{"report_id":"ee233786-a8ec-4d15-91a3-ed0f7e3355ba","version":6,"status":"done","tags":[],"date":"2025-12-11T01:53:01Z","url":{"schema":"https","addr":"webpages.ghost.io/tzrsuite-app","fqdn":"webpages.ghost.io","domain":"webpages.ghost.io","tld":"ghost.io"},"ip":{"addr":"151.101.239.7","port":0,"asn":54113,"as":"FASTLY","country":"Norway","country_code":"NO"},"final":{"url":{"schema":"https","addr":"suite.trezor.io/web/","fqdn":"suite.trezor.io","domain":"trezor.io","tld":"io"},"title":"Trezor Suite","dom":{"size":10908,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10908), with no line terminators","md5":"298ee189e018c48a928469cd4376f75d","sha1":"ce61b04a8131daa17c54651e0644a2511389a7bf","sha256":"45647f1cc7153ad8b1be54fe6da66a1d7ac39c05f0df9d1ed591693c34e0116d","sha512":"16dd3c765b15091430d9c508c0fe70dcda69ad02e8bbc6c8b00c0c463bb6e7b26b08f19a51a51c058830613cdcc2b239fc45dc5f278c2dbc1ce522a4eef3200b","ssdeep":"192:KzZniKdZ57V9NjeSZrK9XAj93Fj29Z4ynGg4y/nWg4yYc5ZqW6I:OZniKdZ57rNj3uXAj93FjOO1bKWbJc5B","tlshash":"eb32973fa218465df72b43c9ccf6bb19243d30ce16a454c4f3250aa5a93d9ee25377a2","dom_hash":"domhash281a925b18867deaf9013a9747fbc653","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"webpages.ghost.io/tzrsuite-app","fqdn":"webpages.ghost.io","domain":"webpages.ghost.io","tld":"ghost.io"},"ip":{"addr":"151.101.239.7","port":0,"asn":54113,"as":"FASTLY","country":"Norway","country_code":"NO"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-15T01:53:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"ht4grt7-ggrerg518-5r84g8regr.netlify.app","ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2018-05-08","domain_rank":0,"first_seen":"2025-12-11T01:53:06.694502Z","last_seen":"2025-12-11T01:53:06.694502Z","alert_count":0,"request_count":7,"received_data":75825,"sent_data":3505,"comment":"","tags":null,"fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"hwepascsajm.sbs","ip":{"addr":"94.154.172.199","port":443,"asn":208046,"as":"ColocationX Ltd.","country":"Bulgaria","country_code":"BG"},"domain_registered":"2025-04-01","domain_rank":0,"first_seen":"2025-04-22T05:57:53.380605Z","last_seen":"2025-04-22T05:57:53.380605Z","alert_count":0,"request_count":1,"received_data":1773,"sent_data":687,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}]},{"fqdn":"suite.trezor.io","ip":{"addr":"3.167.2.73","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2014-07-21","domain_rank":2156261,"first_seen":"2024-11-22T00:31:28.798487Z","last_seen":"2025-12-10T11:46:19.356639Z","alert_count":0,"request_count":10,"received_data":10490337,"sent_data":4642,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"webpages.ghost.io","ip":{"addr":"151.101.131.7","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2011-10-02","domain_rank":0,"first_seen":"2025-12-11T01:53:06.695164Z","last_seen":"2025-12-11T01:53:06.695164Z","alert_count":0,"request_count":4,"received_data":157311,"sent_data":1926,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ghost:6.10","description":"Ghost is a powerful app for new-media creators to publish, share, and grow a business around their content.","website":"https://ghost.org","common_platform_enumeration":"","icon":"Ghost.svg","categories":["CMS","Blogs"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"suite.trezor.io/web/","fqdn":"suite.trezor.io","domain":"trezor.io","tld":"io"},"ip":{"addr":"3.167.2.73","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-07-28T08:55:55.935133Z","times_seen":369919,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webpages.ghost.io/tzrsuite-app/","fqdn":"webpages.ghost.io","domain":"webpages.ghost.io","tld":"ghost.io"},"ip":{"addr":"151.101.131.7","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"20149cffdc3c2617f208d3afde1ca1a0","sha1":"4f9ee5a3abe3b02f572e0ad416520a8cc601fae6","sha256":"177b1439363af96c42cd7371cca28de7b3a19c98a4f4767b89d3a4b47b60db91","sha512":"72ba3f79694a757c66110beda93d35df18acd2edb5e56b882087604f237dcc3de00ee1d89b076499eca0d4325d9fb392e5ebd203e45c86b5b15b39ec2113fabc","ssdeep":"","tlshash":"55118968bba301252bd382bc2fadd704581be48f9516ea083d3de8600f1074d4433ce6","size":903,"data":"","first_seen":"2024-11-21T06:43:46.363817Z","last_seen":"2026-07-13T03:24:26.027397Z","times_seen":2929,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"suite.trezor.io/web/","fqdn":"suite.trezor.io","domain":"trezor.io","tld":"io"},"ip":{"addr":"3.167.2.73","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"55281d55934aba59092689a26784ea07","sha1":"59c6c293ed41c70f6567d5522af89f792fa3567a","sha256":"069fcbd5fe9df55180e66b836e26df2da98718a29d01791c102e748bcf81b24d","sha512":"5e73091fd56c85ff07e9a9374998b6c284a8e193756335b691f5e37965f7de017e79fa9f88a9ab7d8857cd799d42cd59cc8b74b9742a22619993a0a3d96ee49a","ssdeep":"","tlshash":"26f02b381e09f5773ba2e09db2cf71d6e82694e25d39c940b68acc55ad6cc430662172","size":570,"data":"","first_seen":"2025-07-17T15:04:53.586132Z","last_seen":"2025-12-11T01:53:10.970087Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"suite.trezor.io/web/js/543.55a98baa.js","fqdn":"suite.trezor.io","domain":"trezor.io","tld":"io"},"ip":{"addr":"3.167.2.73","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"981b2de8b9527b75e3b8a63e472b85dd","sha1":"21cb0be052f023329023dc82bb8d011ebd0d5419","sha256":"f468c4d6e435ade87c60c16401f4720423ae06f4eb6d1e128141dfaab444f81d","sha512":"88b313bdaf1de7183770196b1678124c1b1c2ae4a065b6038b02f9f15bcb1228d5248611438092fae8fa8467e48e8a39d0197bfa86c12d7e16bc24a9f2a24a62","ssdeep":"3072:BFlGHFQ9AnFFAnlAEHJd0VbUGEihc9GQaS+Ynk+kqRztI8UCGzo5UCGzsAUCGz+X:3OwlASqSBnkWn6mx0CNBrETqi","tlshash":"8224e5c433d26062729ad1cbc8e6054bf2a845a57c09407d73bcecfeea53d9422b9b75","size":228343,"data":"","first_seen":"2025-12-10T11:46:23.118145Z","last_seen":"2025-12-11T01:53:10.944697Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"suite.trezor.io/web/js/2846.a8697a38.js","fqdn":"suite.trezor.io","domain":"trezor.io","tld":"io"},"ip":{"addr":"3.167.2.73","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa4da0546af7001343cce0df0169c168","sha1":"02daf9b22aca707e7ed8379c449775224e785a56","sha256":"86024eccf8fe9383f7ba25c0fc01dc5464b88a295beba86b0910f165201970a7","sha512":"1fa3767e00aa155e220f7f80668d2aa922c83607aba03f402d3f2fed6cea773c27e3d585cbe901d7c52246d52f6fe4a8e531c8010cf0eb2deb7a5ba173798140","ssdeep":"49152:hn4LeuBiN03jMLMeFxd7TE4gL4bNqY4xOAIxbuE855Ye6uDz8VH9ElHEYUotHypF:z43ffLaGZ4uKFqtwNTiv+YQ3l","tlshash":"9c662ac47291f06143e721e5403f1007f239a969744d8468f769eceb7cb998aa27bf39","size":6602720,"data":"","first_seen":"2025-12-10T11:46:23.130204Z","last_seen":"2025-12-11T01:53:10.971221Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webpages.ghost.io/tzrsuite-app/","fqdn":"webpages.ghost.io","domain":"webpages.ghost.io","tld":"ghost.io"},"ip":{"addr":"151.101.131.7","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f83cd8195981de5551e5d8106c246d0c","sha1":"bfa7f9fe79111a6422a0f1aa87dabdea8364ece7","sha256":"33f6107bfa1d7fe932893ff09942f766611fb8b4dc9774d8c47148ef502f8087","sha512":"2d1e09840c0bbb3fb31648f85a6c608e260c6eba2bd1eeb9eb2b2ef6a3c10bff8394e18789417f64134df7cb9b4803bf5ff9c80679d15dbffc3965180769db7f","ssdeep":"","tlshash":"93b012a73c95b981adf258cb4006b32820e3c09f1ccdc029924226398b9b02e723f4ad","size":105,"data":"","first_seen":"2025-12-11T01:53:10.972199Z","last_seen":"2025-12-11T01:53:10.972199Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ht4grt7-ggrerg518-5r84g8regr.netlify.app/","fqdn":"ht4grt7-ggrerg518-5r84g8regr.netlify.app","domain":"ht4grt7-ggrerg518-5r84g8regr.