{"report_id":"e497e575-7e54-4e26-8d2b-23a725467168","version":6,"status":"done","tags":[],"date":"2026-02-07T09:45:30Z","url":{"schema":"https","addr":"trezorsuite-recovery.io/","fqdn":"trezorsuite-recovery.io","domain":"trezorsuite-recovery.io","tld":"io"},"ip":{"addr":"172.67.215.157","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"trezorsuite-recovery.io/","fqdn":"trezorsuite-recovery.io","domain":"trezorsuite-recovery.io","tld":"io"},"title":"Trezor Hardware Wallet (Official) | Bitcoin \u0026 Crypto Security","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"trezorsuite-recovery.io/","fqdn":"trezorsuite-recovery.io","domain":"trezorsuite-recovery.io","tld":"io"},"ip":{"addr":"172.67.215.157","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-14T09:45:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"trezorsuite-recovery.io","ip":{"addr":"172.67.215.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-17","domain_rank":0,"first_seen":"2026-02-07T09:45:31.749799Z","last_seen":"2026-02-07T09:45:31.749799Z","alert_count":42,"request_count":21,"received_data":9001060,"sent_data":10071,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"trezor.io","ip":{"addr":"172.66.137.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-07-21","domain_rank":11191,"first_seen":"2016-09-29T10:55:49Z","last_seen":"2026-02-07T09:06:19.379352Z","alert_count":0,"request_count":1,"received_data":211519,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trezorsuite-recovery.io/","fqdn":"trezorsuite-recovery.io","domain":"trezorsuite-recovery.io","tld":"io"},"ip":{"addr":"172.67.215.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab81f1d3902d8b0d7f70237ef45c2e8f","sha1":"39ecbd8de29b15c74db1d431a31545cd547ce08d","sha256":"9a12ff83182c578fd5ea93df35caf6c2723667ed2135dcaa317038b4fe8b6f56","sha512":"09a6b27fb8d16c64dc31a31a3a10ee8a8c8a1666dff314fe8bd87161179660f3a6ca060f1bf352ce7196af6dc2496458134a31d917c99e65acdc191cd081bbc4","ssdeep":"96:ra+ChO4ZdNMZg5NBMcg4qtu7cgUfztRwCpyOMbK7wIsj554tBvjitl:7ChvZ0Zg5N24PcgULtjPIexsF2tBOtl","tlshash":"1502436a72b6093449bf06af664beb8d73364047a015d95e3d6c45ca1fd0e9000f6ddb","size":8786,"data":"","first_seen":"2026-02-07T09:06:24.263088Z","last_seen":"2026-02-07T09:45:35.098577Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorsuite-recovery.io/","fqdn":"trezorsuite-recovery.io","domain":"trezorsuite-recovery.io","tld":"io"},"ip":{"addr":"172.67.215.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"435751e18008f6b0c0c1f0d9e0ea2d4b","sha1":"13d51a8eae4fbed7f289322b6dcbba2ae07a4841","sha256":"027e100ab22aefc9ffb3d35f56747a7adb26d9b18d3c2472c6a2e7f4715707fb","sha512":"27cb959670562b765f8fae2d5392960d5324ed421fff915b4b231a9ede6b9d330967ae3a025a50ddf525ae1e60db959aeffe4f8e29f222409a3883afd3d71816","ssdeep":"192:SH2EZ5Z8ZhMMe+SGCqsfKERzd3oalszDE4:X3BalsT","tlshash":"f7120f5af1bf3434867f16af668eda8837275007282699163d5caa801f91fe041f1fda","size":9521,"data":"","first_seen":"2026-02-07T09:06:24.264043Z","last_seen":"2026-02-07T09:45:35.099142Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorsuite-recovery.io/","fqdn":"trezorsuite-recovery.io","domain":"trezorsuite-recovery.io","tld":"io"},"ip":{"addr":"172.67.215.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a9efb379520816bee3fe4e2fefc1c090","sha1":"04c338e24ece13b4f006736e687ae38baf50e41a","sha256":"c2bc53d9a28f442f344dafd8797568cb78f72f74518d26b08aeca294a4be2bc1","sha512":"26839b79ae28c8324ab933d74aeb022b52296ff7fae6114615873e3e561fc5c0671dfba1e98be50b6349306a1bddedfa77d53e6841e5bef086e5a1d4d3868e29","ssdeep":"96:5SAkD7gn94ZneJZkh5IsklN0FAPSAAw1Ge5fMpC4beESBLT5:5T6sneZqZkh5oGy0w/WrwJ","tlshash":"e7c1be663bb61b3086fb69af538ea95c3611500338079c203c6d8a74afd2f9509b6ed5","size":5602,"data":"","first_seen":"2026-02-07T09:06:24.265043Z","last_seen":"2026-02-07T09:45:35.099661Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorsuite-recovery.io/","fqdn":"trezorsuite-recovery.io","domain":"trezorsuite-recovery.io","tld":"io"},"ip":{"addr":"172.67.215.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"46411022c00d358fa0523bb0c4266d61","sha1":"ca5d18abdf6198390af4f9b269304f330856eea3","sha256":"099f8c48f0389edd505ecdd27f68435c5892d93cf1ba648c7b4701147a640ff6","sha512":"7a4746648ed248bf1bb017fa9a3a9bbbe1ce401a09e6baa3f7bf5301d0da9ca566f1223ce676de10a9ba309bdbebc55141809c19d96f1a02baac6b88aea69382","ssdeep":"96:3yI4ZUBQZIJvF9lN0FA8+qkmjkd+4PkaLGRvdim+4rnsjMh7ab:iZZfZIJvFPGy8+q0QCkaaR8+suab","tlshash":"8ac1562937b60835bcabbbae47cea8193611574361c6dc153cdc86486fade9100f2fd5","size":5891,"data":"","first_seen":"2026-02-07T09:06:24.265938Z","last_seen":"2026-02-07T09:45:35.100294Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"trezorsuite-recovery.io/euclid-circular-b.css","fqdn":"trezorsuite-recovery.io","domain":"trezorsuite-recovery.io","tld":"io"},"ip":{"addr":"172.67.215.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezorsuite-recovery.io/","date":"2026-02-07T09:45:03.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorsuite-recovery.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 18:29:50 GMT","end":"Fri, 17 Apr 2026 19:28:23 GMT"},"fingerprint":{"sha1":"BF:B9:57:B8:A8:4F:45:25:0C:14:76:EB:E2:75:9D:08:AE:37:3C:3F","sha256":"C0:CA:F1:EE:3F:B3:EF:BA:5A:BE:86:2D:7E:C4:8C:7B:79:88:FE:4D:E3:E8:10:76:6E:6D:C5:F1:4A:4F:63:E4"}}},"request":{"raw":"GET /euclid-circular-b.css HTTP/1.1\r\nHost: trezorsuite-recovery.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorsuite-recovery.io/22e3cb71-e3f9-4613-b816-c51537c398d7.