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /app/-------------------?protocol=7\u0026client=js\u0026version=7.0.6\u0026flash=false HTTP/1.1\r\nHost: ws-------------------.pusher.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://trezorshield.cloud\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: V+tZqIwV7LsFjpU8vt8/+g==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T05:24:27.754443Z","times_seen":17773657,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/templates/basic/css/slick.css","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/templates/basic/css/slick.css HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 29 Aug 2022 09:15:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"630c83bc-765\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1893,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"7dd6efe7556ca666dca0126387feed72","sha1":"8bbd779ec8580ec0f0b8233eaafdb1bb5090671b","sha256":"2ea14b8011f2330241a3f98a5b444db57214f133728ca671c86fa0d160ec5324","sha512":"a8d94b842400f96aa98f2d739f435b9f386f45693f50e2ed23ae380e9eb5426ac6b82e85879ae00d31969d144557d01d50e0b800955bd48db6aaa0811958bad6","ssdeep":"","tlshash":"ad41fadc0652c5d68733c4444fd38649eeefa0930c251698ba8d47098fbfae8a9c5e77","first_seen":"2023-04-08T04:13:47Z","last_seen":"2026-08-07T19:15:45.783829Z","times_seen":2612,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":29,"dns":0,"connect":27,"send":0,"wait":25,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/images/language/64aa848532bab1688896645.png","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/images/language/64aa848532bab1688896645.png HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 4051\r\nLast-Modified: Sun, 09 Jul 2023 13:57:26 GMT\r\nConnection: keep-alive\r\nETag: \"64aabcc6-fd3\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4051,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"d8a4c26d222ac668c426d18254ead99b","sha1":"6afe6a6c2350f83bfd5c6ef6685e23d970320aac","sha256":"a04281f022d3d87b62fa6f80d8343a2ef351b91bd84041f1a25d588838d7f738","sha512":"8932fcffd88172774cc218515668af2fc24f71f45fdffecefa775b8d74050020dbb4d0ee27ed5841bdcc1005a2a0996693a76e8425221936c89a3af3c6591ab6","ssdeep":"","tlshash":"e0816ef34224a7971ed6e0aed4333c4e76076d96053b7dd84fd5ee22593154b25c60c8","first_seen":"2023-12-29T00:16:32Z","last_seen":"2026-07-08T10:38:32.935061Z","times_seen":74,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":270,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/images/extra_images/bar-chart.png","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/images/extra_images/bar-chart.png HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 1534\r\nLast-Modified: Sat, 09 Dec 2023 17:17:48 GMT\r\nConnection: keep-alive\r\nETag: \"6574a13c-5fe\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1534,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"ecbc5afb123d78111975944bacb3339a","sha1":"25e6ab9ac611a8bcd05c3c890f5eab7ecb6cb7f9","sha256":"ec0af6d6038a22394948a51634f42323a98b61294f26fe652c5e3df9246fe2d1","sha512":"246d6e8d21b09b768b8d50763adfe6d261c5c2cfed0c48db8f3ac87331adb51eba7b035cab1110ab83bf6d09a24eda8540761a3a9d597b25df709749caa1366d","ssdeep":"","tlshash":"89312c4a7702765bc9525515d4310141132fdce42b10ddcc5bd0d7bba0678c4d0bf533","first_seen":"2024-07-22T23:51:08Z","last_seen":"2026-04-17T05:21:20.95074Z","times_seen":54,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":269,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/images/frontend/banner/648d9ecec9f4d1687002830.png","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/images/frontend/banner/648d9ecec9f4d1687002830.png HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 