{"report_id":"de0316f4-13bc-434f-816c-1c737181a500","version":6,"status":"done","tags":[],"date":"2026-03-14T18:40:02Z","url":{"schema":"http","addr":"usblog-trezor.com","fqdn":"usblog-trezor.com","domain":"usblog-trezor.com","tld":"com"},"ip":{"addr":"104.21.86.35","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"usblog-trezor.com/","fqdn":"usblog-trezor.com","domain":"usblog-trezor.com","tld":"com"},"title":"Critical Security Update: Addressing the Recent Trezor Data Breach","dom":{"size":25844,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (650)","md5":"9b0523322cf1868fc51582415a04930b","sha1":"2458e6555b7996c0404c9fc57fac6651cd10753b","sha256":"91e11b2f358bffc0d3943a09ee4134241d4bfadfae66dc8a54ee33be2756e2af","sha512":"c21cda2627b668c2c89a2674231cb20858f12fd8bc1fb445b675f9c957cb5eb1d0767e9b97d0a0237cfb934a480d2876f67c5154e85b1e6a360ec24dcee3f271","ssdeep":"192:9q3y/Nl3YfPdwrKOk54YUGrR9O+bum5tWJ6LC7R9WmRyJasDjomxUN6ijVT09IVQ:cCIjvhm96om81AqogHS/HkdP001i","tlshash":"e3c2c797b6f31576b80751a9abfb275a363ac043c20ec6147e8c625ccf099d9983738c","dom_hash":"domhashc2da79e503eb2721e52dd07419dd359e","first_seen":"2026-03-14T18:40:03.322113Z","last_seen":"2026-03-14T18:40:03.825141Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"usblog-trezor.com","fqdn":"usblog-trezor.com","domain":"usblog-trezor.com","tld":"com"},"ip":{"addr":"104.21.86.35","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-18T18:40:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"usblog-trezor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"usblog-trezor.com","ip":{"addr":"104.21.86.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-14","domain_rank":0,"first_seen":"2026-03-14T18:30:01.896802Z","last_seen":"2026-03-14T18:30:01.896802Z","alert_count":3,"request_count":3,"received_data":27228,"sent_data":1433,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-03-08T22:34:03.678313Z","alert_count":0,"request_count":1,"received_data":31565,"sent_data":512,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"miro.medium.com","ip":{"addr":"162.159.153.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1998-05-27","domain_rank":117795,"first_seen":"2017-08-01T13:23:26Z","last_seen":"2026-03-09T17:53:18.062488Z","alert_count":0,"request_count":2,"received_data":46644,"sent_data":962,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","size":31169,"data":"","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-08-10T11:32:50.303112Z","times_seen":78336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usblog-trezor.com/","fqdn":"usblog-trezor.com","domain":"usblog-trezor.com","tld":"com"},"ip":{"addr":"104.21.86.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"741a73e00c86ce35bc9257b68dc38672","sha1":"4aec08e87319eca2fef7b5503493c9e46044ec4f","sha256":"3cd7f86358886fb59de8ad5153a1d79646805b0be88a513210e0487916e7aaa1","sha512":"29a5db4d1e329306b9c17255c173ab3cdb3768358b19de1effc2ae29221393efa3f407331c69ddc89c2a2d5f10c3576f2363b408222bd9ff42845d8f41d8b08b","ssdeep":"","tlshash":"2c21fd88ea93a1e8543b11e4635f642680fb024b791ed501f49c9f006f5fe3bb91d7d9","size":1416,"data":"","first_seen":"2026-03-14T18:30:04.831597Z","last_seen":"2026-03-14T18:40:03.833897Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"usblog-trezor.com/","fqdn":"usblog-trezor.com","domain":"usblog-trezor.com","tld":"com"},"ip":{"addr":"104.21.86.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-14T18:39:41.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usblog-trezor.