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Feb 2026 09:45:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 16 Jan 2026 18:03:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"696a7d6c-7c3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 2352\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dO%2B4N1DgMrqKmpImw7rmyZSZPjjS6QFJ2PwjqKCLQUGMCXwf%2FaKIoYozK00HGShZd%2BMZASqrCrUlbjSlphIO9JOFLwQPYmPWZd%2Fq7tiHiT8b0lQGOA%3D%3D\"}]}\r\ncf-ray: 9ca1f3c76c3556b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1987,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"617fecc0dcf6be95ab7975f6a7f11ef9","sha1":"ebf2d290b2870e74b17639e5f35881b5f318a312","sha256":"f8298aa5fd76650e0da4c457d686627f69f3d7101c77107fe18f23d07e051bb1","sha512":"47906fcb81923f7630bed27f1af5d82d00a915b6bcc32af54c47edcd9a0bc8f64cd918535348f238b8d491e9201849cd1fadab2618b06fe928f3afb5469e3447","ssdeep":"","tlshash":"8f41a36c455fa140e8670d4ab38bfbb047da15b7248ddd3f23686e144ea683d8780f5d","first_seen":"2026-02-07T09:06:24.233793Z","last_seen":"2026-02-07T09:45:35.086634Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorsuite-recovery.io/a0eedb9e027437b7da1d5447c062a185.css","fqdn":"trezorsuite-recovery.io","domain":"trezorsuite-recovery.io","tld":"io"},"ip":{"addr":"172.67.215.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezorsuite-recovery.io/","date":"2026-02-07T09:45:03.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorsuite-recovery.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 18:29:50 GMT","end":"Fri, 17 Apr 2026 19:28:23 GMT"},"fingerprint":{"sha1":"BF:B9:57:B8:A8:4F:45:25:0C:14:76:EB:E2:75:9D:08:AE:37:3C:3F","sha256":"C0:CA:F1:EE:3F:B3:EF:BA:5A:BE:86:2D:7E:C4:8C:7B:79:88:FE:4D:E3:E8:10:76:6E:6D:C5:F1:4A:4F:63:E4"}}},"request":{"raw":"GET /a0eedb9e027437b7da1d5447c062a185.css HTTP/1.1\r\nHost: trezorsuite-recovery.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorsuite-recovery.io/22e3cb71-e3f9-4613-b816-c51537c398d7.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Feb 2026 09:45:03 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F8VEiRxNhd1tV5cWZJrFBa9%2FTkIohm9Q8uVmmIV0SRvgfyHXp6BNAWLh2WIUWH3GrRgBsizsEZgtvuP6xklGitESne9D2lqdYbmPRDR3%2FwDgWLoXJg%3D%3D\"}]}\r\nlast-modified: Fri, 16 Jan 2026 18:03:24 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\nage: 2352\r\ncf-cache-status: HIT\r\netag: W/\"696a7d6c-38e\"\r\ncf-ray: 9ca1f3c76c3756b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":910,"size_decoded":0,"mime_type":"text/css","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"e4952c7a59c9a16ade1234f0dc873d12","sha1":"b99ff5fdd1d645d1c99dc52036265787c58966ad","sha256":"dda444c9566d5a5c15dbe6de53e0bb2f0292a8b404cf166a7d3ce5f52bcd5412","sha512":"a1cb5c6164bad3b44586afc9d2460b386df9747457733b41ec1e7267c369041f9294a3ad2dda28d1d30141fb45293859b7d07cf0c56d3dec581229a5014afc35","ssdeep":"","tlshash":"431136045a02e489e331058e27e5daa8c91b043f55879b1a793c46947ff790882a171e","first_seen":"2026-02-07T09:06:24.238471Z","last_seen":"2026-02-07T09:45:35.08777Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorsuite-recovery.io/9fad683f76adb1cc6e2c4c18a9f33889.css","fqdn":"trezorsuite-recovery.io","domain":"trezorsuite-recovery.io","tld":"io"},"ip":{"addr":"172.67.215.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezorsuite-recovery.io/","date":"2026-02-07T09:45:03.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorsuite-recovery.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 18:29:50 GMT","end":"Fri, 17 Apr 2026 19:28:23 GMT"},"fingerprint":{"sha1":"BF:B9:57:B8:A8:4F:45:25:0C:14:76:EB:E2:75:9D:08:AE:37:3C:3F","sha256":"C0:CA:F1:EE:3F:B3:EF:BA:5A:BE:86:2D:7E:C4:8C:7B:79:88:FE:4D:E3:E8:10:76:6E:6D:C5:F1:4A:4F:63:E4"}}},"request":{"raw":"GET /9fad683f76adb1cc6e2c4c18a9f33889.css HTTP/1.1\r\nHost: trezorsuite-recovery.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorsuite-recovery.io/22e3cb71-e3f9-4613-b816-c51537c398d7.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Feb 2026 09:45:03 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tilO0I%2BT1FhTg1E7TbYvoCZo1SOEO9wM3R%2F6PINBQtJ0WreZwVh2fw1J%2BrYQysudViR%2FPO8a3Na5CzIe9YgCH5FInfDTAI%2BMps%2B6x%2FHudg8BLdlKQw%3D%3D\"}]}\r\nlast-modified: Fri, 16 Jan 2026 18:03:24 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\nage: 2352\r\ncf-cache-status: HIT\r\netag: W/\"696a7d6c-398\"\r\ncf-ray: 9ca1f3c77c3856b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":920,"size_decoded":0,"mime_type":"text/css","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"0e8e9b222e5843f346c7166c921bbf86","sha1":"9286596786068de8e9f41d0606aab903424e21bf","sha256":"7ca6b1e35f01a77a1fb30be7d9a8fe242e40d130569b39c233fa6306fd5089e8","sha512":"4790bfc25dbec4ce691cadcedff87b2bbda880439d3f13849a1ffc889afcd1903c2041a4ad9ad6837e0a0e91882dd5f7221954338793b6f8935c376596f61b68","ssdeep":"","tlshash":"ba114c8d5d16a4116238440d33e76f5dd94210fb22180a327dfc5ac5aff6b68e6a371c","first_seen":"2026-02-07T09:06:24.245796Z","last_seen":"2026-02-07T09:45:35.088346Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorsuite-recovery.io/ae04346af3e236a8afa61cb9ba0c83cb20529ebc.webp","fqdn":"trezorsuite-recovery.io","domain":"trezorsuite-recovery.io","tld":"io"},"ip":{"addr":"172.67.215.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorsuite-recovery.io/","date":"2026-02-07T09:45:04.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorsuite-recovery.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 18:29:50 GMT","end":"Fri, 17 Apr 2026 19:28:23 GMT"},"fingerprint":{"sha1":"BF:B9:57:B8:A8:4F:45:25:0C:14:76:EB:E2:75:9D:08:AE:37:3C:3F","sha256":"C0:CA:F1:EE:3F:B3:EF:BA:5A:BE:86:2D:7E:C4:8C:7B:79:88:FE:4D:E3:E8:10:76:6E:6D:C5:F1:4A:4F:63:E4"}}},"request":{"raw":"GET /ae04346af3e236a8afa61cb9ba0c83cb20529ebc.webp HTTP/1.1\r\nHost: trezorsuite-recovery.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorsuite-recovery.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Feb 2026 09:45:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 780\r\nlast-modified: Fri, 16 Jan 2026 18:03:24 GMT\r\npriority: u=4,i=?0\r\netag: \"696a7d6c-30c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 2353\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5i7VE86%2FCNI0YijMcl0GkXIycuz7RpNkqWoOz9qbjxXlpiaScr7lHkgx8isJ%2BqVo7tzpg8N%2FuP3Mq8IxhyrL5Vm9SPP%2F6Mg1bha9758nlPVBaD065w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ca1f3c80c3f56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":780,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4218175ca4fe632ea2d78b3a7846cbe9","sha1":"ae04346af3e236a8afa61cb9ba0c83cb20529ebc","sha256":"f48029d1829129f662e23bfac26e75d741f74f826e9f845c125d46207fff8396","sha512":"be21ea3f13f795c0dce4e6e9d458606837717f343fe78e378a3f3509e88ba7c163a25f1d591cc84824f777fae6ccdd24356a16dab6178bdbbff62aeb06f9829b","ssdeep":"","tlshash":"3b0175e9c2dc42fee24626b664177634b852eb9d53f090145eb50388131825b2de64c3","first_seen":"2024-06-14T00:48:21Z","last_seen":"2026-05-17T00:22:11.043775Z","times_seen":335,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorsuite-recovery.io/41ac0668-3eac-4d8e-837e-4b70e99ee335.png","fqdn":"trezorsuite-recovery.io","domain":"trezorsuite-recovery.io","tld":"io"},"ip":{"addr":"172.67.215.