30643\r\nLast-Modified: Sat, 17 Jun 2023 15:53:52 GMT\r\nConnection: keep-alive\r\nETag: \"648dd710-77b3\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30643,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 360, 8-bit/color RGBA, non-interlaced","md5":"af65b27c02158258c87d9979496d1c7d","sha1":"e0a91f5944ac2dd10da0543460b353ac0be74f83","sha256":"9df27694477dcedf111ab602086b3cf2ba9e8e5814c70fc9ea6353dfecc2e34c","sha512":"2e96d43c0842321868f36979c6030ef230516fb52bc05eb4499c688f721dda448fc3b121c718c4e375b9f9768e5296ddc33c65863dd95085593ddaf53633207d","ssdeep":"768:BEDi0fOTfk6bulhMjHodUEMV2eMO1gJ6tLqVMe8XuE:uezTs6buSIdUlg7WLdXuE","tlshash":"18d2e1dbc832be3522027d92f77908d80dddd3a43655a846f14bdb61e91dac4be61e10","first_seen":"2023-12-29T00:16:32Z","last_seen":"2026-07-08T10:38:32.99891Z","times_seen":60,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":298,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/images/frontend/banner/648d9eced917b1687002830.png","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/images/frontend/banner/648d9eced917b1687002830.png HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 2574\r\nLast-Modified: Sat, 17 Jun 2023 15:53:52 GMT\r\nConnection: keep-alive\r\nETag: \"648dd710-a0e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2574,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 155 x 155, 8-bit/color RGBA, non-interlaced","md5":"9b3a776d235c57853cc179f1dabd9a3e","sha1":"ae66d59687e6b943395fcdfb3ae1fc8712862649","sha256":"ce30d65d9b220a72e15f0fb978b222e901523a073bc3e614dc60382fabca0423","sha512":"2e11c56026a3eb0445382382141eea4beb976930fec45507efbecb6fd7922f99ba5efe4c1ff449a6c42977e78ad999ce8c35231bb719e7b405699b3b0fcd4a63","ssdeep":"","tlshash":"49514175d820f94c976937e03966f62e49be62ca742c0f383491dc7979aca0d53c25a3","first_seen":"2023-12-29T00:16:32Z","last_seen":"2026-07-08T10:38:32.996146Z","times_seen":64,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":323,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/images/currency/691330c730d3e1762865351.png","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/images/currency/691330c730d3e1762865351.png HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 3638\r\nLast-Modified: Tue, 11 Nov 2025 12:49:11 GMT\r\nConnection: keep-alive\r\nETag: \"691330c7-e36\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3638,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"f3a470f61ee998c5278500516b219569","sha1":"4bff093c48539b8e4c3cc84c71adc51c5160fc94","sha256":"e3d93e57b698c9fa59064d8a0c7da96fb63aa75d17d4a7ffea04bf86e404c5e5","sha512":"77b936c75e42a19657e0462f7d01ed49b64f374d59c2bc9ee5c51352fc472b2a1b4c9320a2a7bc360233a6bf4755f65fb476a6ee0b33f64a61e7ab474a6980fe","ssdeep":"","tlshash":"ba718fc9f841da7904ba07245d87e52bf561abe8547638e9c0ed3cba71bdb0b2d70d04","first_seen":"2025-09-03T18:44:12.041954Z","last_seen":"2026-07-08T10:38:32.948924Z","times_seen":14,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":198,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/global/js/broadcasting.js","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/global/js/broadcasting.js HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Wed, 19 Feb 2025 15:54:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"67b5feb0-abe\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2750,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"f43cade3a12d7d87851efefcd1525987","sha1":"b436714ea9dc206f41da9b7a88b37951707b8379","sha256":"91f58c69d35f087a01b7aeb88b28f655b9d26a47d8a8add42a83c132886d2b30","sha512":"9afcd197a2b82e88db101e0ceb3bc2b664263b9b1c83680dc590236631d4fc6e16989bc97468812ba7f1092ed11d518224c814e96313f9d76ac04c61590f0196","ssdeep":"","tlshash":"4f51bd2eb0b0101511bb6697095acb50dc365b3bc3d25202be1ec4f62f3267db556fe9","first_seen":"2024-08-19T16:03:13.64006Z","last_seen":"2026-07-27T04:26:10.323922Z","times_seen":70,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/global/fonts/la-solid-900.woff2","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/global/fonts/la-solid-900.woff2 HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/assets/global/css/line-awesome.min.css\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 96752\r\nLast-Modified: Wed, 22 May 2024 10:36:44 GMT\r\nConnection: keep-alive\r\nETag: \"664dcabc-179f0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96752,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 96752, version 1.0","md5":"36fc297902c9a2e857858baa6ac25f2c","sha1":"89d9531c0c70a8751dff83c1917baab1f16a2071","sha256":"10a68e01209d939afa9318ee71601b0a6e10f025d4cd6d98a492d340b73941fb","sha512":"c5711d5027762fbc8d352dfdf64094958348b873671c891e8c5cf701a569c3bad672a380db7fad76692bf79dc9235b37f76b6f42f73698c9f85d2c7a23aa62fd","ssdeep":"1536:H8wZeXMjWqtJeAAHBX6ANib7HTYJv+Nr1ScHQjn6t/k5LBNCMAG35y:H8hXMjWeeVHtA7evKr1Xwelk51N4Gw","tlshash":"1f930257f0921be097c688990e189035cd39fd71397fe9f4e603ae4cc361927e52a4b6","first_seen":"2023-04-05T18:32:05Z","last_seen":"2026-08-08T04:52:51.48311Z","times_seen":13656,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":27,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-07T09:43:47.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/8.3.6\r\nCache-Control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nSet-Cookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; expires=Sat, 07 Feb 2026 11:43:47 GMT; Max-Age=7200; path=/; secure; samesite=lax\nexchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z; expires=Sat, 07 Feb 2026 11:43:47 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.3.6","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":78978,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (383)","md5":"b9613383361e73db23fb3acc30469343","sha1":"d7eda79ac7698802671eb044f4119c874d597621","sha256":"b647b0376a8fec7d57b3089505adbc5f97d5383e703b97fe641897ed156584c9","sha512":"83645f70c55873810c135e605e8c7838d3ca884fc780c17304cc170a7f7144c5633d85cbbe82ef1992400d74bd52a8ae361936b3f8d25becf31147986436f6ec","ssdeep":"384:rmh6SHB37Xwe22ifZLX3efuAwpnFI2rxWWwzClF+YXI/zYIw87KMKIK9K+KM8JvS:i37XjMLX3elE87fTapcZNIxw1R4RWa","tlshash":"6b73002250f6617741a3e0c6b6262b1bafd2d507ca9b4206f7fc07885fd6d82dc53a2d","first_seen":"2026-02-07T09:44:14.715157Z","last_seen":"2026-02-07T09:44:14.715157Z","times_seen":1,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":48,"dns":0,"connect":23,"send":0,"wait":99,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/templates/basic/images/shapes/banner_1_dark.png","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/templates/basic/images/shapes/banner_1_dark.png HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:48 GMT\r\nContent-Type: image/png\r\nContent-Length: 66986\r\nLast-Modified: Tue, 06 Jun 2023 17:08:40 GMT\r\nConnection: keep-alive\r\nETag: \"647f6818-105aa\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":66986,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 619 x 797, 8-bit/color