Report Overview
Visitedpublic
2025-08-18 12:31:16
Tags
Submit Tags
URL
trezor-suites.io/auth.html????
Finishing URL
trezor-suites.io/auth.html?????#mode=secure&device=ae04a70cbb3-67ae04a70cbb5-67ae04a70cbb6?#mode=secure&device=ae04a70cbb3-67ae04a70cbb5-67ae04a70cbb6
IP / ASN
190.115.21.66
Title
Trezor Suite
Suspicious - Suspicious Javascript code
Detections
urlquery
2
Network Intrusion Detection
1
Threat Detection Systems
1
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
trezor-suites.io 21 alert(s) on this Host | unknown | 2025-08-10 | 2025-08-11 | 2025-08-11 | 11 kB | 1.2 MB | 190.115.21.66 |    |
ipapi.co | 7936 | 2016-04-19 | 2017-01-31 | 2025-08-18 | 385 B | 1.7 kB |  104.26.9.44 |  |
api.telegram.org | 206724 | 2003-12-15 | 2015-06-25 | 2025-08-12 | 609 B | 401 B |  149.154.167.220 |  |
DDoS-Guard (Security)
DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.jQuery:3.7.1 (JavaScript libraries)
jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.PHP:8.0.30 (Programming languages)
PHP is a general-purpose scripting language used for web development.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Nginx:1.18.0 (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| low | 172.18.0.10 | 149.154.167.220 | ET HUNTING Observed Telegram API Domain (api .telegram .org in TLS SNI) |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Quad9 DNS | trezor-suites.io | malicious | Sinkholed |
JavaScript (9)
No JavaScripts
HTTP Transactions (22)
| URL | IP | Response | Size |
|---|