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorsuite-recovery.io/","date":"2026-02-07T09:45:04.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorsuite-recovery.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 18:29:50 GMT","end":"Fri, 17 Apr 2026 19:28:23 GMT"},"fingerprint":{"sha1":"BF:B9:57:B8:A8:4F:45:25:0C:14:76:EB:E2:75:9D:08:AE:37:3C:3F","sha256":"C0:CA:F1:EE:3F:B3:EF:BA:5A:BE:86:2D:7E:C4:8C:7B:79:88:FE:4D:E3:E8:10:76:6E:6D:C5:F1:4A:4F:63:E4"}}},"request":{"raw":"GET /41ac0668-3eac-4d8e-837e-4b70e99ee335.png HTTP/1.1\r\nHost: trezorsuite-recovery.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorsuite-recovery.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Feb 2026 09:45:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 9104\r\nlast-modified: Fri, 16 Jan 2026 18:03:24 GMT\r\npriority: u=4,i=?0\r\netag: \"696a7d6c-2390\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 2353\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pCWljfdu1znsC7hmUbvMpKTdYPy7APx0L6VK1D8i20jgelV4RnNNwNdSa4%2BUDgs1iTYrEkBxcKxoMqbM5TXjGfFDjOnxTTCkgVdQCv4%2FEvqmDY7l0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ca1f3c89c4d56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9104,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"5becd47a6a28432934a3eb30952287da","sha1":"ce96943b30dc0d85b749b04d63c0d57ee27a3ac6","sha256":"3d333dac99ab87d5f0ee1edefd4944e220bde6a86650e28f59e0062cd4bc7420","sha512":"e71449f06649feb68c2afa37f5f16508a13b6025f99d28509b57596a02f2e4e38ab6f69ada0d05773952f97ebaf5ea48a06b4fa0523092d870cfc612fca42363","ssdeep":"192:RMMVUCiENUhE52qCaB5KFlOvnkdMUZyYykFVOzgAluyrg:RfVU+GhXqCaCF0vkdMUxUo5","tlshash":"1a12b016d987d7aabc861ff76cb5321904c7b0910c1c0b11e6ad9889d3dfc1b9a6860f","first_seen":"2026-02-07T09:06:24.223903Z","last_seen":"2026-05-17T12:55:38.11879Z","times_seen":3,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorsuite-recovery.io/22e3cb71-e3f9-4613-b816-c51537c398d7.css","fqdn":"trezorsuite-recovery.io","domain":"trezorsuite-recovery.io","tld":"io"},"ip":{"addr":"172.67.215.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezorsuite-recovery.io/","date":"2026-02-07T09:45:03.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorsuite-recovery.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 18:29:50 GMT","end":"Fri, 17 Apr 2026 19:28:23 GMT"},"fingerprint":{"sha1":"BF:B9:57:B8:A8:4F:45:25:0C:14:76:EB:E2:75:9D:08:AE:37:3C:3F","sha256":"C0:CA:F1:EE:3F:B3:EF:BA:5A:BE:86:2D:7E:C4:8C:7B:79:88:FE:4D:E3:E8:10:76:6E:6D:C5:F1:4A:4F:63:E4"}}},"request":{"raw":"GET /22e3cb71-e3f9-4613-b816-c51537c398d7.css HTTP/1.1\r\nHost: trezorsuite-recovery.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorsuite-recovery.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Feb 2026 09:45:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 16 Jan 2026 18:03:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"696a7d6c-27c6a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 2353\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xkbh19bg%2Fv9j6zCyb8yJJoiIVkMJ3vMtH5ZNkcq2la%2FTAB6FoZo5CJM%2BwXEGk0kWGxBtwpXV4ufmAM3F6sLLMlayac1bNYbXT7zGRkSo4jGYE%2FfewA%3D%3D\"}]}\r\ncf-ray: 9ca1f3c6cc2b56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162922,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"507321e24a9c7c9cd1022ef054e4fb2f","sha1":"5da11ca582287e33e8d4373be03c2f92a7624288","sha256":"6bd4afa89c333d9bf18329690001ec38b7af06dbb4e0f25897b8c6f6327da3a0","sha512":"e9fa88fb1d4d3876227a489e668c6b4ed868a56f0e72517ea8a5cecfd4992f35362b15ff3a6412e36b2f49b9e9bf58ea261643ad22a7bb45937f4a518e6ea5a0","ssdeep":"768:Gso96qO7xgHmYhHV3uqbsxSyo2U5f2nVQC6uGB3WuVzvddKQukluCL/VGv2JFkPn:GHfO7xgHmuV+S2VQDWuwj","tlshash":"c3f31e155a0604672e739bf8a7c8988dff5b33d39e19559cb6cc20104ff92b4a8dae4c","first_seen":"2026-02-07T09:06:24.23482Z","last_seen":"2026-02-07T09:45:35.090419Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorsuite-recovery.io/","fqdn":"trezorsuite-recovery.io","domain":"trezorsuite-recovery.io","tld":"io"},"ip":{"addr":"172.67.215.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trezorsuite-recovery.io/","date":"2026-02-07T09:45:03.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorsuite-recovery.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 18:29:50 GMT","end":"Fri, 17 Apr 2026 19:28:23 GMT"},"fingerprint":{"sha1":"BF:B9:57:B8:A8:4F:45:25:0C:14:76:EB:E2:75:9D:08:AE:37:3C:3F","sha256":"C0:CA:F1:EE:3F:B3:EF:BA:5A:BE:86:2D:7E:C4:8C:7B:79:88:FE:4D:E3:E8:10:76:6E:6D:C5:F1:4A:4F:63:E4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trezorsuite-recovery.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trezorsuite-recovery.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Feb 2026 09:45:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nlast-modified: Sat, 17 Jan 2026 16:30:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lpmY19Y53%2FfYYMSkFxbIa%2FltG1AoWm2m9%2BhaoDus%2BQDkncWW8yyDNi9HAvGjn%2Bw%2FtpFN9u0jQhlHD4ayoiXWWvT4mCJUx8pcBXsa3uFptuncuSnmvg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-ray: 9ca1f3c6fc2d56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2288803,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (44283)","md5":"7728344319c9210a50c8186328ed58f7","sha1":"3b41bee1a6f05ce3acbc615159e72f45d57a100d","sha256":"2dfc0490122bbdba81f13aaac7b6117d4caf525c02493d905bb3b7ed96d986f6","sha512":"0591730600b2b5850c39ef0508b0b3b8aebcf281e465f3b748f494c91b226fe7cece72ee35d614e596bd504a56b773c2d2f278b4d401d4c8a7faa5dd2f4a5d50","ssdeep":"24576:o8T2wwd81aJX+yX2RhMQq7AQI2s4/AEsbWm1ihJSrxg2koOPWcgWcO:o8T2wwd81aJX+yX2RhMQq5I2s4/AEtm+","tlshash":"2f25adb42610e17e6c3372af859ce95d8e0ca487ca07d9d9da83317989c9ff305a7634","first_seen":"2026-02-07T09:06:24.217594Z","last_seen":"2026-02-07T09:45:35.090998Z","times_seen":2,"resource_available":false,"data":null}},"time_used":630,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":459,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorsuite-recovery.io/intro-video-placeholder-laptop.fb021e6f.jpg","fqdn":"trezorsuite-recovery.io","domain":"trezorsuite-recovery.io","tld":"io"},"ip":{"addr":"172.67.215.