RGBA, non-interlaced","md5":"9d7dfd6c075b02a942ac7bee6c3e9e9b","sha1":"be9ede5686535f5d87b97a681db9ceb73e11aa9b","sha256":"648c0bf193e50969d7a3e859490cecb6a5683a122421286fa51a8dd01aac5521","sha512":"f31ea9e7a6b1facb7b3ec5d7d9512190ff6f904d1923deaf9480b4c79212d2d7b623bc4b71aa720a760d40b6786e9a53fe798b0f83c2c334de052cf207f8a5ae","ssdeep":"768:5h1i3pKPRrGdFyO7tJJaJ/b+Kj2erQwvQ1qU+ZsvqUvc9NhVgDwD9eH5m9+Xq2xh:/VG6q8tb+Kj2WQcif2zgsD9c1QCu/Rg","tlshash":"856302ac6a471ab7e343507f57f1b225bf141697bbea8b54280adbffb057118e741020","first_seen":"2023-12-29T00:16:33Z","last_seen":"2026-07-08T10:38:32.964706Z","times_seen":77,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":514,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/images/frontend/subscribe/648e95af074e21687066031.png","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/images/frontend/subscribe/648e95af074e21687066031.png HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 47130\r\nLast-Modified: Sun, 18 Jun 2023 09:27:12 GMT\r\nConnection: keep-alive\r\nETag: \"648ecdf0-b81a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47130,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 330, 8-bit/color RGBA, non-interlaced","md5":"f0eda623809e5711f6858a107ac2643d","sha1":"321ec13da482c7ae4d8dc25f4f6db05bc649e63e","sha256":"99f8192d6262af33e1e891c37e2d1634d64651657aace5bc1b4a9d1d33b923a3","sha512":"61be7165a94d28de73f5685890404c5bc222a3fdb4ab557dfd1a0b65a86e787ff38908d64f49fee2c46fd69be5490788d533747d370e753ca38b6d3bde6b69b1","ssdeep":"768:ayojzbv4PwUYtddwhrR6lWX/1GGnNvmOVHSa2no/kV1gKUQl:S4PwUYbdwhrklS1bnNZpSa2nwgSol","tlshash":"5223f1ca6c6dc6ce9d281985012181380debb865241c7ef2ab7eb41d4f5f59c4668fec","first_seen":"2024-08-19T16:03:13.397017Z","last_seen":"2026-07-08T10:38:32.970049Z","times_seen":58,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":215,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/global/css/iziToast_custom.css","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/global/css/iziToast_custom.css HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 22 May 2024 10:36:44 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"664dcabc-656\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1622,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9357db0a076fb39c51171dd008533397","sha1":"3a30fbf23506580ec8ed3e19fe91bf5c4eca491d","sha256":"08373c1b5b174aa870fe86e090d0d7fff5faf78c0d107464a3554edf8912a168","sha512":"393ceea49f00392e2e558dbadb1213bef9c2a3e7adc78104acd557b46030ae8fc146594abfc7c83355a170607ee3c09d31a3f0c252c4b38ead4f3bc41ad80cf7","ssdeep":"","tlshash":"de3108c651f228d1edcab4d44f7b6681653f5c43b1cdc865badc31488fa130538a1b78","first_seen":"2025-01-15T11:03:51.171939Z","last_seen":"2026-08-04T06:10:25.793053Z","times_seen":410,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"ws-------------------.pusher.com/app/-------------------?protocol=7\u0026client=js\u0026version=7.0.6\u0026flash=false","fqdn":"ws-------------------.pusher.com","domain":"pusher.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:44:02.904Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /app/-------------------?protocol=7\u0026client=js\u0026version=7.0.6\u0026flash=false HTTP/1.1\r\nHost: ws-------------------.pusher.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://trezorshield.cloud\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: tOXe3HYEF6UqN6/PD5RwYw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T05:24:27.754443Z","times_seen":17773657,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/global/css/all.min.css","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/global/css/all.min.css HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 22 May 2024 10:36:44 