Report - trezrxloginv.webflow.io/

Report Overview

Visitedpublic

2025-04-09 10:41:02

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdn.prod.website-files.com	unknown	2019-01-23	2023-11-01	2025-04-02	1.9 kB	156 kB	104.18.160.117
d3e54v103j8qbb.cloudfront.net	unknown	2008-04-25	2016-03-11	2025-04-03	515 B	90 kB	3.164.226.122
trezrxloginv.webflow.io	unknown	2013-05-08	2025-04-09	2025-04-09	480 B	6.2 kB	172.64.151.8

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2025-04-08	medium	trezrxloginv.webflow.io/	Crypto/Wallet

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	From	Size	First Seen	Last Seen
	trezrxloginv.webflow.io/	ScriptElement	181 B	2023-03-07	2025-08-06
URL trezrxloginv.webflow.io/ IP / ASN 172.64.151.8 #13335 CLOUDFLARENET Introduced by ScriptElement Embedded true Resource Info First Seen 2023-03-07 Last Seen 2025-08-06 Times Seen 22021 Size 181 B (181 bytes) MD5 0e9e3ad57abeefde87342864450cc232 SHA1 4dc8676bf3417d597053d5f253fce034007f63da SHA256 9a37601d1f5a5f2fba3b000694d4bf5e035c606d5485dd94e2997cbe2efe5c26 Format Code Loading...

	d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=650d34cee39a1fce58e1f188	ScriptElement	90 kB	2023-03-07	2025-08-06
URL d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=650d34cee39a1fce58e1f188 IP / ASN 3.164.226.122 #16509 AMAZON-02 Introduced by ScriptElement Embedded false Resource Info First Seen 2023-03-07 Last Seen 2025-08-06 Times Seen 128564 Size 90 kB (89476 bytes) MD5 dc5e7f18c8d36ac1d3d4753a87c98d0a SHA1 c8e1c8b386dc5b7a9184c763c88d19a346eb3342 SHA256 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d Format Code Loading...

	cdn.prod.website-files.com/650d34cee39a1fce58e1f188/js/webflow.24a563ff7.js	ScriptElement	37 kB	2023-05-04	2025-08-06
URL cdn.prod.website-files.com/650d34cee39a1fce58e1f188/js/webflow.24a563ff7.js IP / ASN 104.18.160.117 #13335 CLOUDFLARENET Introduced by ScriptElement Embedded false Resource Info First Seen 2023-05-04 Last Seen 2025-08-06 Times Seen 4082 Size 37 kB (37393 bytes) MD5 24a563ff7f33a526f1c5d98a4724b161 SHA1 0a17ff5052db690e6b85b142caf2a2b8a1209be3 SHA256 42ebe676344ce06cd4df40f82e6ce5d899bde9a89691ef37e8f732cabb70e1da Format Code Loading...

HTTP Transactions (6)

URL IP Response Size

GET cdn.prod.website-files.com/650d34cee39a1fce58e1f188/css/trezrxloginv.webflow.66a951ca5.css

104.18.160.117

200 OK

37 kB

URL GET HTTPS

cdn.prod.website-files.com/650d34cee39a1fce58e1f188/css/trezrxloginv.webflow.66a951ca5.css

IP / ASN

104.18.160.117

#13335 CLOUDFLARENET

Requested byhttps://trezrxloginv.webflow.io/

Resource Info

File typeUnicode text, UTF-8 text, with very long lines (2587)

First Seen2023-06-30

Last Seen2025-08-06

Times Seen1869

Size37 kB (37178 bytes)

MD566a951ca5b058d80438f557e5b055a21

SHA198b78e0340eaad9fa184e8776d1bbb2393d4aadd

SHA25685a78ae27fc4dad59836c2d3a2f38faf48f33b990875dd018239ae86bb326939

Certificate Info

IssuerGoogle Trust Services

Subjectprod.website-files.com

Fingerprint7D:61:E8:DA:62:5F:AB:36:75:AB:E7:FF:EE:26:B6:C7:66:E3:D9:49

ValiditySun, 16 Feb 2025 08:59:27 GMT - Sat, 17 May 2025 09:59:04 GMT

HTTP Headers

GET /650d34cee39a1fce58e1f188/css/trezrxloginv.webflow.66a951ca5.css HTTP/1.1
Host: cdn.prod.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://trezrxloginv.webflow.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 09 Apr 2025 10:40:41 GMT
content-type: text/css
content-length: 8304
x-amz-id-2: YpIGDp4JD6kdLAwVWvB38qGZx6DDVGrtWqKkBLY4JI1CqHLM5HgDQeQ7Q+MTCD6tPCEUMetICxQ=
x-amz-request-id: M212QZJ5B3G23HE5
last-modified: Fri, 22 Sep 2023 06:36:05 GMT
etag: "b26795e5abeba9766201eb1a583ee59b"
x-amz-server-side-encryption: AES256
cache-control: max-age=84600, must-revalidate
content-encoding: gzip
x-amz-version-id: HeGJX9zuBjigac6_iNJFugOBAxazthty
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 92d963438ae8b51e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=650d34cee39a1fce58e1f188