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"domTimer","is_inline":false,"md5":"17b14b45d138ddd8efe5d51fe94d0446","sha1":"757d6b14a8677b0a30594c7e52031085f02847f3","sha256":"7c2148a46e7a4d983daeec512abb7a4bf4f52c60353411ec0fd4d94b93103412","sha512":"d7babe87b82873226739078eec14136267e1be354c1f1e5d3466381d9c1706aac61bbe2b04c6f3d668a9d337ecd60f95aac7da992a1f84aad922489aee82de05","ssdeep":"","tlshash":"d6a00020e8808000000a0c3a0202000000280888e020220088202c0200022032200000","size":75,"data":"","first_seen":"2025-12-10T11:46:23.127291Z","last_seen":"2025-12-30T07:08:28.258069Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ht4grt7-ggrerg518-5r84g8regr.netlify.app/files/js/btg7r4r.js","fqdn":"ht4grt7-ggrerg518-5r84g8regr.netlify.app","domain":"ht4grt7-ggrerg518-5r84g8regr.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b991dbeaeac70c314975bccc107384f3","sha1":"b239fe17002f64bdb19b079ab68aebfb67e11a05","sha256":"a9b6c3aa1a0f71d4955cd18ad51b0ec94d6d0db18e3ec8615d17f2e3c827cc73","sha512":"a215a02a720e68f89978fe3cbed602d5fdd99dd4e7c48f16f566708efee20db56e378d7ba34f5f2178395ca496ae08c3214e3fcb1bbefc63b6a40e53d57f1820","ssdeep":"96:cfKWjxQCGeQZ5+MgJ0JMIQyKM42AVqCl+Bgjq3v:L8xWORqCl+BgjO","tlshash":"ac91ff69693804750abfe37fab935a49fb364063500161257d7c8e891fb0c0452b6fee","size":4597,"data":"","first_seen":"2025-12-11T01:53:10.960254Z","last_seen":"2025-12-11T01:53:10.960254Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ht4grt7-ggrerg518-5r84g8regr.netlify.app/files/js/gtr48tr.js","fqdn":"ht4grt7-ggrerg518-5r84g8regr.netlify.app","domain":"ht4grt7-ggrerg518-5r84g8regr.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"1f47a6c6e24da2494ce96cab3b489232","sha1":"a4fbb09f57971d5253ee6212dce281463d3d96f4","sha256":"f561215daef2a7566c1e468af9b2905e3c66ad257f558389badb04fee42422a0","sha512":"a935da57450f774f344f4100006244dbbd82bbd7f883c5a1339fb724b8bb644888e25bdf61bfdc5ea8d817bb80a3430642ea3fd7f70b17ca4643fbc8bb452a5f","ssdeep":"384:EGSdd+F4fQBngv+lJHiZVU4mISLi1dT6rTLc+NBms9n5FtRqGCRIafbUEeKqgWSj:p4WYsbFic++LAdiohwyj","tlshash":"a7928b3cf617091b04e2d5587cc50581bbb883684382be1e669c82a437dec7cb94fbe9","size":20781,"data":"","first_seen":"2025-12-10T11:46:23.110934Z","last_seen":"2025-12-30T07:08:28.251251Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"suite.trezor.io/web/static/browser-detection/index.js","fqdn":"suite.trezor.io","domain":"trezor.io","tld":"io"},"ip":{"addr":"3.167.2.73","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"40fe4417557f6fdb67b96896c1fcb1f0","sha1":"c39f5838941ffebf0f113dcebb5d658dd75809d9","sha256":"61083df831bc8b41b0f4ac8efe2196fc501feab490a2a217aec8858af6d14a2a","sha512":"152bb075065828c31f50fb67e1fc2a32682bb6db38dde6a50742038318cebd44593b64b322e0ae32bb4ae8f2f8addd015b14a01a1758b5369a1cb784145c1ed6","ssdeep":"768:c+LXDo6N2vZc7f8UPQlKVelNkFUZvWtkE2wk1rdDaoCCvB+MxEmz/gIKvE2RKT5Y:b1mr4SdwcvRvxxEmcMN5o0cOYdl9","tlshash":"13536e7ff2c1b63a03a656e9e1760000b72e1515ea488478b76dc4c3ffb19d9509ba3b","size":66318,"data":"","first_seen":"2025-11-26T14:36:22.318739Z","last_seen":"2025-12-11T01:53:10.954856Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"suite.trezor.io/web/js/main.b80ca23a.js","fqdn":"suite.trezor.io","domain":"trezor.io","tld":"io"},"ip":{"addr":"3.167.2.73","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"64b38e8e468ea83c7f9c43113c556903","sha1":"8ead7b228bbf3d707a1ca3fda64f06ef9c91ab45","sha256":"79d6236dc23dedf83d040ae353c75505e069a54b627bfe15d297a40bdfd702a5","sha512":"f8740f466c94d76b5a3e8255276f2569acfa769612b4749b48b7bda2fa0df78c563bb3067e126083955cf26b2bfee8897c8c69a08deebe113e802e120ebdc221","ssdeep":"192:xQrfLHiMA+Q5nfdYjz5jo3TeP5uB2gLO2lBC3YeNZrdUVfL37pSYTj986jRDtK7U:erLzonfdao3CBucgfi3Y+ZpUVfL7RTjT","tlshash":"5c2209aeb76ce8da3c3002c1ad5a40e0254c7433394914e1b5edc67a48b4ee956a9fe7","size":10778,"data":"","first_seen":"2025-12-10T11:46:23.094573Z","last_seen":"2025-12-11T01:53:10.936837Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"suite.trezor.io/web/js/3524.9c1c8187.js","fqdn":"suite.trezor.io","domain":"trezor.io","tld":"io"},"ip":{"addr":"3.167.2.73","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd58aa676b936cf7ca2dfb6c06fc458b","sha1":"faaa78327b04016122086ef24c28ca5ef1d7378e","sha256":"828ef8c8b949693d6074d0e144a0c2c328576d4c7e67a4ca0b1ce3bb415e67ba","sha512":"16edc014e151b100353cead2ba70d69bdb6846a82ee70951142edead288c0f74cc279ef8d87ff8366003c3ab4855cf3e9542742ea10fd0def6142ce323887a9a","ssdeep":"49152:UbvhqCKPwFTe+hCmLPCRr6ai5QANJrcjVd5BpEZW88gjh1f7W9Dbi:CvLPyg","tlshash":"49e55c8af8127c9d679704c8e0ef59d8611d0608754cc8e6bfe84d11179aecd22fbbb9","size":3253532,"data":"","first_seen":"2025-12-10T11:46:23.125347Z","last_seen":"2025-12-11T01:53:10.977285Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ht4grt7-ggrerg518-5r84g8regr.netlify.app/files/css/style.css","fqdn":"ht4grt7-ggrerg518-5r84g8regr.netlify.app","domain":"ht4grt7-ggrerg518-5r84g8regr.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ht4grt7-ggrerg518-5r84g8regr.netlify.app/","date":"2025-12-11T01:52:39.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 31 Jan 2025 00:00:00 GMT","end":"Tue, 03 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"04:28:C9:A3:BC:06:50:9C:6B:0B:67:72:82:27:C6:3D:99:1B:5B:71","sha256":"FA:34:6A:A0:1C:F5:9C:C7:30:CA:55:23:13:A1:3E:0F:21:8C:3A:0B:B5:CC:E5:67:09:FE:64:EC:97:4E:8D:75"}}},"request":{"raw":"GET /files/css/style.css HTTP/1.1\r\nHost: ht4grt7-ggrerg518-5r84g8regr.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ht4grt7-ggrerg518-5r84g8regr.netlify.