{"report_id":"f6d46e19-173b-4fe6-82cd-fa5cb9efd5cb","version":0,"status":"done","tags":[],"date":"2026-06-10T21:34:58Z","url":{"schema":"http","addr":"trezorrecovery.app","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"ip":{"addr":"82.221.129.44","port":0,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"final":{"url":{"schema":"https","addr":"trezorrecovery.app/","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"title":"- Trezor Hardware-Wallet (Offiziell) | Bitcoin \u0026 Krypto-Sicherheit | Trezor","dom":{"size":169282,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20709)","md5":"693edf7cfb169e8bcd868995aa8f7ebb","sha1":"5514625e69eb471ae8228ea502d17c8aed7917a0","sha256":"5fe61522408ec6b4e3f572db17235a41971ddeb9a39bbb6425e0b008f2239325","sha512":"5791a9d7b01e550a9ab3570f34586f657addd4e972321e9f65fdd2aac7263623e05544ce8522f5ae81b43319b4562e81fc7a7b3bf87134dbf69d5883ee3b7696","ssdeep":"3072:u8qZrf8pUOcmRiBmgT0cTrnbO27kQ06DGNanPEgwIXXKALAEoNIChMD7U6yjUZog:0OcmoTkQTFcEoNfhMD7U6yoZobXemlUR","tlshash":"ecf35c60e7f498f5757b436aa94963286117d811c1006ef4b0fee19c67cced22ae3b4b","dom_hash":"domhash8e2abaf665aa6595674e0737028e748a","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"trezorrecovery.app","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"ip":{"addr":"82.221.129.44","port":0,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-15T21:34:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-06-10","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"trezorrecovery.app/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}}],"urlquery":null},"summary":[{"fqdn":"trezorrecovery.app","ip":{"addr":"82.221.129.44","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":19,"received_data":1105869,"sent_data":10040,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"PageLayer","description":"Drag and drop page builder for Wordpress.","website":"https://wordpress.org/plugins/pagelayer","common_platform_enumeration":"","icon":"PageLayer.png","categories":["Widgets","WordPress plugins"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-07T22:18:26.533791Z","alert_count":0,"request_count":1,"received_data":24477,"sent_data":587,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-07T22:22:03.23237Z","alert_count":0,"request_count":2,"received_data":6242,"sent_data":991,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"googleapis.com","ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":4,"first_seen":"2013-01-26T09:25:09Z","last_seen":"2026-06-09T05:48:29.816621Z","alert_count":0,"request_count":2,"received_data":422,"sent_data":954,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s.w.org","ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1993-12-01","domain_rank":27695,"first_seen":"2017-01-30T04:56:16Z","last_seen":"2026-06-08T08:07:41.468078Z","alert_count":0,"request_count":1,"received_data":1011,"sent_data":561,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trezorrecovery.app/cookieadmin_pro_js-js-extra","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"ip":{"addr":"82.221.129.44","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"introduction_type":"scriptElement","is_inline":false,"md5":"730cea04b786bf8214127dc52052ac42","sha1":"06397914e3949838349c6c563a6950dc1d81d87b","sha256":"0f309d2726828ca3be66c3d00f0d3692d2888bf61677dc0b608e182204a110b9","sha512":"b5f7aabcaae069ea5a12ee1696a48f133b2b7b0b5d371d58170416ba6106b7bfd3d19bc53fb448a6259cac58787f2fd1272ccb996c452d9d13240ea12a3afa51","ssdeep":"","tlshash":"dcf0a74ff7fe5e1633e91df1c45c73aab45b1522e4801c06ab29f6c48399ae1bc8854b","size":503,"data":"","first_seen":"2026-06-10T21:35:04.264424Z","last_seen":"2026-06-10T21:37:15.822469Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorrecovery.app/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"ip":{"addr":"82.221.129.44","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