{"report_id":"e4bc0121-2ac3-419c-8d30-781d814b38bf","version":6,"status":"done","tags":[],"date":"2026-04-14T16:51:38Z","url":{"schema":"https","addr":"tresorwallets.pages.dev","fqdn":"tresorwallets.pages.dev","domain":"tresorwallets.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.149","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"tresorwallets.pages.dev/","fqdn":"tresorwallets.pages.dev","domain":"tresorwallets.pages.dev","tld":"pages.dev"},"title":"Trezor Wallet — Ultimate Guide to Secure Cold Storage","dom":{"size":4344,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"45853e080b0836c5d8793d9189908736","sha1":"17a1d010356dd022db4e7d63e9ec51cbd1517266","sha256":"6d587324e93e340211316e40204879cf6731552d3bbf37de372ddcce2c6c8538","sha512":"ef8e054aa6e04816b1311e119e22685dd55a9cef7713def2c420f28466b1cd6f85fad97aafb8f0c167e55aaa78fe9252b54ff8523b07ac955972d12345bb7fbf","ssdeep":"96:nBHgxcRIIA+M31OEP7/+BG6BRKIlITOr+ni0Qzu:BAupA+Q1nD+hB8Y76irzu","tlshash":"7891785bf27c3327458342f6745253feba2bc4c6d21812a1aab4814d7fe09958d632cd","dom_hash":"domhash9d80e0f757ac286f03648c2a787d59c4","first_seen":"2026-04-14T16:51:40.631521Z","last_seen":"2026-04-19T00:42:34.458761Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"tresorwallets.pages.dev","fqdn":"tresorwallets.pages.dev","domain":"tresorwallets.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.149","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-19T16:51:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-14T16:51:16Z","timestamp":1776185476,"ip_dst":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":36340,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2026-04-14T16:51:16.851963+0000\",\"flow_id\":1329846169162637,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":36340,\"dest_ip\":\"188.114.97.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"tresorwallets.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":925,\"bytes_toclient\":3556,\"start\":\"2026-04-14T16:51:16.840589+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"tresorwallets.pages.dev","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-04-14T16:51:38.291997Z","last_seen":"2026-04-14T16:51:38.291997Z","alert_count":0,"request_count":3,"received_data":16284,"sent_data":1389,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tresorwallets.pages.dev/","fqdn":"tresorwallets.pages.dev","domain":"tresorwallets.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bbe0b7c346faa740c945e2da51ba5e5f","sha1":"b98b3fdbd20f4cb61c960547ff195aba1602ee0b","sha256":"190620410717a797284e94eed37b819a1db4042ae240b1130a124c6c70e7a95c","sha512":"a374823a662ca5ba7041a0fd0cfd63efcad6e327aee40c2349c5aa46108ec9fb755ebaa6d8d68bd1d84968c93d96628fbc3db61b70bb4b8f9a67e438a9e35aeb","ssdeep":"","tlshash":"cdd02e0a745920bf487b0466a28203023b3a4005368601239ab8a0ef03a9d3e2e50a97","size":261,"data":"","first_seen":"2025-10-14T21:15:38.373129Z","last_seen":"2026-05-03T08:42:10.98985Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tresorwallets.pages.dev/","fqdn":"tresorwallets.pages.dev","domain":"tresorwallets.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-14T16:51:16.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tresorwallets.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Apr 2026 19:33:38 GMT","end":"Wed, 08 Jul 2026 20:31:57 GMT"},"fingerprint":{"sha1":"5E:37:1C:1A:33:5B:A2:F6:4E:A2:41:DE:F8:7A:4A:9B:4B:8D:8B:FA","sha256":"10:3E:D0:AE:5A:0A:7E:4A:59:4E:71:77:A1:34:31:0E:FC:4A:E1:17:3D:8D:D6:C9:29:8A:F6:A8:0E:D8:EB:D0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tresorwallets.