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 15:57:54 GMT","end":"Fri, 12 Jun 2026 15:57:53 GMT"},"fingerprint":{"sha1":"95:18:D3:FA:5E:EB:04:C4:EC:16:B3:7C:73:D8:AE:76:06:C7:A6:92","sha256":"A7:01:0A:A0:55:9A:61:39:FB:FD:62:30:AA:65:BA:BE:EE:25:22:53:5B:63:73:2F:2A:24:F1:DE:CD:12:12:28"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: usblog-trezor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 18:39:41 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sat, 14 Mar 2026 16:20:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bAVRSDkkiOjNyr1pWuC57vHPYjrCrMOKUQuKCIZqFR1Nw4SfBD2COg%2Ft1k4bQjEzfsNrSepxKtr6N4CsqhEg2wujQ88cFxHQac6VTHEStIrF\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9dc5670b6dc72d96-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24964,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (507)","md5":"4324642b2c110dec373c7345394d1bc1","sha1":"0ce35223ee66cdde1e27807ea523560c21f7bf9a","sha256":"4758fc7ee196a57b5194164c2974894dde92abca00cf83324ee08187886b6c8b","sha512":"e55db76a6065f6343027d76345d3a24833a89ab3c14e7a70fb63988873be8ee5a1e448b2b193a19f27d6ea4c9c0228ec0a7003800258d60b04bdf3f9d856635c","ssdeep":"192:Xq3y/Nl3YfPdwrKOk54YUGrR9O+bum5tWJ6LC7R9WmRyJasDjomxUN6ijVT09IV7:aCIjvhm96om81AqTgHS/HkdCt0Q","tlshash":"13b2a59bb6f71536b80355a9abe7675a373ac043c20dc5247e8c625ccf099d9983338c","first_seen":"2026-03-14T18:30:04.828705Z","last_seen":"2026-03-14T18:40:03.82674Z","times_seen":4,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":35,"dns":1,"connect":9,"send":0,"wait":62,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"usblog-trezor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usblog-trezor.com/","date":"2026-03-14T18:39:41.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:29:28 GMT","end":"Mon, 18 May 2026 15:29:15 GMT"},"fingerprint":{"sha1":"8B:A9:51:50:78:B2:5E:75:31:54:23:BC:80:D6:CA:53:34:E5:CD:8F","sha256":"AF:D9:FB:4F:B0:E1:BD:80:DF:22:93:A7:4A:99:5B:50:0A:BE:47:59:37:98:C6:BF:C5:DF:8D:8F:F0:8D:FD:23"}}},"request":{"raw":"GET /beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usblog-trezor.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usblog-trezor.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 18:39:41 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2026.2.0\"\r\nlast-modified: Thu, 19 Feb 2026 17:45:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9dc5670d5ed935a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31169,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31169), with no line terminators","md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-08-10T11:32:50.303112Z","times_seen":78336,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":33,"dns":11,"connect":1,"send":0,"wait":20,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"miro.medium.com/v2/resize:fill:96:96/1*KvNZCdk9_OfEDWccMAgLHw.png","fqdn":"miro.medium.com","domain":"medium.com","tld":"com"},"ip":{"addr":"162.159.153.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usblog-trezor.com/","date":"2026-03-14T18:39:41.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"medium.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 19:59:16 GMT","end":"Wed, 10 Jun 2026 20:59:05 GMT"},"fingerprint":{"sha1":"09:82:33:43:6A:B0:29:CE:52:C2:78:BE:56:C2:66:69:2C:93:77:4D","sha256":"96:A2:77:A3:57:AE:2F:B8:AC:84:4F:CC:90:D3:13:81:B2:E3:67:90:0A:1A:95:7F:7F:03:DC:28:0B:46:B1:01"}}},"request":{"raw":"GET /v2/resize:fill:96:96/1*KvNZCdk9_OfEDWccMAgLHw.png HTTP/1.1\r\nHost: miro.medium.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usblog-trezor.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 18:39:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 16006\r\ncf-ray: 9dc5670d4a378be6-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 14 Mar 2027 18:39:41 GMT\r\ncontent-disposition: inline; filename=\"1*KvNZCdk9_OfEDWccMAgLHw.png\"\r\ncontent-security-policy: script-src 'none'\r\netag: \"2ClxYkeZkhLd4kUTfpOdRzBNwICgGzimHBVrQIKoB9U/RIjJhZjM1OTA5ZDkzZGZjZTdjNDBkNjcxYzMwMDgwYjFmIg\"\r\nmedium-fulfilled-by: miro-v2/main-20260302-165807-c60a0d8a20\r\nx-envoy-upstream-service-time: 141\r\nx-request-id: a86cc45a-0b5e-43f0-954a-f7a677347b37\r\nage: 519608\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: _cfuvid=4jaEsZsIyAhVuFIf_R5ufkHU5W1XKpQNAZtbeB1EQD8-1773513581787-0.0.1.1-604800000; path=/; domain=.medium.