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Thu, 11 Dec 2025 01:52:39 GMT\r\netag: \"31a02474cd6f6766bea44a77d15ffcdf-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KC5HRG6E9VQR7PSG6SDMXFQT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12408,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"3dfcf04943a54a0dd7e1c433498cb7ae","sha1":"cc679cdfdfe75ebd7fd4b15ffefe283869abd9ab","sha256":"fecd46e60d9bba743fd45607344a104a784521f6ba54eae63c3929aa3d341901","sha512":"8c15f38dbb800149425598ccbabc8e1e0e83bcad811e5b6d950113ab9eb436484201c29e528ad7de42d6f74872b65cc6dfb68695b7fcc976b013a7c47cbe3989","ssdeep":"192:aBfOT2fWQ2K+zGAqHFmYxcxtrKeX9VcdBfZLJU5a37Kg5MNFwaTV7IMDFe5YzUzg:vwrZ3A","tlshash":"02426558de0910469637c6643ff25b25e2e58023870651be7ff166848ff626886a3fdc","first_seen":"2025-12-11T01:53:10.930048Z","last_seen":"2025-12-30T07:08:28.255511Z","times_seen":137,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hwepascsajm.sbs/W/TZ/Sender.php","fqdn":"hwepascsajm.sbs","domain":"hwepascsajm.sbs","tld":"sbs"},"ip":{"addr":"94.154.172.199","port":443,"asn":208046,"as":"ColocationX Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-11T01:52:42.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hwepascsajm.sbs.94-154-172-199.cpanel.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Nov 2025 16:22:53 GMT","end":"Sat, 14 Feb 2026 16:22:52 GMT"},"fingerprint":{"sha1":"0B:D4:45:CF:2A:22:9D:BB:48:0A:B4:62:11:2F:41:CF:87:BC:C3:A2","sha256":"FD:78:C3:37:98:5D:3B:6A:E1:0D:02:1F:ED:9B:71:EC:C7:1B:59:07:A9:4A:2C:71:D3:E5:6A:77:73:42:93:7E"}}},"request":{"raw":"POST /W/TZ/Sender.php HTTP/1.1\r\nHost: hwepascsajm.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 86\r\nOrigin: https://ht4grt7-ggrerg518-5r84g8regr.netlify.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ht4grt7-ggrerg518-5r84g8regr.netlify.app/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":86,"data":"seed1=\u0026seed2=\u0026seed3=\u0026seed4=\u0026seed5=\u0026seed6=\u0026seed7=\u0026seed8=\u0026seed9=\u0026seed10=\u0026seed11=\u0026seed12="}},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Thu, 11 Dec 2025 01:52:44 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 3286\r\nConnection: keep-alive\r\nX-Powered-By: PHP/8.1.33\r\nLocation: https://suite.trezor.io/web/\r\nCache-Control: no-cache, no-store, must-revalidate, max-age=0\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nX-turbo-charged-by: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1275,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T08:55:55.895026Z","times_seen":17576632,"resource_available":true,"data":null}},"time_used":2672,"timings":{"blocked":191,"dns":134,"connect":24,"send":0,"wait":2289,"receive":1,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"suite.trezor.io/web/js/main.b80ca23a.js","fqdn":"suite.trezor.io","domain":"trezor.io","tld":"io"},"ip":{"addr":"3.167.2.73","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://suite.trezor.io/web/","date":"2025-12-11T01:52:44.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trezor.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 03 Apr 2025 00:00:00 GMT","end":"Fri, 01 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A7:34:73:EE:44:AF:BA:81:D2:B1:2A:76:3D:AC:8E:EE:B6:1E:92:BD","sha256":"A6:21:B4:8A:06:07:86:9B:39:AA:B4:20:A0:14:E2:C4:8D:ED:DF:AA:63:40:01:2F:33:D8:2E:A8:30:84:77:EE"}}},"request":{"raw":"GET /web/js/main.b80ca23a.js HTTP/1.1\r\nHost: suite.trezor.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://suite.trezor.io/web/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 05 Dec 2025 16:36:28 GMT\r\nserver: AmazonS3\r\ncontent-encoding: br\r\ndate: Thu, 11 Dec 2025 01:52:45 GMT\r\ncache-control: public, max-age=3600\r\netag: W/\"64b38e8e468ea83c7f9c43113c556903\"\r\nvary: Accept-Encoding\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 3bd19ecae9d202e55626096b4934d62e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 5Qv3KYYeym5CR5xhbAhQ4jyw-zzhVMYKutF4HKBgGAZQd9K-xgmyxA==\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10778,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10736)","md5":"64b38e8e468ea83c7f9c43113c556903","sha1":"8ead7b228bbf3d707a1ca3fda64f06ef9c91ab45","sha256":"79d6236dc23dedf83d040ae353c75505e069a54b627bfe15d297a40bdfd702a5","sha512":"f8740f466c94d76b5a3e8255276f2569acfa769612b4749b48b7bda2fa0df78c563bb3067e126083955cf26b2bfee8897c8c69a08deebe113e802e120ebdc221","ssdeep":"192:xQrfLHiMA+Q5nfdYjz5jo3TeP5uB2gLO2lBC3YeNZrdUVfL37pSYTj986jRDtK7U:erLzonfdao3CBucgfi3Y+ZpUVfL7RTjT","tlshash":"5c2209aeb76ce8da3c3002c1ad5a40e0254c7433394914e1b5edc67a48b4ee956a9fe7","first_seen":"2025-12-10T11:46:23.094573Z","last_seen":"2025-12-11T01:53:10.936837Z","times_seen":2,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"suite.trezor.io/web/static/images/favicons/favicon.png","fqdn":"suite.trezor.io","domain":"trezor.io","tld":"io"},"ip":{"addr":"3.167.2.73","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://suite.trezor.io/web/","date":"2025-12-11T01:52:44.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trezor.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 03 Apr 2025 00:00:00 GMT","end":"Fri, 01 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A7:34:73:EE:44:AF:BA:81:D2:B1:2A:76:3D:AC:8E:EE:B6:1E:92:BD","sha256":"A6:21:B4:8A:06:07:86:9B:39:AA:B4:20:A0:14:E2:C4:8D:ED:DF:AA:63:40:01:2F:33:D8:2E:A8:30:84:77:EE"}}},"request":{"raw":"GET /web/static/images/favicons/favicon.png HTTP/1.1\r\nHost: suite.trezor.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://suite.trezor.io/web/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 1232\r\ndate: Thu, 11 Dec 2025 01:52:45 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 05 Dec 2025 16:36:33 GMT\r\netag: \"21da3fd3d5ff7725e74aa6fcd9711a25\"\r\nserver: AmazonS3\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 3bd19ecae9d202e55626096b4934d62e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: fYVfDhXMhGYrRl7U8hr5b-N54-AGXqOt-_GfgmzBRBlWlo4RyPk3HA==\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1232,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 260 x 260, 8-bit colormap, non-interlaced","md5":"21da3fd3d5ff7725e74aa6fcd9711a25","sha1":"ac82b6639d33bbaf1b515fcd7b3042dd017ba38e","sha256":"afc2ce9fb10ed4723dfabb78a2e46b2d6a8aa5163ff0cd7ca7ddbf5880f3675b","sha512":"2f15f534221e0212816263c3029fc54660af3cf8e0f91d6246eddf54b0953c7bd041d084b1184dbaedc7ad14ecb38daa7132fdb4e7ca045ed3f57328a9809978","ssdeep":"","tlshash":"a72171c4cca481d47229b6fe831b30c1c5f48aa761045c6c938091be0e1baacd1b1d6a","first_seen":"2025-11-26T14:36:22.326208Z","last_seen":"2026-07-14T11:23:56.638592Z","times_seen":17,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"suite.trezor.io/web/js/543.55a98baa.js","fqdn":"suite.trezor.io","domain":"trezor.io","tld":"io"},"ip":{"addr":"3.167.2.73","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://suite.trezor.io/web/","date":"2025-12-11T01:52:44.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trezor.