0866401d2e6bf0b38495c9f278cf96a","sha1":"78a648d27819f61c8b8678d64632d2c35ac6801f","sha256":"726ac59577c8aeeec94c61bfb7791a709e401b5d871d35c39a65cd948f6124e3","sha512":"7889b5b5b511b2d7af4752fb4d4ae4edcf96b18351224867e39c5dbff54fb6fadf3e18a40bfa35cd803d34426e95623768e64a132282f1813525a7d1844f101f","ssdeep":"768:oqEYJ8Mc56JH6u0HpQPu3iU7bwUCD2XZjVV300FKKh:YYJC0cHWujsIl39KKh","tlshash":"37031af8b2a8703183ef50b5503f040bf3366968588d8068ba65d4eb68f454a51f7fbd","size":40106,"data":"","first_seen":"2026-05-21T20:58:39.683163Z","last_seen":"2026-06-21T07:22:33.861491Z","times_seen":2525,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-06-10","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"trezorrecovery.app/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorrecovery.app/formlayer-frontend-js-extra","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"ip":{"addr":"82.221.129.44","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"introduction_type":"scriptElement","is_inline":false,"md5":"5927689f2017b839bc5a20870d7b117c","sha1":"d5510a2bded2ee629d7fbe6c7016facf337ed8d6","sha256":"29792713210601a55e711a8f53004ab4a1e5185c90c00b7ea585625fd657fbb3","sha512":"a4c1fbcb4bfc8d51cf47e94c2399b890a9ac9f03519a708d4c6b31d41a964894dcad6cd76232d5109a628b1e18e595110cebdd564ec9d46129e000b38833cc9b","ssdeep":"","tlshash":"b8512248c5ceae0292b21cf008a43327a0952421d2501c02eb08b0cc0398ac29ca8203","size":3161,"data":"","first_seen":"2026-06-10T21:35:04.266464Z","last_seen":"2026-06-10T21:37:15.820195Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorrecovery.app/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=96a846e1d7b789c39ab9","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"ip":{"addr":"82.221.129.44","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"introduction_type":"scriptElement","is_inline":false,"md5":"be31fdf0c1b991d4ae62d43750c29004","sha1":"2741b37b0171acf8ea67d90ab0927259adf9d66d","sha256":"caf7ad56bd767d2bb8c5b78dfd3c2c4e005e7d01abca7314fbaffed99c7df69d","sha512":"6bc44dd8afdcb3d01143df983b3a5c20300b0a1e9e5cf7d24d04544b2a186d8b1d0d684164489fb0eba865c4d0247001a0e37b1af65b432f03b6e3d02999f71d","ssdeep":"","tlshash":"bc517578336075b5caff4384f224d538b365dec1440b28017d2926df26aefa181e1f6a","size":3053,"data":"","first_seen":"2026-04-07T19:24:43.304892Z","last_seen":"2026-06-21T07:22:33.861968Z","times_seen":2460,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorrecovery.app/wp-content/plugins/cookieadmin-pro/assets/js/consent.js?ver=1.2.1","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"ip":{"addr":"82.221.129.44","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"introduction_type":"scriptElement","is_inline":false,"md5":"04bac1b8ff9eb022505f065934355181","sha1":"ba2645b0b75a3398ad73117b73582edf5183c89d","sha256":"2bc6260dc04a9730f91856d73179bccefeb7ac921167298f3453daf926cc3b4c","sha512":"d7e50363c96350505759d2bb261bc2c2515a4e84ed49d18eb3f205555c20cb0a85e1127eee4b1333513def4413d65f34333d09f910aedc29abbb6389b1cce0b3","ssdeep":"192:WTpX4TDpuTBE9Zshnv9MD3nSyztxln1V/Qfo:WXBE7shnV0HQfo","tlshash":"d0f15696fabc0b7813f510b1d49aa58d713cd431b8a55d9a563c60bc42d0fe98cf3aa3","size":7829,"data":"","first_seen":"2026-05-14T02:27:58.482712Z","last_seen":"2026-06-21T00:48:01.197788Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorrecovery.app/cookieadmin_js-js-extra","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"ip":{"addr":"82.221.129.44","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"introduction_type":"scriptElement","is_inline":false,"md5":"095acd23aed47ff289aa7f3ada1a28e1","sha1":"ac3c1e1868b7c428628b709ba5287cb239f3927d","sha256":"c261271fb4da8da54e238945c3f48974f41b03f9cc3f41b254bca843f40c8721","sha512":"0c6d28d602e19260b650f1313fffae6fbe8ee5fe8fb0baf7cbe13290c46b6d4fdf5529d8ee50953ab46115197f5be9f20b8ede2cfa73d967400d563a379fc0b8","ssdeep":"","tlshash":"1e514