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"664dcabc-190f1\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":102641,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (52276)","md5":"9402848c3d4bbc710c764326f8b887c9","sha1":"b6e555166eb1381392e00adcde9bf8863f16ff01","sha256":"c22cfb6520a7fdbb738632834019acf47c78b1279462c0eb4cb83bae83ecb5a7","sha512":"0d33903bd456087de9a46a9c59a100d41219382eb1c5a97012cc3d73641078021fb65f957a0a2f96779ed5cf505f84dcb6758c9f5dd36727be822326f1ed8bc0","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgSLCJ:O709gMGFiyPG9ZiSLCJ","tlshash":"79a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-08-08T05:08:51.802492Z","times_seen":34329,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":22,"dns":1,"connect":24,"send":0,"wait":49,"receive":2,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/assets/templates/basic/images/shapes/bg.png","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /assets/templates/basic/images/shapes/bg.png HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 31675\r\nLast-Modified: Tue, 30 May 2023 14:30:42 GMT\r\nConnection: keep-alive\r\nETag: \"64760892-7bbb\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31675,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 719 x 789, 8-bit/color RGBA, non-interlaced","md5":"118d5df1951af0186d150302f5e80161","sha1":"90d0c90f54a01f5686ecd1701506b5fd5703a702","sha256":"c6359c5d89a6e280427e56e9bc88792d7db41809046c26ca7d03d247715b903f","sha512":"c87ca45bc7528a348d631e0602b5237e8a94d5585984516847ed7fa8399f1a90cdc5dc11fb0434a7af7e5c52f1edfa2af6cab74cedd5ded01ee6856421b047ae","ssdeep":"768:kFfHwfm1zsoveYZFz6OpvsNH+7GRmS/iqQ2zp:kxXsoveeSNOqHqup","tlshash":"f0e2f1e95142f62550478fad3ffce062ea581934fe03aec084856c5be6e029b57d22d7","first_seen":"2023-12-29T00:16:32Z","last_seen":"2026-07-08T10:38:32.936698Z","times_seen":76,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":265,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorshield.cloud/market/list?type=all\u0026skip=0\u0026limit=15\u0026search=\u0026_=1770457427860","fqdn":"trezorshield.cloud","domain":"trezorshield.cloud","tld":"cloud"},"ip":{"addr":"72.61.200.35","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://trezorshield.cloud/","date":"2026-02-07T09:43:47.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorshield.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:52:43 GMT","end":"Mon, 13 Apr 2026 01:52:42 GMT"},"fingerprint":{"sha1":"E8:C8:11:B5:9A:D6:A9:62:DB:63:46:C1:D7:E2:3F:E4:01:18:AE:C6","sha256":"0C:3E:67:B7:78:8E:89:8A:DC:69:5E:5F:E6:9F:0C:1A:A6:43:D7:C5:B9:F1:CA:09:FE:7F:1C:77:E2:F8:D7:F9"}}},"request":{"raw":"GET /market/list?type=all\u0026skip=0\u0026limit=15\u0026search=\u0026_=1770457427860 HTTP/1.1\r\nHost: trezorshield.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorshield.cloud/\r\nCookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; exchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 07 Feb 2026 09:43:47 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/8.3.6\r\nCache-Control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nSet-Cookie: XSRF-TOKEN=Gl8ku5C5QqFSFMViJ9DGOC77RcVi6l8d5nAo5aQZ; expires=Sat, 07 Feb 2026 11:43:47 GMT; Max-Age=7200; path=/; secure; samesite=lax\nexchange_session=5RXzAbzG02Tx3gNCXYd4NXXVwha2vAT7JUyrKk3z; expires=Sat, 07 Feb 2026 11:43:47 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.6","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1202,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"dfbe38a04a9d317254f10b359031409d","sha1":"4ed7cef7c1cd2f370bc287fe82dc603f5ed7afa0","sha256":"abe2fb7cb90fb732bf96aa7131261a6a122f54f145c328d5020117d338830d84","sha512":"fd55edf4474a2382be9f2bedb132730b10d26da8142a13fa2018c03018101f31fecd78b1342db202deb3fc0d386fb36388b38d96ddc7947374f848eb62f137dc","ssdeep":"","tlshash":"2c219e4316696eb6c5a2298028923fa5242e7acdcccacf49935ecd4e450c396112b92e","first_seen":"2026-02-07T09:04:21.334001Z","last_seen":"2026-02-23T15:02:25.893584Z","times_seen":3,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorshield.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}