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorsuite-recovery.io/","date":"2026-02-07T09:45:03.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorsuite-recovery.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 18:29:50 GMT","end":"Fri, 17 Apr 2026 19:28:23 GMT"},"fingerprint":{"sha1":"BF:B9:57:B8:A8:4F:45:25:0C:14:76:EB:E2:75:9D:08:AE:37:3C:3F","sha256":"C0:CA:F1:EE:3F:B3:EF:BA:5A:BE:86:2D:7E:C4:8C:7B:79:88:FE:4D:E3:E8:10:76:6E:6D:C5:F1:4A:4F:63:E4"}}},"request":{"raw":"GET /intro-video-placeholder-laptop.fb021e6f.jpg HTTP/1.1\r\nHost: trezorsuite-recovery.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorsuite-recovery.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Feb 2026 09:45:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 236112\r\nlast-modified: Sat, 17 Jan 2026 15:57:04 GMT\r\npriority: u=4,i=?0\r\netag: \"696bb150-39a50\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 2353\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F%2FMjiRMTJz9u9lRoGLqbIUgHxcz%2Bq%2FdBNuobnjyQ3M%2F4dEF38dl8d%2FZLM%2BfcItv0qI2h2uY7cFqESZucnq%2B5Nac6kekIsNDdNj9trf0neKA9DRsEHQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ca1f3c76c3356b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":236112,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2560x1440, components 3","md5":"e335c443c3750c8b8e5cd7fac3fa2109","sha1":"1153e56120b5180ec5bcfca83c6acc566909cebb","sha256":"b288334e2cf3e5400e15ca31128b9e617273717254cf268e07a67252cec11d53","sha512":"b5ea7afc2d42f8ddb35962a971a1f64c517b4e77e1c6f0138d64f2b5c6eab7adff1723788bcca4710ac855363fd0e1abcb5b0923807498666ed60c5e03705392","ssdeep":"6144:wbiwcNEYw63YS6E0k3uV3HjOBVoa2xGgrIqmt:wuxf3lyBzO3Q6D","tlshash":"0b34234d0b55ccceca2ca6734986f2495a69829dfe0eb503a4356e00ce76be13066ec7","first_seen":"2026-01-29T11:26:08.905852Z","last_seen":"2026-02-07T09:45:35.091557Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorsuite-recovery.io/css2-2.css","fqdn":"trezorsuite-recovery.io","domain":"trezorsuite-recovery.io","tld":"io"},"ip":{"addr":"172.67.215.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezorsuite-recovery.io/","date":"2026-02-07T09:45:03.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorsuite-recovery.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 18:29:50 GMT","end":"Fri, 17 Apr 2026 19:28:23 GMT"},"fingerprint":{"sha1":"BF:B9:57:B8:A8:4F:45:25:0C:14:76:EB:E2:75:9D:08:AE:37:3C:3F","sha256":"C0:CA:F1:EE:3F:B3:EF:BA:5A:BE:86:2D:7E:C4:8C:7B:79:88:FE:4D:E3:E8:10:76:6E:6D:C5:F1:4A:4F:63:E4"}}},"request":{"raw":"GET /css2-2.css HTTP/1.1\r\nHost: trezorsuite-recovery.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorsuite-recovery.io/22e3cb71-e3f9-4613-b816-c51537c398d7.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Feb 2026 09:45:03 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=es7CDXbZFI572DVtKlnFDw0JvHfrmg3Y%2B23ems%2F%2FHVvEvdAM%2BvOtlfYUUSUbLkUFcWNlnO5%2FL8icFCHGgLRzUSoKybDlu%2FXZk7AsEr4%2F1IpA1wMO5w%3D%3D\"}]}\r\nlast-modified: Fri, 16 Jan 2026 18:03:24 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\nage: 2352\r\ncf-cache-status: HIT\r\netag: W/\"696a7d6c-308\"\r\ncf-ray: 9ca1f3c78c3b56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":776,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0e4447e54b6e4ecb84aed7acb3894dde","sha1":"ba5d8f7b3ed1b0bb1ffaa8c5af770907ab440695","sha256":"957724329221edd1196e9bf04ff97c8132fc440060d4d1237cc8be463daa6d3c","sha512":"f38eef5d87aa9ea6b94902828ea7e0dbb512909ed0715ec964552826eac8e7a72735ca704feb1b6a728b7291e1e9b54955d6bfca536e6dc478341fd21e15c5fa","ssdeep":"","tlshash":"e901d080086b6100d7a34cc522ce3e32ae1ea390a405da346ffe145cbc6bc699362b1d","first_seen":"2025-07-12T22:39:28.620179Z","last_seen":"2026-02-07T09:45:35.092104Z","times_seen":3,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorsuite-recovery.io/wallet.png","fqdn":"trezorsuite-recovery.io","domain":"trezorsuite-recovery.io","tld":"io"},"ip":{"addr":"172.67.215.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorsuite-recovery.io/","date":"2026-02-07T09:45:04.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorsuite-recovery.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 18:29:50 GMT","end":"Fri, 17 Apr 2026 19:28:23 GMT"},"fingerprint":{"sha1":"BF:B9:57:B8:A8:4F:45:25:0C:14:76:EB:E2:75:9D:08:AE:37:3C:3F","sha256":"C0:CA:F1:EE:3F:B3:EF:BA:5A:BE:86:2D:7E:C4:8C:7B:79:88:FE:4D:E3:E8:10:76:6E:6D:C5:F1:4A:4F:63:E4"}}},"request":{"raw":"GET /wallet.png HTTP/1.1\r\nHost: trezorsuite-recovery.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorsuite-recovery.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Feb 2026 09:45:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 45495\r\nlast-modified: Sat, 17 Jan 2026 16:28:41 GMT\r\npriority: u=4,i=?0\r\netag: \"696bb8b9-b1b7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 2353\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XRuqoMteeb6KI15T0mwdPN9MVLwwAsy7JXct4iouFylv%2FChL0J4U7TwO47cp2eeo8YBDVjLEBLB45MB5DNzKZOd6S4HvflZKzOMlYM2yFbi0oaSadQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ca1f3c80c3e56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45495,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 552 x 91, 8-bit/color RGBA, non-interlaced","md5":"e4edf716ea227bb7ef100b30d729fe20","sha1":"efa623414d1af47d49a6a6947132cdf0178e1f4a","sha256":"1d07b472b487d256b02501a70a8ea94379f82ac84e385ce74cb39a2ca72b650a","sha512":"aeb6b25c88cdd06360135893f9a5d80f20c0e84c702ab40681cd19d56c88788c8f29d2a061c55a54028f6ff268d9818460b244cf145e96f794b5ad521830e8c7","ssdeep":"768:7Ga14N2uPWYb2+l5/WG9XXPUu0FEvRRtaYQiYuo7UyOUPpqV2xlj4L:7ZSN2uP9b2Yz9XfUn1W1yzw2xVI","tlshash":"761302186b4306f9cf7a7213fd805549ce4d62fabe9fd1524a77ca04a6e8d0e0072b67","first_seen":"2026-02-07T09:06:24.235738Z","last_seen":"2026-02-07T09:45:35.092603Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorsuite-recovery.io/05d0ae10-8ace-46e9-8cb3-d0659d63ce55","fqdn":"trezorsuite-recovery.io","domain":"trezorsuite-recovery.io","tld":"io"},"ip":{"addr":"172.67.215.