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 03 Apr 2025 00:00:00 GMT","end":"Fri, 01 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A7:34:73:EE:44:AF:BA:81:D2:B1:2A:76:3D:AC:8E:EE:B6:1E:92:BD","sha256":"A6:21:B4:8A:06:07:86:9B:39:AA:B4:20:A0:14:E2:C4:8D:ED:DF:AA:63:40:01:2F:33:D8:2E:A8:30:84:77:EE"}}},"request":{"raw":"GET /web/js/543.55a98baa.js HTTP/1.1\r\nHost: suite.trezor.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://suite.trezor.io/web/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 05 Dec 2025 16:34:52 GMT\r\nserver: AmazonS3\r\ncontent-encoding: gzip\r\ndate: Thu, 11 Dec 2025 01:52:45 GMT\r\ncache-control: public, max-age=3600\r\netag: W/\"981b2de8b9527b75e3b8a63e472b85dd\"\r\nvary: Accept-Encoding\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 3bd19ecae9d202e55626096b4934d62e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: GnLd48KfvRPLZkwdwM06BipyitExQjH66nvDh4C13MOyQ2xiNVrTyw==\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":228343,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65466)","md5":"981b2de8b9527b75e3b8a63e472b85dd","sha1":"21cb0be052f023329023dc82bb8d011ebd0d5419","sha256":"f468c4d6e435ade87c60c16401f4720423ae06f4eb6d1e128141dfaab444f81d","sha512":"88b313bdaf1de7183770196b1678124c1b1c2ae4a065b6038b02f9f15bcb1228d5248611438092fae8fa8467e48e8a39d0197bfa86c12d7e16bc24a9f2a24a62","ssdeep":"3072:BFlGHFQ9AnFFAnlAEHJd0VbUGEihc9GQaS+Ynk+kqRztI8UCGzo5UCGzsAUCGz+X:3OwlASqSBnkWn6mx0CNBrETqi","tlshash":"8224e5c433d26062729ad1cbc8e6054bf2a845a57c09407d73bcecfeea53d9422b9b75","first_seen":"2025-12-10T11:46:23.118145Z","last_seen":"2025-12-11T01:53:10.944697Z","times_seen":2,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ht4grt7-ggrerg518-5r84g8regr.netlify.app/files/js/gtr48tr.js","fqdn":"ht4grt7-ggrerg518-5r84g8regr.netlify.app","domain":"ht4grt7-ggrerg518-5r84g8regr.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ht4grt7-ggrerg518-5r84g8regr.netlify.app/","date":"2025-12-11T01:52:39.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 31 Jan 2025 00:00:00 GMT","end":"Tue, 03 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"04:28:C9:A3:BC:06:50:9C:6B:0B:67:72:82:27:C6:3D:99:1B:5B:71","sha256":"FA:34:6A:A0:1C:F5:9C:C7:30:CA:55:23:13:A1:3E:0F:21:8C:3A:0B:B5:CC:E5:67:09:FE:64:EC:97:4E:8D:75"}}},"request":{"raw":"GET /files/js/gtr48tr.js HTTP/1.1\r\nHost: ht4grt7-ggrerg518-5r84g8regr.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ht4grt7-ggrerg518-5r84g8regr.netlify.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 11 Dec 2025 01:52:39 GMT\r\netag: \"8d6f818267e96a07a8925d464a475847-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KC5HRG6GPGRWV5M3XSW1GAW8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":20781,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (19266), with CRLF line terminators","md5":"1f47a6c6e24da2494ce96cab3b489232","sha1":"a4fbb09f57971d5253ee6212dce281463d3d96f4","sha256":"f561215daef2a7566c1e468af9b2905e3c66ad257f558389badb04fee42422a0","sha512":"a935da57450f774f344f4100006244dbbd82bbd7f883c5a1339fb724b8bb644888e25bdf61bfdc5ea8d817bb80a3430642ea3fd7f70b17ca4643fbc8bb452a5f","ssdeep":"384:EGSdd+F4fQBngv+lJHiZVU4mISLi1dT6rTLc+NBms9n5FtRqGCRIafbUEeKqgWSj:p4WYsbFic++LAdiohwyj","tlshash":"a7928b3cf617091b04e2d5587cc50581bbb883684382be1e669c82a437dec7cb94fbe9","first_seen":"2025-12-10T11:46:23.110934Z","last_seen":"2025-12-30T07:08:28.251251Z","times_seen":138,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webpages.ghost.io/tzrsuite-app","fqdn":"webpages.ghost.io","domain":"webpages.ghost.io","tld":"ghost.io"},"ip":{"addr":"151.101.131.7","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-11T01:52:38.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ghost.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Oct 2025 17:58:11 GMT","end":"Wed, 21 Jan 2026 17:58:10 GMT"},"fingerprint":{"sha1":"34:30:E8:F9:DE:9B:84:0A:7D:78:88:56:F7:89:BD:AB:CC:A0:8B:ED","sha256":"A9:9B:2D:22:4A:84:18:A2:BA:8C:73:04:EC:02:71:05:06:4F:92:B2:31:61:C7:B2:91:71:6E:6A:9C:FD:29:B7"}}},"request":{"raw":"GET /tzrsuite-app HTTP/1.1\r\nHost: webpages.ghost.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: openresty\r\nstatus: 301 Moved Permanently\r\ncache-control: public, max-age=31536000\r\nlocation: /tzrsuite-app/\r\nfastly-restarts: 1\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 25327\r\ndate: Thu, 11 Dec 2025 01:52:38 GMT\r\nx-served-by: cache-ams21039-AMS, cache-hel1410030-HEL\r\nx-cache: HIT, MISS\r\nx-cache-hits: 20, 0\r\nx-timer: S1765417959.836150,VS0,VE26\r\nvary: Cookie\r\nx-request-id: 75e85271-c515-4ddd-a9f5-d7e9d7878deb\r\nghost-fastly: true;production\r\nalt-svc: clear\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24518,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T08:55:55.895026Z","times_seen":17576632,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":110,"dns":77,"connect":13,"send":0,"wait":40,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webpages.ghost.io/tzrsuite-app/","fqdn":"webpages.ghost.io","domain":"webpages.ghost.io","tld":"ghost.io"},"ip":{"addr":"151.101.131.7","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-11T01:52:38.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ghost.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Oct 2025 17:58:11 GMT","end":"Wed, 21 Jan 2026 17:58:10 GMT"},"fingerprint":{"sha1":"34:30:E8:F9:DE:9B:84:0A:7D:78:88:56:F7:89:BD:AB:CC:A0:8B:ED","sha256":"A9:9B:2D:22:4A:84:18:A2:BA:8C:73:04:EC:02:71:05:06:4F:92:B2:31:61:C7:B2:91:71:6E:6A:9C:FD:29:B7"}}},"request":{"raw":"GET /tzrsuite-app/ HTTP/1.1\r\nHost: webpages.ghost.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\nstatus: 200 OK\r\netag: W/\"5fc6-EEMn/Qy2tK0Oc1oEC7tZrc3xrxM\"\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\ncache-control: public, max-age=0\r\nserver: openresty\r\naccept-ranges: bytes\r\nage: 32894\r\ndate: Thu, 11 Dec 2025 01:52:38 GMT\r\nx-served-by: cache-ams21036-AMS, cache-ams2100110-AMS, cache-hel1410030-HEL\r\nx-cache: MISS, HIT, MISS\r\nx-cache-hits: 0, 26, 0\r\nx-timer: S1765417959.882310,VS0,VE26\r\nvary: Cookie, Accept-Encoding\r\nx-request-id: aa6514e8-3023-439a-83db-4c4389aae5b4\r\nghost-fastly: true;production\r\nalt-svc: clear\r\ncontent-length: 6890\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ghost:6.10","description":"Ghost is a powerful app for new-media creators to publish, share, and grow a business around their content.","website":"https://ghost.org","common_platform_enumeration":"","icon":"Ghost.svg","categories":["CMS","Blogs"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":24518,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3034)","md5":"98a4c3684abc7fafe5e8ce3bdb946a34","sha1":"4adf61afed2c4fdc525265dde2b7e563c96e26d2","sha256":"0b6554f09525e54b430b6e2aaa4fbec16552d6488421814e9f8b20238ebf1e53","sha512":"a21abe5ddb54e6b108c87ffee45dff407319dcd0320c150ff367cf67f4d5db51436fc26c2d22d7311aff10e1328fd84575caf352956021761a06afc0c3ad68f8","ssdeep":"384:Qw4uiGCG2o/ntXO/8XMe22DRk2oqDjo13aK8F:Qw4uiGCG2Uw/8XMERJo13aK8F","tlshash":"7cb2fa3266f0293e025302ce79e67349ee72d547d64d1d80f2fdc2a81f82ca685739ad","first_seen":"2025-12-11T01:53:10.948947Z","last_seen":"2025-12-11T01:53:10.948947Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ht4grt7-ggrerg518-5r84g8regr.netlify.app/files/imgs/connect-device.gif","fqdn":"ht4grt7-ggrerg518-5r84g8regr.netlify.app","domain":"ht4grt7-ggrerg518-5r84g8regr.