3.164.226.122

200 OK

90 kB

URL GET HTTPS

d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=650d34cee39a1fce58e1f188

IP / ASN

3.164.226.122

#16509 AMAZON-02

Requested byhttps://trezrxloginv.webflow.io/

Resource Info

File typeJavaScript source, ASCII text, with very long lines (65451)

First Seen2023-03-07

Last Seen2025-08-06

Times Seen128564

Size90 kB (89476 bytes)

MD5dc5e7f18c8d36ac1d3d4753a87c98d0a

SHA1c8e1c8b386dc5b7a9184c763c88d19a346eb3342

SHA256f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d

Certificate Info

IssuerAmazon

Subject*.cloudfront.net

Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62

ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT

HTTP Headers

GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=650d34cee39a1fce58e1f188 HTTP/1.1
Host: d3e54v103j8qbb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://trezrxloginv.webflow.io
DNT: 1
Connection: keep-alive
Referer: https://trezrxloginv.webflow.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 20 Jul 2020 17:53:02 GMT
server: AmazonS3
content-encoding: br
date: Wed, 09 Apr 2025 02:08:10 GMT
cache-control: max-age=84600, must-revalidate
etag: W/"dc5e7f18c8d36ac1d3d4753a87c98d0a"
vary: accept-encoding
via: 1.1 47cc7d5981f182b935da67eb4606a37e.cloudfront.net (CloudFront)
age: 30751
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN53-P1
x-amz-cf-id: LHVUMCqd4O9ceCB8piTHPDSU8LrQG3SsSwKYps12-HIMkQSvfx2--Q==
X-Firefox-Spdy: h2

GET cdn.prod.website-files.com/650d34cee39a1fce58e1f188/js/webflow.24a563ff7.js

104.18.160.117

200 OK

37 kB

URL GET HTTPS

cdn.prod.website-files.com/650d34cee39a1fce58e1f188/js/webflow.24a563ff7.js

IP / ASN

104.18.160.117

#13335 CLOUDFLARENET

Requested byhttps://trezrxloginv.webflow.io/

Resource Info

File typeJavaScript source, ASCII text, with very long lines (21487)

First Seen2023-05-04

Last Seen2025-08-06

Times Seen4082

Size37 kB (37393 bytes)

MD524a563ff7f33a526f1c5d98a4724b161

SHA10a17ff5052db690e6b85b142caf2a2b8a1209be3

SHA25642ebe676344ce06cd4df40f82e6ce5d899bde9a89691ef37e8f732cabb70e1da

Certificate Info

IssuerGoogle Trust Services

Subjectprod.website-files.com

Fingerprint7D:61:E8:DA:62:5F:AB:36:75:AB:E7:FF:EE:26:B6:C7:66:E3:D9:49

ValiditySun, 16 Feb 2025 08:59:27 GMT - Sat, 17 May 2025 09:59:04 GMT

HTTP Headers

GET /650d34cee39a1fce58e1f188/js/webflow.24a563ff7.js HTTP/1.1
Host: cdn.prod.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://trezrxloginv.webflow.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 09 Apr 2025 10:40:41 GMT
content-type: text/javascript
content-length: 13706
x-amz-id-2: qQxlBszW/rDVV4i+ZDbhdxsqMStB0OjyA65MazCFaKpFwBykzI4rSxMg03jVUDmJWSraIebKTvY=
x-amz-request-id: M21345NR89W96WDT
last-modified: Fri, 22 Sep 2023 06:36:05 GMT
etag: "a505becc886cdcc871c41d1db25b1402"
x-amz-server-side-encryption: AES256
cache-control: max-age=84600, must-revalidate
content-encoding: gzip
x-amz-version-id: QxXlcqnfBYawwxxJuliSn6AlabC15jXH
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 92d963438aedb51e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET cdn.prod.website-files.com/650d34cee39a1fce58e1f188/650d34f57acfb823ade0c44e_trezor.png

104.18.160.117

200 OK

74 kB

URL GET HTTPS

cdn.prod.website-files.com/650d34cee39a1fce58e1f188/650d34f57acfb823ade0c44e_trezor.png

IP / ASN

104.18.160.117

#13335 CLOUDFLARENET

Requested byhttps://trezrxloginv.webflow.io/

Resource Info

File typePNG image data, 1600 x 751, 8-bit colormap, non-interlaced

First Seen2023-09-17

Last Seen2025-08-05

Times Seen514

Size74 kB (74436 bytes)