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorsuite-recovery.io/","date":"2026-02-07T09:45:04.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorsuite-recovery.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 18:29:50 GMT","end":"Fri, 17 Apr 2026 19:28:23 GMT"},"fingerprint":{"sha1":"BF:B9:57:B8:A8:4F:45:25:0C:14:76:EB:E2:75:9D:08:AE:37:3C:3F","sha256":"C0:CA:F1:EE:3F:B3:EF:BA:5A:BE:86:2D:7E:C4:8C:7B:79:88:FE:4D:E3:E8:10:76:6E:6D:C5:F1:4A:4F:63:E4"}}},"request":{"raw":"GET /05d0ae10-8ace-46e9-8cb3-d0659d63ce55 HTTP/1.1\r\nHost: trezorsuite-recovery.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorsuite-recovery.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Feb 2026 09:45:04 GMT\r\ncontent-length: 45238\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 16 Jan 2026 18:03:24 GMT\r\netag: \"b0b6-6488528493300\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nud1xa0hf%2BkO5HnfXnfO%2BQK6t8P2zu0QS0Xvg6K0WQlAe0nu1xCL3C7YNJYfop1rn%2Fpszb4SH4KqFYw15wM1YCh28ughx1GYmADDrZ8OSUAeJsI3xA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ca1f3c80c4256b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45238,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0af9438e40e39e12caa79744b2531a62","sha1":"c1dfa5ebc8e30def6295d1e4bd4671ecfd95d51e","sha256":"9d9121b8110d801599fed15c18de7912d2bd7909a6f3c5d2c23aaade36a297df","sha512":"fdce23ddfefca24495267403f83080e44766368806fa894cc58744cb8520afd592f958241cbd58432798a305882190278a6c509c96fe304e52bf5fae9b83afd2","ssdeep":"768:vWqKFfBwexWck2EOlF/YmkMFT4+459AI34IdL4cSTI0Io4CtPNv:bKF5wewciOrxkvlDAQdL4cWI0IMZ","tlshash":"2413dfa168498dc2fd0ca5fc1fcc5e9784528d7fb334215b2bd361d8a2b4884f9d8e28","first_seen":"2026-02-07T09:06:24.237644Z","last_seen":"2026-02-07T09:45:35.093143Z","times_seen":2,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorsuite-recovery.io/218fa0b5-b052-4da3-b9bc-c231c21cc66d","fqdn":"trezorsuite-recovery.io","domain":"trezorsuite-recovery.io","tld":"io"},"ip":{"addr":"172.67.215.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorsuite-recovery.io/","date":"2026-02-07T09:45:04.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorsuite-recovery.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 18:29:50 GMT","end":"Fri, 17 Apr 2026 19:28:23 GMT"},"fingerprint":{"sha1":"BF:B9:57:B8:A8:4F:45:25:0C:14:76:EB:E2:75:9D:08:AE:37:3C:3F","sha256":"C0:CA:F1:EE:3F:B3:EF:BA:5A:BE:86:2D:7E:C4:8C:7B:79:88:FE:4D:E3:E8:10:76:6E:6D:C5:F1:4A:4F:63:E4"}}},"request":{"raw":"GET /218fa0b5-b052-4da3-b9bc-c231c21cc66d HTTP/1.1\r\nHost: trezorsuite-recovery.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorsuite-recovery.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Feb 2026 09:45:04 GMT\r\ncontent-length: 108974\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 16 Jan 2026 18:03:24 GMT\r\netag: \"1a9ae-6488528493300\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EjJDAVQjR8XLJJmNTG52d4osb675qEmF5tBB9WW2CFS6tNALjbdZeG2ZfVe2E6AiLbWkVq5xpqeSkcdoCS6EF9jkdp779q0TdmUOGLrl2nJPQTx7HQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ca1f3c81c4856b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108974,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ec71a559777f869140e7aacedddf679f","sha1":"01b8fb9cdbb45068b5906b7c59424ba0a349d24a","sha256":"190a6918d945f9a6511d78b65f1ef509fa811ce17c4172c05e02d22b3c1dcad0","sha512":"cf296fd62dc4fdd91f9bb2d16af0902d77e7c653c2ae8f3e4a98643088e4c143068c707898736193b554e8e82c9acdc11b911d580da503c94982bd0ca5761e49","ssdeep":"1536:DIrSbcHdmxGcCqv+oSOnwwq74Gjb0s7AFKWWjNMWIMx/69RkN8yQUQtO8wR7rUrJ:Da6cHJowjz5WWxWm/6XkNpWOfrUplt","tlshash":"b9b312b696215a85e22e15a4f8ffe46f2d17f08946a3476eefd4e61c4240d82034dacd","first_seen":"2026-02-07T09:06:24.258703Z","last_seen":"2026-02-07T09:45:35.093691Z","times_seen":2,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":248,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezor.io/_next/static/media/faqs.5f26897b.jpg","fqdn":"trezor.io","domain":"trezor.io","tld":"io"},"ip":{"addr":"172.66.137.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://trezorsuite-recovery.io/","date":"2026-02-07T09:45:04.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezor.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 15:54:42 GMT","end":"Sun, 05 Apr 2026 15:54:41 GMT"},"fingerprint":{"sha1":"91:6C:EF:49:6C:12:6E:D6:D0:34:51:D2:EC:8A:94:84:9C:A0:74:36","sha256":"3F:CE:A6:41:84:E7:85:A2:1E:5C:AF:CB:60:07:C9:D8:2E:4A:F6:B4:BA:AE:68:2A:18:C7:93:FB:21:E3:F4:6D"}}},"request":{"raw":"GET /_next/static/media/faqs.5f26897b.jpg HTTP/1.1\r\nHost: trezor.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorsuite-recovery.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Feb 2026 09:45:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 210828\r\ncf-ray: 9ca1f3c9af3da0f0-OSL\r\ncache-control: public, max-age=31536000, immutable\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: degrade=85, origSize=507669, status=webp_bigger\r\netag: W/\"7bf15-19c2e4a53c8\"\r\nlast-modified: Thu, 05 Feb 2026 14:52:29 GMT\r\npermissions-policy: camera=(), microphone=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: DENY\r\ncf-cache-status: HIT\r\nage: 147665\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":210828,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 890x890, components 3","md5":"fc6b9b9386e58f44e974888ec34461e7","sha1":"b73431a757505684056762b461daa4eac1bd9d91","sha256":"179802ff1f3f087e177051712de5af6a07957c370e112c915b27d02ccef05423","sha512":"e814e863b13893f6fcf734d2ac94441ff232a4d6e66f63ffacf8c9d6344fc2f76177dc6af63636479a84e9f2e6ab4f4f5dbed32ef1d21647c4bc35e03c4be2ed","ssdeep":"6144:mSqfogCSzeVmxe636ZXNV3O/pe/c5S7yzu+:mSACSyp6qZnyCch","tlshash":"262412296a31407c7b368bf0c5cf98a7b5a199180ad44be3147b4e1b52bf7d05be4d8c","first_seen":"2026-02-07T09:06:24.2515Z","last_seen":"2026-02-07T09:45:35.094336Z","times_seen":2,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":42,"dns":22,"connect":2,"send":0,"wait":27,"receive":10,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorsuite-recovery.io/","fqdn":"trezorsuite-recovery.io","domain":"trezorsuite-recovery.io","tld":"io"},"ip":{"addr":"172.67.215.