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":16006,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"79ba98928d09cb1626b08d68f591d239","sha1":"8d6da426242c5188586c58c71d99f0cfeb688519","sha256":"9c3345a51925bb37526a7108481488a2caba9a0e126cb80002c641fede3a91a1","sha512":"4195b00fa000cfcf164ef8414ce7f2892ab358e72a8a34c798060aa49803b9d6d4c2982a5ea06e07de90003d9e4a18e551be0095f78ac99834d0f400e4209ca3","ssdeep":"384:d8r9hvCr4Cbp6yKXpTWeRUpfITOohu9FiJVQu3e:u91Cr4kfVeSAOoNu","tlshash":"4672e1aece0759b1f327116f1d643a756bd4f4b2d97eca5ad00180035cc103dfd9aa5a","first_seen":"2026-03-12T21:25:08.649479Z","last_seen":"2026-04-05T07:31:22.541175Z","times_seen":145,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":31,"dns":1,"connect":4,"send":0,"wait":142,"receive":2,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"miro.medium.com/v2/resize:fit:720/format:webp/1*4iHqwE4Q5WBoUHxS_vziZQ.jpeg","fqdn":"miro.medium.com","domain":"medium.com","tld":"com"},"ip":{"addr":"162.159.153.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usblog-trezor.com/","date":"2026-03-14T18:39:41.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"medium.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 19:59:16 GMT","end":"Wed, 10 Jun 2026 20:59:05 GMT"},"fingerprint":{"sha1":"09:82:33:43:6A:B0:29:CE:52:C2:78:BE:56:C2:66:69:2C:93:77:4D","sha256":"96:A2:77:A3:57:AE:2F:B8:AC:84:4F:CC:90:D3:13:81:B2:E3:67:90:0A:1A:95:7F:7F:03:DC:28:0B:46:B1:01"}}},"request":{"raw":"GET /v2/resize:fit:720/format:webp/1*4iHqwE4Q5WBoUHxS_vziZQ.jpeg HTTP/1.1\r\nHost: miro.medium.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usblog-trezor.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 18:39:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28588\r\ncf-ray: 9dc5670d4a1d8be6-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"1*4iHqwE4Q5WBoUHxS_vziZQ.webp\"\r\ncontent-security-policy: script-src 'none'\r\netag: \"YXzh1miX4qndlYVobhq_bxorivcuaUlJ2JfvURNm1xU/RImUyMjFlYWMwNGUxMGU1NjA2ODUwN2M1MmZlZmNlMjY1Ig\"\r\nmedium-fulfilled-by: miro-v2/main-20260311-162951-7b9fee4c32\r\nx-envoy-upstream-service-time: 313\r\nx-request-id: 9b56c2a8-2fbb-4fd5-8f23-99b1daa1eecd\r\ncf-cache-status: HIT\r\nage: 170633\r\nexpires: Sun, 14 Mar 2027 18:39:41 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: _cfuvid=BAty.djnEzrAMNHE.IY9lcQUjpjSMiscDoG613l_r20-1773513581707-0.0.1.1-604800000; path=/; domain=.medium.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28588,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"93e69fcbbb6a64f520cc96772d6556c8","sha1":"827f8e6ff656882a5dddd556ce32bb31744c5809","sha256":"4066d5bab90580705b0d9e9a5212afed6b8f24031a0f57723cea9370e0e96436","sha512":"627a237448e45e945ee209936d06f1aa46fdf8d5ce87fe4e2113fb25064f9bd88c1f36895f2b17e509f9e471284268810172f75d04eb5c5a6a2b36a03a64144d","ssdeep":"768:kcraPQ2q3jw4dEi9Mp5w3mG8n6IGbv1r7mac02B:frR2q3sMEi6bMwm9mH02","tlshash":"2fd2e1e78eb7f09ecfa1ca7cad3b098a44224850d476b75ea693d55c3c9c8d181b8913","first_seen":"2026-03-12T21:25:08.65044Z","last_seen":"2026-04-05T07:31:22.540632Z","times_seen":145,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":26,"dns":2,"connect":1,"send":0,"wait":66,"receive":2,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usblog-trezor.com/favicon.ico","fqdn":"usblog-trezor.com","domain":"usblog-trezor.com","tld":"com"},"ip":{"addr":"104.21.86.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usblog-trezor.com/","date":"2026-03-14T18:39:41.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usblog-trezor.