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Apr 2026 16:51:17 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AC6KW5mZL5ZmGz%2Fe0bcdfvMKxUd6yJRsv9SBe9kDlbcLlKXtCmZIdcMKXqqPnspz5iAYYFF4rIjeFShveg25al%2Fbk9InWY5Ef2eztCSqPASj6uF9zDfIVx9SHcKLvP1HNvaAHgY1sXMZHA%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ec436de6f8db4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4438,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"6bd3e397c5fea7ee310e192e9e1d0f4c","sha1":"108911175545266de61b235a8bf74bb4b6393247","sha256":"10670a99e37bbc6d936a3e3dd281a16178d8e7a5c1574b980746cf6df51cbb53","sha512":"cbcdbe69074a94287052eabad2f7ed4eda34a63d7b0aed344762e2547e9e57501b93111f34827a8440182c674d346bb68e0f96a4edcb679ce3cf6cfecb97ca06","ssdeep":"96:JSivpmqVIe8PLc+Mi1OboqKcuuPVGyK3AKIPMYPsOriPAbia7RW:JjAq78w+n1yADudK3/eMOvkAeoRW","tlshash":"c1915546b3dc3a27067342f9741293fef926c0c6a2181ab1b9b9514f3fb49548da32cd","first_seen":"2025-10-14T21:15:38.358438Z","last_seen":"2026-04-19T00:42:34.460296Z","times_seen":5,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":59,"dns":43,"connect":1,"send":0,"wait":226,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tresorwallets.pages.dev/style.css","fqdn":"tresorwallets.pages.dev","domain":"tresorwallets.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tresorwallets.pages.dev/","date":"2026-04-14T16:51:17.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tresorwallets.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Apr 2026 19:33:38 GMT","end":"Wed, 08 Jul 2026 20:31:57 GMT"},"fingerprint":{"sha1":"5E:37:1C:1A:33:5B:A2:F6:4E:A2:41:DE:F8:7A:4A:9B:4B:8D:8B:FA","sha256":"10:3E:D0:AE:5A:0A:7E:4A:59:4E:71:77:A1:34:31:0E:FC:4A:E1:17:3D:8D:D6:C9:29:8A:F6:A8:0E:D8:EB:D0"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: tresorwallets.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tresorwallets.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 16:51:17 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SMuopYGPl9BtJwEKGmxgjf9jIomXYqtLEBHEhfq6csKMIQ6k%2FoTE%2FbseRIYjt1DTcQbPbLSAdE72d932uxTvR795mMtbTgcTe3vUoWGZuUuBs4s8o6fscjVEFW52edQfinG7BzJSIQNGwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a6ca5a8dd2f7e88c1c95daf984761ba6\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ec436e0bc3156ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5154,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"3c4b6254c46ff0bcac42f44d16dbb4e9","sha1":"4ed1910e1be2fbbff2ca2f84d1f666a9529b5baf","sha256":"9323f5edabc123cf6f021fc1020ed1f5d8808958d3e5ae094ff80926856c73a6","sha512":"4a2aa380f94757031f59286d7725fe55a67af1af250862742e1615eafdcb6432da33f3af0d56658215f2d715837dd74e393c28448caa32ffc554bca7cabb505a","ssdeep":"96:kZwaKJWhx9SS6QNjDVF4mcXU8F6q/9Ja1qBPWXLz5eIUKumY:kZoCSBQdDncXUy6q/tCLz5eIUKuL","tlshash":"bbb1750467012014f137d880e7c1635fa9fce842e9231a9efbab6049dbc76de5366b1c","first_seen":"2025-10-14T21:15:38.367522Z","last_seen":"2026-04-19T00:42:34.462113Z","times_seen":7,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tresorwallets.pages.dev/favicon.ico","fqdn":"tresorwallets.pages.dev","domain":"tresorwallets.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tresorwallets.pages.dev/","date":"2026-04-14T16:51:17.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tresorwallets.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Apr 2026 19:33:38 GMT","end":"Wed, 08 Jul 2026 20:31:57 GMT"},"fingerprint":{"sha1":"5E:37:1C:1A:33:5B:A2:F6:4E:A2:41:DE:F8:7A:4A:9B:4B:8D:8B:FA","sha256":"10:3E:D0:AE:5A:0A:7E:4A:59:4E:71:77:A1:34:31:0E:FC:4A:E1:17:3D:8D:D6:C9:29:8A:F6:A8:0E:D8:EB:D0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: tresorwallets.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tresorwallets.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 16:51:17 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BKNkC1gQd98WgbFMtIbc5L1TstY9YvJQ0t1VPkOARwvLM9Pam1%2BxvkPaty7J6%2FPJtjJdRLx%2FNUFF1jSIdCNxoPWBhkYLnGFiO%2FM%2FLK%2BS6WkYjqN%2BbqjaGvcdgXaqDQDfwOY6n9VyozB4XA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ec436e17d5b56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4438,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"6bd3e397c5fea7ee310e192e9e1d0f4c","sha1":"108911175545266de61b235a8bf74bb4b6393247","sha256":"10670a99e37bbc6d936a3e3dd281a16178d8e7a5c1574b980746cf6df51cbb53","sha512":"cbcdbe69074a94287052eabad2f7ed4eda34a63d7b0aed344762e2547e9e57501b93111f34827a8440182c674d346bb68e0f96a4edcb679ce3cf6cfecb97ca06","ssdeep":"96:JSivpmqVIe8PLc+Mi1OboqKcuuPVGyK3AKIPMYPsOriPAbia7RW:JjAq78w+n1yADudK3/eMOvkAeoRW","tlshash":"c1915546b3dc3a27067342f9741293fef926c0c6a2181ab1b9b9514f3fb49548da32cd","first_seen":"2025-10-14T21:15:38.358438Z","last_seen":"2026-04-19T00:42:34.460296Z","times_seen":5,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}