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-07T09:45:03.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorsuite-recovery.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 18:29:50 GMT","end":"Fri, 17 Apr 2026 19:28:23 GMT"},"fingerprint":{"sha1":"BF:B9:57:B8:A8:4F:45:25:0C:14:76:EB:E2:75:9D:08:AE:37:3C:3F","sha256":"C0:CA:F1:EE:3F:B3:EF:BA:5A:BE:86:2D:7E:C4:8C:7B:79:88:FE:4D:E3:E8:10:76:6E:6D:C5:F1:4A:4F:63:E4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trezorsuite-recovery.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Feb 2026 09:45:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 17 Jan 2026 16:30:30 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qBSnqtCjFTEDBS7eLrxr0UadcA347APEuBL73t3A1VR0e6n4LNc32dW0hmHLw14nRIAUuXc98Ggpd7M7c9uKTrSRD5%2BqdZ9JKODaQP6Kt2sGIL2NYg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9ca1f3c3fd41712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2288803,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (44283)","md5":"7728344319c9210a50c8186328ed58f7","sha1":"3b41bee1a6f05ce3acbc615159e72f45d57a100d","sha256":"2dfc0490122bbdba81f13aaac7b6117d4caf525c02493d905bb3b7ed96d986f6","sha512":"0591730600b2b5850c39ef0508b0b3b8aebcf281e465f3b748f494c91b226fe7cece72ee35d614e596bd504a56b773c2d2f278b4d401d4c8a7faa5dd2f4a5d50","ssdeep":"24576:o8T2wwd81aJX+yX2RhMQq7AQI2s4/AEsbWm1ihJSrxg2koOPWcgWcO:o8T2wwd81aJX+yX2RhMQq5I2s4/AEtm+","tlshash":"2f25adb42610e17e6c3372af859ce95d8e0ca487ca07d9d9da83317989c9ff305a7634","first_seen":"2026-02-07T09:06:24.217594Z","last_seen":"2026-02-07T09:45:35.090998Z","times_seen":2,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":43,"dns":29,"connect":1,"send":0,"wait":192,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorsuite-recovery.io/","fqdn":"trezorsuite-recovery.io","domain":"trezorsuite-recovery.io","tld":"io"},"ip":{"addr":"172.67.215.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezorsuite-recovery.io/","date":"2026-02-07T09:45:03.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorsuite-recovery.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 18:29:50 GMT","end":"Fri, 17 Apr 2026 19:28:23 GMT"},"fingerprint":{"sha1":"BF:B9:57:B8:A8:4F:45:25:0C:14:76:EB:E2:75:9D:08:AE:37:3C:3F","sha256":"C0:CA:F1:EE:3F:B3:EF:BA:5A:BE:86:2D:7E:C4:8C:7B:79:88:FE:4D:E3:E8:10:76:6E:6D:C5:F1:4A:4F:63:E4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trezorsuite-recovery.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorsuite-recovery.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Feb 2026 09:45:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nlast-modified: Sat, 17 Jan 2026 16:30:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hu1sPvz4fzAY%2BjZK1gpN9FtyDybvwgNYN2Zu7ZhGTLODogftAd8UkFhDKGRRildJevi6Z1NgHr0kmpdFW2WvBM9FT6c2cOOq0hdnxYQzG1oHDaL1zg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-ray: 9ca1f3c6ec2c56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2288803,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (44283)","md5":"7728344319c9210a50c8186328ed58f7","sha1":"3b41bee1a6f05ce3acbc615159e72f45d57a100d","sha256":"2dfc0490122bbdba81f13aaac7b6117d4caf525c02493d905bb3b7ed96d986f6","sha512":"0591730600b2b5850c39ef0508b0b3b8aebcf281e465f3b748f494c91b226fe7cece72ee35d614e596bd504a56b773c2d2f278b4d401d4c8a7faa5dd2f4a5d50","ssdeep":"24576:o8T2wwd81aJX+yX2RhMQq7AQI2s4/AEsbWm1ihJSrxg2koOPWcgWcO:o8T2wwd81aJX+yX2RhMQq5I2s4/AEtm+","tlshash":"2f25adb42610e17e6c3372af859ce95d8e0ca487ca07d9d9da83317989c9ff305a7634","first_seen":"2026-02-07T09:06:24.217594Z","last_seen":"2026-02-07T09:45:35.090998Z","times_seen":2,"resource_available":false,"data":null}},"time_used":611,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":450,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorsuite-recovery.io/490addcf-febb-4312-aa93-dadf3ccc1107","fqdn":"trezorsuite-recovery.io","domain":"trezorsuite-recovery.io","tld":"io"},"ip":{"addr":"172.67.215.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorsuite-recovery.io/","date":"2026-02-07T09:45:04.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorsuite-recovery.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 18:29:50 GMT","end":"Fri, 17 Apr 2026 19:28:23 GMT"},"fingerprint":{"sha1":"BF:B9:57:B8:A8:4F:45:25:0C:14:76:EB:E2:75:9D:08:AE:37:3C:3F","sha256":"C0:CA:F1:EE:3F:B3:EF:BA:5A:BE:86:2D:7E:C4:8C:7B:79:88:FE:4D:E3:E8:10:76:6E:6D:C5:F1:4A:4F:63:E4"}}},"request":{"raw":"GET /490addcf-febb-4312-aa93-dadf3ccc1107 HTTP/1.1\r\nHost: trezorsuite-recovery.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorsuite-recovery.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Feb 2026 09:45:04 GMT\r\ncontent-length: 28150\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 16 Jan 2026 18:03:24 GMT\r\netag: \"6df6-6488528493300\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xPBkFKp2iriiHAVDxK05rTXEp5OFGPkqL4kAzowzZqr5O5PI4SD220PhxzqoDmKcqqz8ys86KlwH4GveoGUCrAB7aS2fK1vSVe%2B%2FvOGWmSYg6KcHPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ca1f3c80c4356b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28150,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"80f4304f424198696b38865de4343e26","sha1":"356f2955b43338606249a9bb70d668ae6c48981e","sha256":"06ec0e20ed7eb25875b0bf85a85eaf955bd3b63d224cff127a5c69b29a03e974","sha512":"a70b604032736fc4a77f39a04e1e56c79a92f43314b15ca6ac7ddf96753208f2d68e5b004504e418570cb69113155669b38f42c9ef28b67d586877538e82d2ff","ssdeep":"384:sLBvjwtEOIoFczZyGaCAAvUY1KAypp1RzXIXZMDTGHNtEeKYuxzLxRteWVFXzFVK:sSaZYL2vUiAraXKDou9LFjVVzFkoGIq","tlshash":"ccc2f16d7ca81c8af42f9322d3eee503c2c54607d3e94ca3eb5897461ee1d8f0599931","first_seen":"2026-02-07T09:06:24.222865Z","last_seen":"2026-05-28T07:10:40.708273Z","times_seen":3,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorsuite-recovery.io/css2-1.css","fqdn":"trezorsuite-recovery.io","domain":"trezorsuite-recovery.io","tld":"io"},"ip":{"addr":"172.67.215.