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ht4grt7-ggrerg518-5r84g8regr.netlify.app/","date":"2025-12-11T01:52:39.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 31 Jan 2025 00:00:00 GMT","end":"Tue, 03 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"04:28:C9:A3:BC:06:50:9C:6B:0B:67:72:82:27:C6:3D:99:1B:5B:71","sha256":"FA:34:6A:A0:1C:F5:9C:C7:30:CA:55:23:13:A1:3E:0F:21:8C:3A:0B:B5:CC:E5:67:09:FE:64:EC:97:4E:8D:75"}}},"request":{"raw":"GET /files/imgs/connect-device.gif HTTP/1.1\r\nHost: ht4grt7-ggrerg518-5r84g8regr.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ht4grt7-ggrerg518-5r84g8regr.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/gif\r\ndate: Thu, 11 Dec 2025 01:52:39 GMT\r\netag: \"9c36a78b0d5bdc5e2a22ed4c0f40354a-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-nf-request-id: 01KC5HRG6GQEKKA1D83P57JXYA\r\ncontent-length: 10234\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10234,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 102 x 101","md5":"88bbcd8ade18dc78be81f9d8f9cebb5f","sha1":"997c2d7c2d7ae5ab4a07a3be12615ffd95152cb8","sha256":"053252c5143010b3e9361e6ca122f78c0cdf70260bc66ea5a4c1ec08c12e7ee5","sha512":"5bf724725a44e0b99e7cad6e37ab60524a76c3d7ff093f4bf1411c28abb682579938e0d2adb5171ffacfa5e8a585119e49542d734c3bac0de046022b2a5048fa","ssdeep":"192:gaPSIqek52DezEcerP4fBSnuPsB+lqyAdDWn8wM+d2NA:gYXqeNvcerP4fBSnuXHn8h+dkA","tlshash":"cf22af59a8675888d07e3dbd19313f066db95038e58cf0b9c98decf8fe5813844a07da","first_seen":"2025-12-02T11:52:53.805621Z","last_seen":"2026-07-28T00:22:00.512826Z","times_seen":250,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ht4grt7-ggrerg518-5r84g8regr.netlify.app/files/imgs/onboarding-welcome-bg.svg","fqdn":"ht4grt7-ggrerg518-5r84g8regr.netlify.app","domain":"ht4grt7-ggrerg518-5r84g8regr.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ht4grt7-ggrerg518-5r84g8regr.netlify.app/","date":"2025-12-11T01:52:39.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 31 Jan 2025 00:00:00 GMT","end":"Tue, 03 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"04:28:C9:A3:BC:06:50:9C:6B:0B:67:72:82:27:C6:3D:99:1B:5B:71","sha256":"FA:34:6A:A0:1C:F5:9C:C7:30:CA:55:23:13:A1:3E:0F:21:8C:3A:0B:B5:CC:E5:67:09:FE:64:EC:97:4E:8D:75"}}},"request":{"raw":"GET /files/imgs/onboarding-welcome-bg.svg HTTP/1.1\r\nHost: ht4grt7-ggrerg518-5r84g8regr.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ht4grt7-ggrerg518-5r84g8regr.netlify.app/files/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 11 Dec 2025 01:52:39 GMT\r\netag: \"fcfd4f957253df96b4058506178b1dc4-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KC5HRGBNGN91DYX283DZQ0J2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12561,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"32d2dddeee4b9c0713724e5204e5d721","sha1":"1a348be9b03c09409c9ea726948f75c33d597cc7","sha256":"88b38b74a9e3bb74c5f7e1ef5f856a24b5b1c69e9254f85a482a671f29c4c44d","sha512":"dcbe9842d64194845858af3550fab6f91f3074504b7da5e9f93a3451cd31ee2c4b0b26fd5ec44cd061c4b0b6c2f20403c3c44415073f7b225707bee63277a71f","ssdeep":"192:avk9nNiBS3ZC9BWnTQRcd5v6j4ji9nNZB+C3WMunwUakg6TCbEr:MQnNc9Sn1ddSmGnNvrmjnwYiq","tlshash":"fd4252dcd3b975f8bdc8679ecb663844b6b21cb932328a45829cabd907c7e191415cc2","first_seen":"2025-08-13T12:15:09.715945Z","last_seen":"2026-02-08T08:34:05.10563Z","times_seen":159,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ht4grt7-ggrerg518-5r84g8regr.netlify.app/favicon.ico","fqdn":"ht4grt7-ggrerg518-5r84g8regr.netlify.app","domain":"ht4grt7-ggrerg518-5r84g8regr.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ht4grt7-ggrerg518-5r84g8regr.netlify.app/","date":"2025-12-11T01:52:39.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 31 Jan 2025 00:00:00 GMT","end":"Tue, 03 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"04:28:C9:A3:BC:06:50:9C:6B:0B:67:72:82:27:C6:3D:99:1B:5B:71","sha256":"FA:34:6A:A0:1C:F5:9C:C7:30:CA:55:23:13:A1:3E:0F:21:8C:3A:0B:B5:CC:E5:67:09:FE:64:EC:97:4E:8D:75"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ht4grt7-ggrerg518-5r84g8regr.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ht4grt7-ggrerg518-5r84g8regr.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 1\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Thu, 11 Dec 2025 01:52:40 GMT\r\netag: 1765383906-ssl-df\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KC5HRGGSMPQDEA2PK8S5C9PV\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3449,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0f89e18d0abacb99149c5e59bf69b5e1","sha1":"9e1ebb10be890c5855eec444233c028270d3e65a","sha256":"8514f0009a58c6e0acb5468f88037732b59b70af5e524f452e3bef8fb33effc5","sha512":"5275d80f3f8f1f5e0d1b6b6b0745732a69d669d66dcdab418fc5a2094bffcb81ff1d34252c97c6dffe5470f0d359a3be03cfd3dfe3d729bf186917c8cf21ece0","ssdeep":"","tlshash":"1f61848dc9a7209b5c93643e27eb560a2274a247cd46da4c3fde6348cf492f214d36ac","first_seen":"2024-12-12T10:00:11.490986Z","last_seen":"2026-07-28T00:56:23.183939Z","times_seen":13756,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"suite.trezor.io/web/static/fonts/fonts.css","fqdn":"suite.trezor.io","domain":"trezor.io","tld":"io"},"ip":{"addr":"3.167.2.73","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://suite.trezor.io/web/","date":"2025-12-11T01:52:44.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trezor.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 03 Apr 2025 00:00:00 GMT","end":"Fri, 01 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A7:34:73:EE:44:AF:BA:81:D2:B1:2A:76:3D:AC:8E:EE:B6:1E:92:BD","sha256":"A6:21:B4:8A:06:07:86:9B:39:AA:B4:20:A0:14:E2:C4:8D:ED:DF:AA:63:40:01:2F:33:D8:2E:A8:30:84:77:EE"}}},"request":{"raw":"GET /web/static/fonts/fonts.css HTTP/1.1\r\nHost: suite.trezor.