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 15:57:54 GMT","end":"Fri, 12 Jun 2026 15:57:53 GMT"},"fingerprint":{"sha1":"95:18:D3:FA:5E:EB:04:C4:EC:16:B3:7C:73:D8:AE:76:06:C7:A6:92","sha256":"A7:01:0A:A0:55:9A:61:39:FB:FD:62:30:AA:65:BA:BE:EE:25:22:53:5B:63:73:2F:2A:24:F1:DE:CD:12:12:28"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: usblog-trezor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usblog-trezor.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 18:39:41 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OokYkuMcQjQJ82GuWK%2FpTGu6Av4bI7pC9zafE%2BqbUHuC%2BwjKLtVpQ9AtIo%2BxxMpLCrYhYnrGoQ0OKcYRUef%2FEEL6Dz50RqBqbaiJCQTrguTp\"}]}\r\ncf-ray: 9dc5670e5fb6349b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"37d5c3a24983196361e6ce9b1a499464","sha1":"2dd5878df894f3c648e42408879e9a61c112d1b3","sha256":"766c1d6bcb81d3e983fb7adbc19c616d7fc01dafb7893738edc242e2adc59c07","sha512":"cc140d1f61a01ba5f282d682dfeb19229426c7164b147a3031d3b5544c2d7213ce19b075a81d5e00750bdac7b1d9232b8b971e026d838ccae9466523338b09a9","ssdeep":"","tlshash":"eac08c6e2513bd4cc663217432c36490c08b93a7a4ea42228440805331cb2aa8ac7396","first_seen":"2023-11-07T17:46:00Z","last_seen":"2026-08-13T02:11:58.877608Z","times_seen":30232,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"usblog-trezor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usblog-trezor.com/cdn-cgi/rum?","fqdn":"usblog-trezor.com","domain":"usblog-trezor.com","tld":"com"},"ip":{"addr":"104.21.86.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usblog-trezor.com/","date":"2026-03-14T18:39:41.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usblog-trezor.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 15:57:54 GMT","end":"Fri, 12 Jun 2026 15:57:53 GMT"},"fingerprint":{"sha1":"95:18:D3:FA:5E:EB:04:C4:EC:16:B3:7C:73:D8:AE:76:06:C7:A6:92","sha256":"A7:01:0A:A0:55:9A:61:39:FB:FD:62:30:AA:65:BA:BE:EE:25:22:53:5B:63:73:2F:2A:24:F1:DE:CD:12:12:28"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: usblog-trezor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 638\r\nOrigin: https://usblog-trezor.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usblog-trezor.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":638,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":375,\"startTime\":1773513581273,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2026.2.0\",\"timings\":2},\"pageloadId\":\"a47589f7-aae3-4bac-9cef-3af7dcc4f0d5\",\"location\":\"https://usblog-trezor.com/\",\"nt\":\"navigate\",\"timingsV2\":{\"nextHopProtocol\":\"h2\",\"domainLookupStart\":32,\"domainLookupEnd\":33,\"connectStart\":33,\"connectEnd\":67,\"requestStart\":67,\"responseStart\":129,\"responseEnd\":129,\"domInteractive\":365,\"domComplete\":521,\"loadEventStart\":521,\"loadEventEnd\":521,\"transferSize\":6643,\"decodedBodySize\":24964},\"siteToken\":\"1802a4b05dca4c73b9b39fa6a7fdb00a\",\"st\":2}"}},"response":{"raw":"HTTP/3 404 Not Found\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 14 Mar 2026 18:39:41 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pkNNVLkFe5anA1VXJogQyRZ3G0i5Yxh3B4KgLG%2Fz7Vr6KBS55%2BLAW52EXub3c8En2c13CXJeM%2B0GiZKcLsXd2aMBG3ZiF66Y8qghq%2FqeyQME\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9dc5670e6fbd349b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"45efc4779b2e6b43ed200755328af518","sha1":"badb6097a3c8fad00517f38352ba72b9f7b6637b","sha256":"d66dd0f2f24c4343661a5396e1ba76782fe651f7d422209eded956ebf90900fc","sha512":"862ceb668672d90ed3da9419ca69bf0214b5c34dec2353fea792a75fb1c0c2e5fd54e6e56cf1e9d4d60c4eaa7d98411f5cb5e128be2661d9bbd084d0dbd085e0","ssdeep":"","tlshash":"a1c02b3d35637e0c8563303522c3b190d0c6833774ba00220500c00330cb2e9cac33d7","first_seen":"2023-09-18T10:37:28Z","last_seen":"2026-08-12T22:13:33.574127Z","times_seen":19417,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"usblog-trezor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}