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezorsuite-recovery.io/","date":"2026-02-07T09:45:03.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorsuite-recovery.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 18:29:50 GMT","end":"Fri, 17 Apr 2026 19:28:23 GMT"},"fingerprint":{"sha1":"BF:B9:57:B8:A8:4F:45:25:0C:14:76:EB:E2:75:9D:08:AE:37:3C:3F","sha256":"C0:CA:F1:EE:3F:B3:EF:BA:5A:BE:86:2D:7E:C4:8C:7B:79:88:FE:4D:E3:E8:10:76:6E:6D:C5:F1:4A:4F:63:E4"}}},"request":{"raw":"GET /css2-1.css HTTP/1.1\r\nHost: trezorsuite-recovery.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorsuite-recovery.io/22e3cb71-e3f9-4613-b816-c51537c398d7.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Feb 2026 09:45:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 16 Jan 2026 18:03:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"696a7d6c-1447\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 2352\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vl%2BrcmJAnJL8e5BlRFnSISAtAeKKotTRcerueKbm6zULA7GPpMfG6xdU3pDPCK8qI1MhcVWMG2wKItmUdaC6yDRgk9XXkXzJ0ibuYBiQxY3cQxGxeQ%3D%3D\"}]}\r\ncf-ray: 9ca1f3c78c3a56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5191,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"111d4869b492de784846e770a3a589f3","sha1":"a48bf867d5a1918d68eb9d47607576ab6274c10a","sha256":"e6249d3d2444a469760fe95a6422c6707896ee32ab92b4a2b44668d1f7f0b7d1","sha512":"ef82ee23bea7dfc625c4eefe3709e310e288bf169c03867e08ec7b2c0fa00112a3cadfa9cb9143df9f586c5b3275fe2f9fca3ce24afd56e5d39958a72281742f","ssdeep":"96:+OEa+OOEaOFZOXOEa8OEajJc+ubOEakNLOXaYOOXaHjFZOXOXaWOXadJc+ubOXat:Z+p7QT3PqY6H63yVIv/Xk6aIOhc","tlshash":"d5b1b88040aba400e7571cc82bcf7f366d9db5907006ca38affe1878ad9bc252365b5d","first_seen":"2026-02-07T09:06:24.224881Z","last_seen":"2026-04-12T13:14:00.928143Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorsuite-recovery.io/8d2be3d92fd1fa674c62a8369a3f905fdf5d1994.svg","fqdn":"trezorsuite-recovery.io","domain":"trezorsuite-recovery.io","tld":"io"},"ip":{"addr":"172.67.215.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorsuite-recovery.io/","date":"2026-02-07T09:45:04.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorsuite-recovery.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 18:29:50 GMT","end":"Fri, 17 Apr 2026 19:28:23 GMT"},"fingerprint":{"sha1":"BF:B9:57:B8:A8:4F:45:25:0C:14:76:EB:E2:75:9D:08:AE:37:3C:3F","sha256":"C0:CA:F1:EE:3F:B3:EF:BA:5A:BE:86:2D:7E:C4:8C:7B:79:88:FE:4D:E3:E8:10:76:6E:6D:C5:F1:4A:4F:63:E4"}}},"request":{"raw":"GET /8d2be3d92fd1fa674c62a8369a3f905fdf5d1994.svg HTTP/1.1\r\nHost: trezorsuite-recovery.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorsuite-recovery.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Feb 2026 09:45:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 16 Jan 2026 18:03:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"696a7d6c-585\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 2353\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h8X67ozjJjnW10Zst81RknEsD6Fdmw8GFph73AmXiexZW%2BfnTtJNmD%2BlQL0fWpuFEaoZRDxluSCUxHNmtm%2F9D6nZWven1bPmr%2FLgbp5gDS5F2cjfhw%3D%3D\"}]}\r\ncf-ray: 9ca1f3c80c4056b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1413,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"69a25951738b772ca89a956183322cc9","sha1":"8d2be3d92fd1fa674c62a8369a3f905fdf5d1994","sha256":"26ea9a6a3a289e803b57987f6b76593316a3d91d2a8f1856068dd33fc68cddac","sha512":"9a68d8189f714ed106e53d43217d3f2b1509cc0490b214288254b23bede9844679bae29da5af715bc7709350e44f4dfce4cdb2062d6f336f31312228f57d05d6","ssdeep":"","tlshash":"202110e053f9936cfb0ef179867478853b1630d12982a420e3401d26e55b87a5fca1da","first_seen":"2025-07-15T15:04:44.062185Z","last_seen":"2026-02-19T09:02:15.235579Z","times_seen":42,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorsuite-recovery.io/da974aef55c1f343f5888d3952771b0b2fa7b389.webp","fqdn":"trezorsuite-recovery.io","domain":"trezorsuite-recovery.io","tld":"io"},"ip":{"addr":"172.67.215.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorsuite-recovery.io/","date":"2026-02-07T09:45:04.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorsuite-recovery.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 18:29:50 GMT","end":"Fri, 17 Apr 2026 19:28:23 GMT"},"fingerprint":{"sha1":"BF:B9:57:B8:A8:4F:45:25:0C:14:76:EB:E2:75:9D:08:AE:37:3C:3F","sha256":"C0:CA:F1:EE:3F:B3:EF:BA:5A:BE:86:2D:7E:C4:8C:7B:79:88:FE:4D:E3:E8:10:76:6E:6D:C5:F1:4A:4F:63:E4"}}},"request":{"raw":"GET /da974aef55c1f343f5888d3952771b0b2fa7b389.webp HTTP/1.1\r\nHost: trezorsuite-recovery.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorsuite-recovery.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Feb 2026 09:45:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1318\r\nlast-modified: Fri, 16 Jan 2026 18:03:24 GMT\r\npriority: u=4,i=?0\r\netag: \"696a7d6c-526\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 2353\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U1U9WhknLqOH4wqL3CmCtZIQV4x6wTy1OtPeQyohz7NE965ouWwJKSkGL3rhI60qfkDe0Ozpci6vo7tIipvkd9uOkjcPouF4u39mx1Mp1cgf8uVc1Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ca1f3c80c4156b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1318,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c26e45cae3d02d9942ed0380e587f9ca","sha1":"da974aef55c1f343f5888d3952771b0b2fa7b389","sha256":"0d7589be044acdb28633fdf313cc6adaa15a19b27de85eb6b14ddc125e6e1a45","sha512":"6048fd686819e5253cfa0206543bf1033cb8d68c7630734c4aa74bf77c1b8754e6cc69cd96159d4627d7951b5e82b61874b08c999da6a4e0c8d08be21cda7b88","ssdeep":"","tlshash":"7a21f86840e5036cc993d8bac116c03494eb02bbe74eb668123071d172b60178a93df2","first_seen":"2024-06-21T17:22:35Z","last_seen":"2026-06-04T13:32:30.780774Z","times_seen":575,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorsuite-recovery.io/dace4ad5-b46d-494b-91bf-4f2156b11681","fqdn":"trezorsuite-recovery.io","domain":"trezorsuite-recovery.io","tld":"io"},"ip":{"addr":"172.67.215.