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://suite.trezor.io/web/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 499\r\nlast-modified: Fri, 05 Dec 2025 16:36:31 GMT\r\nserver: AmazonS3\r\ndate: Thu, 11 Dec 2025 01:34:09 GMT\r\ncache-control: public, max-age=3600\r\netag: \"d571ab97c291271d54145425c272be25\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3bd19ecae9d202e55626096b4934d62e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 5lBh8kf18LaYOETzZXQu5zf_B-UDkxnjujxnbIQroTOkke5k9tQbyA==\r\nage: 1116\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":499,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (499), with no line terminators","md5":"d571ab97c291271d54145425c272be25","sha1":"57fb3ec33a982366be38718a203ae2190144b3ee","sha256":"5bcba804f407ad23a87cb57840cd46f4b32021025c83c75e6faba60eda660efe","sha512":"699f782c53d614494784f9c3ec2d19d4d005c970ddc71e9f7f3a093051ed5231fff5d893f4baeeed32c1f30cdd9016649029947243443506b9553f2ad943e6da","ssdeep":"","tlshash":"cff09a1041bae5c3d4f19e4278ce3a2aac1a2806455a4823da3e1ebdcce793753d1f38","first_seen":"2024-11-22T00:31:32.761361Z","last_seen":"2026-04-18T15:41:11.597631Z","times_seen":20,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"suite.trezor.io/web/static/browser-detection/index.js","fqdn":"suite.trezor.io","domain":"trezor.io","tld":"io"},"ip":{"addr":"3.167.2.73","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://suite.trezor.io/web/","date":"2025-12-11T01:52:44.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trezor.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 03 Apr 2025 00:00:00 GMT","end":"Fri, 01 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A7:34:73:EE:44:AF:BA:81:D2:B1:2A:76:3D:AC:8E:EE:B6:1E:92:BD","sha256":"A6:21:B4:8A:06:07:86:9B:39:AA:B4:20:A0:14:E2:C4:8D:ED:DF:AA:63:40:01:2F:33:D8:2E:A8:30:84:77:EE"}}},"request":{"raw":"GET /web/static/browser-detection/index.js HTTP/1.1\r\nHost: suite.trezor.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://suite.trezor.io/web/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 05 Dec 2025 16:36:29 GMT\r\nserver: AmazonS3\r\ncontent-encoding: br\r\ndate: Thu, 11 Dec 2025 01:06:46 GMT\r\ncache-control: public, max-age=3600\r\netag: W/\"40fe4417557f6fdb67b96896c1fcb1f0\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3bd19ecae9d202e55626096b4934d62e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: olW8Ef25A9XOxZncPjo1uGaro0HOHZafH4_znwr5fF8vAb-30r_DFA==\r\nage: 2759\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":66318,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"40fe4417557f6fdb67b96896c1fcb1f0","sha1":"c39f5838941ffebf0f113dcebb5d658dd75809d9","sha256":"61083df831bc8b41b0f4ac8efe2196fc501feab490a2a217aec8858af6d14a2a","sha512":"152bb075065828c31f50fb67e1fc2a32682bb6db38dde6a50742038318cebd44593b64b322e0ae32bb4ae8f2f8addd015b14a01a1758b5369a1cb784145c1ed6","ssdeep":"768:c+LXDo6N2vZc7f8UPQlKVelNkFUZvWtkE2wk1rdDaoCCvB+MxEmz/gIKvE2RKT5Y:b1mr4SdwcvRvxxEmcMN5o0cOYdl9","tlshash":"13536e7ff2c1b63a03a656e9e1760000b72e1515ea488478b76dc4c3ffb19d9509ba3b","first_seen":"2025-11-26T14:36:22.318739Z","last_seen":"2025-12-11T01:53:10.954856Z","times_seen":4,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"suite.trezor.io/web/js/2846.a8697a38.js","fqdn":"suite.trezor.io","domain":"trezor.io","tld":"io"},"ip":{"addr":"3.167.2.73","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://suite.trezor.io/web/","date":"2025-12-11T01:52:44.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trezor.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 03 Apr 2025 00:00:00 GMT","end":"Fri, 01 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A7:34:73:EE:44:AF:BA:81:D2:B1:2A:76:3D:AC:8E:EE:B6:1E:92:BD","sha256":"A6:21:B4:8A:06:07:86:9B:39:AA:B4:20:A0:14:E2:C4:8D:ED:DF:AA:63:40:01:2F:33:D8:2E:A8:30:84:77:EE"}}},"request":{"raw":"GET /web/js/2846.a8697a38.js HTTP/1.1\r\nHost: suite.trezor.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://suite.trezor.io/web/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 05 Dec 2025 16:33:52 GMT\r\nserver: AmazonS3\r\ncontent-encoding: gzip\r\ndate: Thu, 11 Dec 2025 01:52:44 GMT\r\ncache-control: public, max-age=3600\r\netag: W/\"fa4da0546af7001343cce0df0169c168\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3bd19ecae9d202e55626096b4934d62e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: brOd9Y1ZkmL4EPgFXmoeMzkxs5PkdKKD8u5HO3If5u-uMViXtOrDzw==\r\nage: 2759\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6602720,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"5a0ede728dd7abe6eafbba214c9de847","sha1":"90b48a7815013652fba31662f256d1f4a8886725","sha256":"ae5049e318b8e232f31dc96e5b06005113b62103f2820c5c6f6de5d805497c36","sha512":"20972e341e2a852975e2b8daa96040c83c51ed77bd5feff5ba86e4e9c4345b8cd0c590f26bd25482b46caac9405314b822f9ae8b3b068c037bda66aecc6363ea","ssdeep":"12288:h/vCVxKueuBiyRrZ0U/31bp5aLMXu/bwSxd7Ti:h/v4LeuBiN03xp5aLMezwSxd7Ti","tlshash":"94252a897291b07647e711a9403f000bf235a929784d845cb369e8fb7cb9d8d627bf39","first_seen":"2025-12-10T11:46:23.109034Z","last_seen":"2025-12-11T01:53:10.956168Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"suite.trezor.io/web/static/fonts/TTSatoshi/TTSatoshi-Medium.otf","fqdn":"suite.trezor.io","domain":"trezor.io","tld":"io"},"ip":{"addr":"3.167.2.73","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://suite.trezor.io/web/","date":"2025-12-11T01:52:46.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trezor.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 03 Apr 2025 00:00:00 GMT","end":"Fri, 01 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A7:34:73:EE:44:AF:BA:81:D2:B1:2A:76:3D:AC:8E:EE:B6:1E:92:BD","sha256":"A6:21:B4:8A:06:07:86:9B:39:AA:B4:20:A0:14:E2:C4:8D:ED:DF:AA:63:40:01:2F:33:D8:2E:A8:30:84:77:EE"}}},"request":{"raw":"GET /web/static/fonts/TTSatoshi/TTSatoshi-Medium.otf HTTP/1.1\r\nHost: suite.trezor.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://suite.trezor.io/web/static/fonts/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/otf\r\nlast-modified: Fri, 05 Dec 2025 16:36:31 GMT\r\nserver: AmazonS3\r\ncontent-encoding: gzip\r\ndate: Thu, 11 Dec 2025 01:52:47 GMT\r\ncache-control: public, max-age=3600\r\netag: W/\"e727cfbd3790350ff5b5e17e680ac354\"\r\nvary: Accept-Encoding\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 3bd19ecae9d202e55626096b4934d62e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 6tD5Eyedqcep4zpD_f2D6JkyZRCcuhUBTf_rVuhSfzPNLmpFZcHecQ==\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":318760,"size_decoded":0,"mime_type":"font/otf","magic":"TrueType Font data, digitally signed, 20 tables, 1st \"DSIG\", 35 names, Macintosh, Copyright (c) 2019�2020 by TypeType. All rights reserved.TT SatoshiMediumTypeType: TT Satoshi Me","md5":"e727cfbd3790350ff5b5e17e680ac354","sha1":"32c06d7597baff6e3ae02daf124e6096cf27b472","sha256":"7de6dae5dbfaa662ef8901ded1f49c04d216d77d798e2aa41b0e649590206e6e","sha512":"66c24d84316629309b3111eba6d00dbdd5a194184d30467a2bfa3e19965714082f3b8a1f636b592d380a05336ac07d21c1b81b3c34b378463cb558ce3e62013e","ssdeep":"3072:RZsOeIbsK2LNiq4XJztLa8zaRFE3301NvrnEksjGQFdJ24ZiCygt3/c/17l4HjiD:zskYTLoht941hrnEkKFbJE5W6","tlshash":"bd64c687dffb5d17e3560bf98de18baa0665f503ef71268e6c619000c6ab2400e17de9","first_seen":"2024-11-22T00:31:32.77549Z","last_seen":"2026-07-14T11:23:56.631814Z","times_seen":78,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webpages.ghost.io/assets/built/source.js?v=70fba8df4d","fqdn":"webpages.ghost.io","domain":"webpages.ghost.io","tld":"ghost.io"},"ip":{"addr":"151.101.131.7","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webpages.ghost.io/tzrsuite-app/","date":"2025-12-11T01:52:39.