MD56c4d6d98c6013d673c43fea17771acbd

SHA12516ee7c3d0f7511cd27d86090ca24ea4594990e

SHA256661e106fbe232f3156528a165a75e3a264df3e988def9afc6cac7ac7f2e83ced

Certificate Info

IssuerGoogle Trust Services

Subjectprod.website-files.com

Fingerprint7D:61:E8:DA:62:5F:AB:36:75:AB:E7:FF:EE:26:B6:C7:66:E3:D9:49

ValiditySun, 16 Feb 2025 08:59:27 GMT - Sat, 17 May 2025 09:59:04 GMT

HTTP Headers

GET /650d34cee39a1fce58e1f188/650d34f57acfb823ade0c44e_trezor.png HTTP/1.1
Host: cdn.prod.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://trezrxloginv.webflow.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 09 Apr 2025 10:40:41 GMT
content-type: image/png
content-length: 74436
x-amz-id-2: qwLoIoNcbh4H9df2j0uwXmNSyTT0iZGnl9PunD7nXrOIhAT2yL5S/29k/902VJoQLEwUEAjXRMA=
x-amz-request-id: M212FTFHM8HRWEVG
last-modified: Fri, 22 Sep 2023 06:32:23 GMT
etag: "6c4d6d98c6013d673c43fea17771acbd"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000, must-revalidate
x-amz-version-id: E9bO9V5.rOKlkP0TK_6lSaMNJCB.ShCM
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 92d96344ccbb56a5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET cdn.prod.website-files.com/img/webclip.png

104.18.160.117

200 OK

4.8 kB

URL GET HTTPS

cdn.prod.website-files.com/img/webclip.png

IP / ASN

104.18.160.117

#13335 CLOUDFLARENET

Requested byhttps://trezrxloginv.webflow.io/

Resource Info

File typePNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced

First Seen2023-10-07

Last Seen2025-08-06

Times Seen19081

Size4.8 kB (4807 bytes)

MD54ff20fa6aa65e68a21f28fefb0a2c3e9

SHA18f20cc5b884b7c2642558d11d7cf79e416ea4a7f

SHA256c305e6b8ea9916705eec8eb8c281561d907fdaa0c84f3dbe7b65dac9e2ddf993

Certificate Info

IssuerGoogle Trust Services

Subjectprod.website-files.com

Fingerprint7D:61:E8:DA:62:5F:AB:36:75:AB:E7:FF:EE:26:B6:C7:66:E3:D9:49

ValiditySun, 16 Feb 2025 08:59:27 GMT - Sat, 17 May 2025 09:59:04 GMT

HTTP Headers

GET /img/webclip.png HTTP/1.1
Host: cdn.prod.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://trezrxloginv.webflow.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 09 Apr 2025 10:40:41 GMT
content-type: image/png
content-length: 4807
x-amz-id-2: UauECrsu/Fwm4nD4r3ZKXWqmm1J4/c7h6btEK6rkEwAfG1p2UvSLgdP73veAbBN9rBn9zeJ3HkE=
x-amz-request-id: ZMYAR45QQFKPAWR8
last-modified: Thu, 05 Oct 2023 18:14:58 GMT
etag: "4ff20fa6aa65e68a21f28fefb0a2c3e9"
x-amz-server-side-encryption: AES256
cache-control: max-age=84600, must-revalidate
x-amz-version-id: rSDmpQNuQqoVbh9JRDEaL4vADBvuwdCz
cf-cache-status: HIT
age: 53667
accept-ranges: bytes
priority: u=6,i=?0
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 92d963455dc556a5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET trezrxloginv.webflow.io/

172.64.151.8

200 OK

5.4 kB

URL User Request GET HTTPS

trezrxloginv.webflow.io/

IP / ASN

172.64.151.8

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeHTML document, Unicode text, UTF-8 text, with very long lines (5362), with no line terminators

First Seen2025-04-09

Last Seen2025-04-09

Times Seen3

Size5.4 kB (5366 bytes)

MD51fc323e25d3342c707936a2729ae364c

SHA15e8379cc3ff549ae0b4ad6772486bb368ab895d2

SHA256b7b736c6863f6abc6d144bf0444eda76533c8371ee502b908ad46042501cb376

Certificate Info

IssuerGoogle Trust Services

Subjectwebflow.io

FingerprintD7:06:C9:77:8D:71:FC:33:A5:BC:3D:33:B8:FB:A9:B2:15:2C:36:6D

ValidityTue, 08 Apr 2025 23:09:56 GMT - Tue, 08 Jul 2025 00:09:53 GMT

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET / HTTP/1.1
Host: trezrxloginv.webflow.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 09 Apr 2025 10:40:41 GMT
content-type: text/html
cf-ray: 92d96341893056ab-OSL
cf-cache-status: HIT
age: 12420
content-encoding: gzip
last-modified: Mon, 07 Apr 2025 17:34:09 GMT
content-security-policy: frame-ancestors 'self' https://*.webflow.com http://*.webflow.com http://*.webflow.io http://webflow.com https://webflow.com
surrogate-control: max-age=2147483647
surrogate-key: trezrxloginv.webflow.io 650d34cee39a1fce58e1f188 pageId:650d34cee39a1fce58e1f18b
x-lambda-id: da6f8e44-4d30-411c-a327-8bf59b442063
vary: Accept-Encoding
set-cookie: _cfuvid=Cps6vi0PUSGSpB0BPkxnUrKEk2p5I8_TAe69CQ9viBU-1744195241281-0.0.1.1-604800000; path=/; domain=.webflow.io; HttpOnly; Secure; SameSite=None
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2