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorsuite-recovery.io/","date":"2026-02-07T09:45:04.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorsuite-recovery.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 18:29:50 GMT","end":"Fri, 17 Apr 2026 19:28:23 GMT"},"fingerprint":{"sha1":"BF:B9:57:B8:A8:4F:45:25:0C:14:76:EB:E2:75:9D:08:AE:37:3C:3F","sha256":"C0:CA:F1:EE:3F:B3:EF:BA:5A:BE:86:2D:7E:C4:8C:7B:79:88:FE:4D:E3:E8:10:76:6E:6D:C5:F1:4A:4F:63:E4"}}},"request":{"raw":"GET /dace4ad5-b46d-494b-91bf-4f2156b11681 HTTP/1.1\r\nHost: trezorsuite-recovery.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorsuite-recovery.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Feb 2026 09:45:04 GMT\r\ncontent-length: 40570\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 16 Jan 2026 18:03:24 GMT\r\netag: \"9e7a-6488528493300\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rQXjVGD8R6ECa%2B9trNp7JGndhZmSRFWyFz2fMF4bi7U5JHz9i%2B9J%2BdEFKuJH7uuNoRZomEsIOaq8cjIWgoOzhzPZm8RihJdqCFYvPN%2FSoiAm4h%2BtDw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ca1f3c81c4656b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40570,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a6e7ae9a6628db77d703e357006e3b89","sha1":"3523a4689e89d9b4cc7bde0a1e9028fad6508293","sha256":"eb7152e7c21a48af9e5a1fa037e40c5bc1359033b175758eddba4c7711d12557","sha512":"ed162c0b8d4b0a57dda0d0b7c92b67fcc385fa6636952b6e32a7bf05f82bf79736b94e3861b89f4c9d426d6cc81bec31ca85aad376ba4e7c30f0e32edcfd142f","ssdeep":"768:xeKP0XRVTxBSLd5xzi7+jtzRfix21JW0hOioMc9HVbV6K3ApHOKr:dP0X/9B8dlskW00ic9DHApu","tlshash":"9a03cf1e3e3d4dccde2733792c5d25e850128350a5d92894daeaa3b25b13073efea15e","first_seen":"2026-02-07T09:06:24.257584Z","last_seen":"2026-02-07T09:45:35.097454Z","times_seen":2,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorsuite-recovery.io/","fqdn":"trezorsuite-recovery.io","domain":"trezorsuite-recovery.io","tld":"io"},"ip":{"addr":"172.67.215.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorsuite-recovery.io/","date":"2026-02-07T09:45:03.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorsuite-recovery.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 18:29:50 GMT","end":"Fri, 17 Apr 2026 19:28:23 GMT"},"fingerprint":{"sha1":"BF:B9:57:B8:A8:4F:45:25:0C:14:76:EB:E2:75:9D:08:AE:37:3C:3F","sha256":"C0:CA:F1:EE:3F:B3:EF:BA:5A:BE:86:2D:7E:C4:8C:7B:79:88:FE:4D:E3:E8:10:76:6E:6D:C5:F1:4A:4F:63:E4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trezorsuite-recovery.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorsuite-recovery.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Feb 2026 09:45:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 17 Jan 2026 16:30:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BdHZcZd6x84DHT%2Ffpu3XULAfdzo%2FYvYN%2BT9lmIOgf2fvFTul7Tn0anU0xPt5jkYsAkVg4PjJnsmNYG4xcnSMEOc%2FA9%2FsBpOsh1GjJ5tn0TTlzo1oGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-ray: 9ca1f3c6fc2e56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1397393,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (44283)","md5":"7728344319c9210a50c8186328ed58f7","sha1":"3b41bee1a6f05ce3acbc615159e72f45d57a100d","sha256":"2dfc0490122bbdba81f13aaac7b6117d4caf525c02493d905bb3b7ed96d986f6","sha512":"0591730600b2b5850c39ef0508b0b3b8aebcf281e465f3b748f494c91b226fe7cece72ee35d614e596bd504a56b773c2d2f278b4d401d4c8a7faa5dd2f4a5d50","ssdeep":"24576:o8T2wwd81aJX+yX2RhMQq7AQI2s4/AEsbWm1ihJSrxg2koOPWcgWcO:o8T2wwd81aJX+yX2RhMQq5I2s4/AEtm+","tlshash":"2f25adb42610e17e6c3372af859ce95d8e0ca487ca07d9d9da83317989c9ff305a7634","first_seen":"2026-02-07T09:06:24.217594Z","last_seen":"2026-02-07T09:45:35.090998Z","times_seen":2,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":379,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorsuite-recovery.io/css2.css","fqdn":"trezorsuite-recovery.io","domain":"trezorsuite-recovery.io","tld":"io"},"ip":{"addr":"172.67.215.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezorsuite-recovery.io/","date":"2026-02-07T09:45:03.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorsuite-recovery.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 18:29:50 GMT","end":"Fri, 17 Apr 2026 19:28:23 GMT"},"fingerprint":{"sha1":"BF:B9:57:B8:A8:4F:45:25:0C:14:76:EB:E2:75:9D:08:AE:37:3C:3F","sha256":"C0:CA:F1:EE:3F:B3:EF:BA:5A:BE:86:2D:7E:C4:8C:7B:79:88:FE:4D:E3:E8:10:76:6E:6D:C5:F1:4A:4F:63:E4"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: trezorsuite-recovery.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trezorsuite-recovery.io/22e3cb71-e3f9-4613-b816-c51537c398d7.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Feb 2026 09:45:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 16 Jan 2026 18:03:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"696a7d6c-8024\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 2352\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i0m796ZamSBdzsx%2BcKAt0Jfx6c23BW2SZllioAJ7XP59AJT2Kmut18Mfz1NlSzVK%2BQ%2BvBBbvuw2mQgFQ05n2Uz4RQRXoxfs0bBa7FcgB3Zd3MqfC0A%3D%3D\"}]}\r\ncf-ray: 9ca1f3c76c3456b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32804,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1572)","md5":"284aa33e5f0cd4b93a61d0deacedf10c","sha1":"fe083be7a97179b8eca167420b094ad52a210754","sha256":"71245efd65bda39621bdc5a73541fc946ac388409a31baf10dc47574339393b2","sha512":"79940cc2e62399c32499dc6587c808b5cdb06d6d1847378bb8365148b442c84129ad0adacf893f25eff5f84bf80b7ddc712ebc8f7261daa31576339f0c2f2524","ssdeep":"384:MvsVfY/bgUEguqjOPQK3b6vOqY49ntQE7BqY4xSChHgno1gqY4nb37LKqY4Z8lkS:C6UhpUOyed6C","tlshash":"abe2fb90042b2040ea975ce127ce3f32ee4ea2506144d6787ffd179baddbca562b479c","first_seen":"2026-02-07T09:06:24.259594Z","last_seen":"2026-02-07T09:45:35.098023Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"trezorsuite-recovery.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}