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ghost.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Oct 2025 17:58:11 GMT","end":"Wed, 21 Jan 2026 17:58:10 GMT"},"fingerprint":{"sha1":"34:30:E8:F9:DE:9B:84:0A:7D:78:88:56:F7:89:BD:AB:CC:A0:8B:ED","sha256":"A9:9B:2D:22:4A:84:18:A2:BA:8C:73:04:EC:02:71:05:06:4F:92:B2:31:61:C7:B2:91:71:6E:6A:9C:FD:29:B7"}}},"request":{"raw":"GET /assets/built/source.js?v=70fba8df4d HTTP/1.1\r\nHost: webpages.ghost.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webpages.ghost.io/tzrsuite-app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":52705,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (52670)","md5":"476b743a6cd085520c0a97e9c99909f0","sha1":"d4404057356d9925dffadf151843dc870ae1710c","sha256":"3bceafa53269a4c05c1f59e9293f7915e7e85a4119d0647ce5299b2b40941137","sha512":"3acaee33159fcaaef0f27c658b425e6f5b82f5868ab87da43932866f850fe8e6476ada8838cf76d84c97a11d8bfc81e206abc24b21f3b750e6cbc53b686fad17","ssdeep":"768:yemQ7qZZ0sMcrtR17FmPUGFMZRyxfjUp7LDArx9/RTZfTkqr2IRRMfogj8dFV:3tgt317xnZRf7LDArxjTZ79r2IRqZgV","tlshash":"1c334aec315176b703d76176617fa60e23321aaaad0a80407c36dce66cb8d59523ff6c","first_seen":"2025-02-27T09:33:32.959405Z","last_seen":"2026-07-05T10:42:18.59985Z","times_seen":2436,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ht4grt7-ggrerg518-5r84g8regr.netlify.app/files/js/btg7r4r.js","fqdn":"ht4grt7-ggrerg518-5r84g8regr.netlify.app","domain":"ht4grt7-ggrerg518-5r84g8regr.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ht4grt7-ggrerg518-5r84g8regr.netlify.app/","date":"2025-12-11T01:52:39.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 31 Jan 2025 00:00:00 GMT","end":"Tue, 03 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"04:28:C9:A3:BC:06:50:9C:6B:0B:67:72:82:27:C6:3D:99:1B:5B:71","sha256":"FA:34:6A:A0:1C:F5:9C:C7:30:CA:55:23:13:A1:3E:0F:21:8C:3A:0B:B5:CC:E5:67:09:FE:64:EC:97:4E:8D:75"}}},"request":{"raw":"GET /files/js/btg7r4r.js HTTP/1.1\r\nHost: ht4grt7-ggrerg518-5r84g8regr.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ht4grt7-ggrerg518-5r84g8regr.netlify.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 11 Dec 2025 01:52:39 GMT\r\netag: \"292a9bb5330e1d1119cbae999ba765a1-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KC5HRG6HDWHSFPAS44DW6MRS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4597,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"b991dbeaeac70c314975bccc107384f3","sha1":"b239fe17002f64bdb19b079ab68aebfb67e11a05","sha256":"a9b6c3aa1a0f71d4955cd18ad51b0ec94d6d0db18e3ec8615d17f2e3c827cc73","sha512":"a215a02a720e68f89978fe3cbed602d5fdd99dd4e7c48f16f566708efee20db56e378d7ba34f5f2178395ca496ae08c3214e3fcb1bbefc63b6a40e53d57f1820","ssdeep":"96:cfKWjxQCGeQZ5+MgJ0JMIQyKM42AVqCl+Bgjq3v:L8xWORqCl+BgjO","tlshash":"ac91ff69693804750abfe37fab935a49fb364063500161257d7c8e891fb0c0452b6fee","first_seen":"2025-12-11T01:53:10.960254Z","last_seen":"2025-12-11T01:53:10.960254Z","times_seen":1,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"suite.trezor.io/web/","fqdn":"suite.trezor.io","domain":"trezor.io","tld":"io"},"ip":{"addr":"3.167.2.73","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-11T01:52:44.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trezor.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 03 Apr 2025 00:00:00 GMT","end":"Fri, 01 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A7:34:73:EE:44:AF:BA:81:D2:B1:2A:76:3D:AC:8E:EE:B6:1E:92:BD","sha256":"A6:21:B4:8A:06:07:86:9B:39:AA:B4:20:A0:14:E2:C4:8D:ED:DF:AA:63:40:01:2F:33:D8:2E:A8:30:84:77:EE"}}},"request":{"raw":"GET /web/ HTTP/1.1\r\nHost: suite.trezor.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ht4grt7-ggrerg518-5r84g8regr.netlify.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Fri, 05 Dec 2025 16:33:49 GMT\r\nserver: AmazonS3\r\ncontent-encoding: br\r\ndate: Thu, 11 Dec 2025 01:34:09 GMT\r\ncache-control: public, max-age=3600\r\netag: W/\"bdd4471cab92680f2b1940eadc14f88b\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3bd19ecae9d202e55626096b4934d62e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: zkzLVmgTCWuJYTQuloGzTMQ5EsMdLy93-0KY2-jK5TqXb8oxT6g_Aw==\r\nage: 1116\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1275,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1275), with no line terminators","md5":"bdd4471cab92680f2b1940eadc14f88b","sha1":"2b49528a22a29d25d38325ed31d9d26f5f9a82ce","sha256":"bdb82d780019fffcfe95c2ff6357eabdeac21388eb0e688cba6b8fa81201e695","sha512":"98ec169dfa787b49b5ed0fadc68b2c03c98ab6d6f971f33d2ec4be643ccd72fe610f719c1fbc65dcbf7048aef09836862147fd6ea52b8b15f8c653b08609c34a","ssdeep":"","tlshash":"62210f691d00f07f3b31e069e4dfb0a8d81ae4a2ac78d840f6ce8c965df4d8309a7522","first_seen":"2025-12-10T11:46:23.113845Z","last_seen":"2025-12-11T01:53:10.961939Z","times_seen":2,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":128,"dns":119,"connect":1,"send":0,"wait":23,"receive":0,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"suite.trezor.io/web/static/images/favicons/favicon.png","fqdn":"suite.trezor.io","domain":"trezor.io","tld":"io"},"ip":{"addr":"3.167.2.73","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://suite.trezor.io/web/","date":"2025-12-11T01:52:44.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trezor.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 03 Apr 2025 00:00:00 GMT","end":"Fri, 01 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A7:34:73:EE:44:AF:BA:81:D2:B1:2A:76:3D:AC:8E:EE:B6:1E:92:BD","sha256":"A6:21:B4:8A:06:07:86:9B:39:AA:B4:20:A0:14:E2:C4:8D:ED:DF:AA:63:40:01:2F:33:D8:2E:A8:30:84:77:EE"}}},"request":{"raw":"GET /web/static/images/favicons/favicon.png HTTP/1.1\r\nHost: suite.trezor.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://suite.trezor.io/web/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 1232\r\ndate: Thu, 11 Dec 2025 01:52:45 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 05 Dec 2025 16:36:33 GMT\r\netag: \"21da3fd3d5ff7725e74aa6fcd9711a25\"\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3bd19ecae9d202e55626096b4934d62e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: uacIBUYmKtFtLnNZmSjQU7YQJB_9gB37hQf1QdX_5XxpTr5jVhOUrw==\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1232,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 260 x 260, 8-bit colormap, non-interlaced","md5":"21da3fd3d5ff7725e74aa6fcd9711a25","sha1":"ac82b6639d33bbaf1b515fcd7b3042dd017ba38e","sha256":"afc2ce9fb10ed4723dfabb78a2e46b2d6a8aa5163ff0cd7ca7ddbf5880f3675b","sha512":"2f15f534221e0212816263c3029fc54660af3cf8e0f91d6246eddf54b0953c7bd041d084b1184dbaedc7ad14ecb38daa7132fdb4e7ca045ed3f57328a9809978","ssdeep":"","tlshash":"a72171c4cca481d47229b6fe831b30c1c5f48aa761045c6c938091be0e1baacd1b1d6a","first_seen":"2025-11-26T14:36:22.326208Z","last_seen":"2026-07-14T11:23:56.638592Z","times_seen":17,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"suite.trezor.io/web/js/3524.9c1c8187.js","fqdn":"suite.trezor.io","domain":"trezor.io","tld":"io"},"ip":{"addr":"3.167.2.73","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://suite.trezor.io/web/","date":"2025-12-11T01:52:44.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trezor.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 03 Apr 2025 00:00:00 GMT","end":"Fri, 01 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A7:34:73:EE:44:AF:BA:81:D2:B1:2A:76:3D:AC:8E:EE:B6:1E:92:BD","sha256":"A6:21:B4:8A:06:07:86:9B:39:AA:B4:20:A0:14:E2:C4:8D:ED:DF:AA:63:40:01:2F:33:D8:2E:A8:30:84:77:EE"}}},"request":{"raw":"GET /web/js/3524.9c1c8187.js HTTP/1.1\r\nHost: suite.trezor.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://suite.trezor.io/web/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 05 Dec 2025 16:34:08 GMT\r\nserver: AmazonS3\r\ncontent-encoding: br\r\ndate: Thu, 11 Dec 2025 01:52:44 GMT\r\ncache-control: public, max-age=3600\r\netag: W/\"fd58aa676b936cf7ca2dfb6c06fc458b\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3bd19ecae9d202e55626096b4934d62e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: OfXgHHxZD27v1z03VXO1J42XjkYI0bmyh0e7-Xnm9b8-_FO0MLuSiA==\r\nage: 2759\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3253532,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65464)","md5":"48a6085773fe6837ff4f0d10c4b1d0cf","sha1":"b07150bf64bf27800b6ea3167a33599d6fb5c7b4","sha256":"eb1c63c4d89d2158e17581af2ec68d63c7f2388cdfd72f36d6d2df57d7983ef0","sha512":"52b1b6895e17cdb3ab33b3865dd9281b1aeb53b801f4800b3d0e870ed2e5c57081d40af255fe930b42b6aa486fe8612934d0fbd76f5172e8c742f227e6d0f266","ssdeep":"12288:8hIYlGIhqCKPwFTD8X+eG6zpL8RxP8/IuSM9jS:UIYvhqCKPwFTe+hGL8fPLN","tlshash":"46254acff941bc8d96a200ccb0657ed56166090cb14cf8a7eeec455127a6bce213b7b9","first_seen":"2025-12-10T11:46:23.119569Z","last_seen":"2025-12-11T01:53:10.963104Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webpages.ghost.io/assets/built/screen.css?v=70fba8df4d","fqdn":"webpages.ghost.io","domain":"webpages.ghost.io","tld":"ghost.io"},"ip":{"addr":"151.101.131.7","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://webpages.ghost.io/tzrsuite-app/","date":"2025-12-11T01:52:39.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ghost.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Oct 2025 17:58:11 GMT","end":"Wed, 21 Jan 2026 17:58:10 GMT"},"fingerprint":{"sha1":"34:30:E8:F9:DE:9B:84:0A:7D:78:88:56:F7:89:BD:AB:CC:A0:8B:ED","sha256":"A9:9B:2D:22:4A:84:18:A2:BA:8C:73:04:EC:02:71:05:06:4F:92:B2:31:61:C7:B2:91:71:6E:6A:9C:FD:29:B7"}}},"request":{"raw":"GET /assets/built/screen.css?v=70fba8df4d HTTP/1.1\r\nHost: webpages.ghost.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webpages.ghost.io/tzrsuite-app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\ncontent-type: text/css; charset=UTF-8\r\nserver: openresty\r\nlast-modified: Wed, 10 Dec 2025 04:54:51 GMT\r\ncontent-encoding: gzip\r\nstatus: 200 OK\r\netag: W/\"d1bb-19b069cb178\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 33379\r\ndate: Thu, 11 Dec 2025 01:52:39 GMT\r\nx-served-by: cache-ams2100086-AMS, cache-ams2100143-AMS, cache-hel1410030-HEL\r\nx-cache: MISS, HIT, MISS\r\nx-cache-hits: 0, 20, 0\r\nx-timer: S1765417959.092995,VS0,VE27\r\nvary: Accept-Encoding\r\nx-request-id: cba98638-d574-4330-9706-95a4bdb568c3\r\nghost-fastly: true;production\r\nalt-svc: clear\r\ncontent-length: 9754\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":53691,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (53650)","md5":"743968e673ed568844487b9072c3d79d","sha1":"fa76e92c5721e0ad44d9c9d33ee31a6423227031","sha256":"4834b996e9191dd1145c8b25a6685ce6a4f3e8e83fc24d08dea7c87bbcc8718f","sha512":"c55629e28bf2cfc3f862dcc6c69364a5b200263a8584f06ca765da53390b24bb015c6aeb41051bf528a2f617e7848487d3d296498f45372f966b8995d2704dc9","ssdeep":"768:2a6rmPNfGOARgftyVYnxVePnwHCfppBAMyMwtpOBt9tpEyxLxkxxxmxuxW:PePnwHCfppBAMPapOBrtnpirM8I","tlshash":"e9339466fe50333860338a57ebc1674e3024d842aa561fede4c6e15a49c7ba3d73d728","first_seen":"2025-04-30T01:38:35.286559Z","last_seen":"2026-06-29T22:46:58.561102Z","times_seen":2425,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ht4grt7-ggrerg518-5r84g8regr.netlify.app/","fqdn":"ht4grt7-ggrerg518-5r84g8regr.netlify.app","domain":"ht4grt7-ggrerg518-5r84g8regr.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-11T01:52:39.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 31 Jan 2025 00:00:00 GMT","end":"Tue, 03 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"04:28:C9:A3:BC:06:50:9C:6B:0B:67:72:82:27:C6:3D:99:1B:5B:71","sha256":"FA:34:6A:A0:1C:F5:9C:C7:30:CA:55:23:13:A1:3E:0F:21:8C:3A:0B:B5:CC:E5:67:09:FE:64:EC:97:4E:8D:75"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ht4grt7-ggrerg518-5r84g8regr.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webpages.ghost.io/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Thu, 11 Dec 2025 01:52:39 GMT\r\netag: \"f81733e1d5df843bb597ada6dc3e9f57-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KC5HRFY45PB6GT6VS22FM6BF\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8626,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (982), with CRLF line terminators","md5":"2cc24092bb126c424b0126d3fdae518f","sha1":"43ba671f824dda1ca11f0f4e516e92a896fdd050","sha256":"216ccc43f1805302f3109a36e6f89519246dbc5ca02ec08ab60410b84a3b668c","sha512":"d132f945afe9a579024747e95adbb5de498a524aa6ce61eb93fad23318a6c7fbd9f72601d162ad9087247e2a568c7f4cb9b945baec7989321854498c6c599068","ssdeep":"96:XTvA0Eo3w/VF+pZtl9hDn/YwX+mH0kYfSDsNldBDn/YwX+mH0k2bVzYDK/:D4+e+7tl7nvrK4sNl7nvrgbVziu","tlshash":"1b02b46899c4503541b7ca9aab994e85ff92e183db3a419172fc67eb1ff6c84d887040","first_seen":"2025-12-11T01:53:10.965959Z","last_seen":"2025-12-11T01:53:10.965959Z","times_seen":1,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":124,"dns":39,"connect":23,"send":0,"wait":181,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}