a36fadd966da69303f4d520ae8d5005a104f2d84d1aaa3de47ce1c1fd3adc2307","size":3085,"data":"","first_seen":"2026-06-10T21:35:04.268849Z","last_seen":"2026-06-10T21:37:15.821722Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorrecovery.app/wp-includes/js/wp-emoji-loader.min.js","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"ip":{"addr":"82.221.129.44","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"introduction_type":"scriptElement","is_inline":false,"md5":"3be5f4afbf2361dffa84cba4cda93319","sha1":"b2b783e0a24cd50d70b94141951fbc0568a18063","sha256":"60c3664539364564fad701999506821f5aa814bebca9e20f80020f8190681d5d","sha512":"cfba060b312872468d7c42409caee203d180162296b107974f3155ee87e82d9753e1ca1721b98312f29a190bc4b0db316bc617d697b39f12dbc62ff74f10b7f2","ssdeep":"96:UvcHtHRA5NTDXnM2E0+1lfYsPHgRhR3Sm:hN0LE0+1lfYsvSh","tlshash":"25c1969ae77a38dbb2f900f2697e0d47eb614435d6c8d438c9bda3141cb5893c274b46","size":5961,"data":"","first_seen":"2026-06-10T21:35:04.270743Z","last_seen":"2026-06-10T21:37:15.820994Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorrecovery.app/wp-includes/js/wp-emoji-release.min.js?ver=7.0","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"ip":{"addr":"82.221.129.44","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-06-21T07:30:43.004728Z","times_seen":277268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorrecovery.app/wp-content/plugins/pagelayer/js/givejs.php?give=pagelayer-frontend.js,nivo-lightbox.min.js,wow.min.js,jquery-numerator.js,simpleParallax.min.js,owl.carousel.min.js\u0026premium=chart.min.js,premium-frontend.js,shuffle.min.js\u0026ver=2.1.0","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"ip":{"addr":"82.221.129.44","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"introduction_type":"scriptElement","is_inline":false,"md5":"28c569f02f2c1bc69abe0498f02e5c81","sha1":"1bc683e037ca91a929b375b2ed1894165f048d02","sha256":"e71c9546c256b4cca2ab187a29e87c73c7b5720f6f97da94d17ade0438d2a20e","sha512":"1842ae61f7d4749719846ce0390b3508a1c8b1baee23dc32560d1b469d5190ecac001bafd43319ab27d7435e1ebb7e6715e3426de0d1b90be17ea43a2d36eb2c","ssdeep":"6144:BIItsow3JIqG67miKaxSUE879VEXOkpfUXhFD:6rRxSUEM9VE+UUPD","tlshash":"98742b89b355342542e321a5603f0109b63f64256406c4b8f679e4de6ebdc8e23bbf7e","size":346757,"data":"","first_seen":"2025-08-03T21:44:49.637834Z","last_seen":"2026-06-19T21:50:45.624734Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorrecovery.app/wp-content/plugins/cookieadmin/assets/js/consent.js?ver=1.2.1","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"ip":{"addr":"82.221.129.44","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"introduction_type":"scriptElement","is_inline":false,"md5":"3bef3782c625c8b92fb7cde0c621ec13","sha1":"87f2107ac9b990076b35be691f26806730498317","sha256":"445198c7468cebf39061215360595f4d21e234d059295759327ad35a754b6646","sha512":"35e2ec6a320b6e58eda24bdfd2f1a430e81224a60928aa6f2d76e77bcbd8a0254bfbf926dcf31b7cf6f5cd803d8980b56e030779cd296029f5723c983f193ec5","ssdeep":"384:tIsxr+Jywi291IR/iF/iiO45iJfiT3iqJklrzKCNXd4w/ibfie2ij8ivfiW7Bfis:t7rFnR6F6R4AJaTyqJklrzKCNXd4w6br","tlshash":"7da20fa4fedc962c00e512f9d56a5689b42c5032f845a99e3f3cb4f48ad0fd38cc5a97","size":21491,"data":"","first_seen":"2026-06-05T21:04:03.394332Z","last_seen":"2026-06-21T01:39:33.000171Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorrecovery.app/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"ip":{"addr":"82.221.129.44","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-21T07:30:08.925497Z","times_seen":919036,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorrecovery.app/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"ip":{"addr":"82.221.129.44","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-21T07:29:51.500978Z","times_seen":845930,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorrecovery.app/wp-content/plugins/formlayer/assets/js/frontend.js?ver=1.0.5","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"ip":{"addr":"82.221.129.44","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c24c075b5d13603ce9b31c1b8730649","sha1":"cf2289ef95b18549e80cf294c6a694879337dc63","sha256":"3830fb6ee9f5cf53898585b7d4a5f50e0e081e15c12e55c1a0c8eadaee013457","sha512":"dae231b2f8bace3dd92f4386c8a6077a0d01b6412d475596c3a7156e0a8115382facf420f34ff07e157e8d25ff83c9a3acc289b0faf99b1628fe8d40a7897cab","ssdeep":"96:dO0ZHQsJcjtwkHY3xY7kj65HULuHfDbyWt8+IQnjRrZE7m12u0gc/q:o0lQYcjtwk43xY7k708+3tZIhu0a","tlshash":"96e19316f73c158b2073016ee8c9b1c53c2f54b7c6190da6fd6624bca8acd907726b5b","size":6942,"data":"","first_seen":"2026-06-06T15:59:52.813857Z","last_seen":"2026-06-20T23:30:09.064271Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://trezorrecovery.app/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"trezorrecovery.app/wp-content/plugins/pagelayer/js/givejs.php?give=pagelayer-frontend.js,nivo-lightbox.min.js,wow.min.js,jquery-numerator.js,simpleParallax.min.js,owl.carousel.min.js\u0026premium=chart.min.js,premium-frontend.js,shuffle.min.js\u0026ver=2.1.0","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"ip":{"addr":"82.221.129.44","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezorrecovery.app/","date":"2026-06-10T21:34:34.442Z","timestamp":1781127274442,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorrecovery.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 19:05:52 GMT","end":"Sun, 06 Sep 2026 19:05:51 GMT"},"fingerprint":{"sha1":"7D:74:44:86:56:1B:0B:CB:E1:DC:E0:D9:BF:F5:60:E2:60:29:67:C7","sha256":"F4:3D:E7:D3:8F:19:47:2E:2A:B7:B9:20:FA:D8:71:46:EC:16:63:9D:A5:B3:83:29:15:85:3C:30:C7:34:A1:45"}}},"request":{"raw":"GET /wp-content/plugins/pagelayer/js/givejs.php?give=pagelayer-frontend.js,nivo-lightbox.min.js,wow.min.js,jquery-numerator.js,simpleParallax.min.js,owl.carousel.min.js\u0026premium=chart.min.js,premium-frontend.js,shuffle.min.js\u0026ver=2.1.0 HTTP/1.1\r\nHost: trezorrecovery.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezorrecovery.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript; charset: UTF-8;charset=UTF-8\r\ncache-control: must-revalidate\r\nlast-modified: Fri, 24 Oct 2025 13:19:52 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Wed, 10 Jun 2026 21:34:34 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":346757,"size_decoded":96253,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7683), with CRLF, LF line terminators","md5":"28c569f02f2c1bc69abe0498f02e5c81","sha1":"1bc683e037ca91a929b375b2ed1894165f048d02","sha256":"e71c9546c256b4cca2ab187a29e87c73c7b5720f6f97da94d17ade0438d2a20e","sha512":"1842ae61f7d4749719846ce0390b3508a1c8b1baee23dc32560d1b469d5190ecac001bafd43319ab27d7435e1ebb7e6715e3426de0d1b90be17ea43a2d36eb2c","ssdeep":"6144:BIItsow3JIqG67miKaxSUE879VEXOkpfUXhFD:6rRxSUEM9VE+UUPD","tlshash":"98742b89b355342542e321a5603f0109b63f64256406c4b8f679e4de6ebdc8e23bbf7e","first_seen":"2025-08-03T21:44:49.637834Z","last_seen":"2026-06-19T21:50:45.624734Z","times_seen":585,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorrecovery.app/wp-content/plugins/formlayer/assets/js/frontend.js?ver=1.0.5","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"ip":{"addr":"82.221.129.44","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezorrecovery.app/","date":"2026-06-10T21:34:34.455Z","timestamp":1781127274455,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorrecovery.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 19:05:52 GMT","end":"Sun, 06 Sep 2026 19:05:51 GMT"},"fingerprint":{"sha1":"7D:74:44:86:56:1B:0B:CB:E1:DC:E0:D9:BF:F5:60:E2:60:29:67:C7","sha256":"F4:3D:E7:D3:8F:19:47:2E:2A:B7:B9:20:FA:D8:71:46:EC:16:63:9D:A5:B3:83:29:15:85:3C:30:C7:34:A1:45"}}},"request":{"raw":"GET /wp-content/plugins/formlayer/assets/js/frontend.js?ver=1.0.5 HTTP/1.1\r\nHost: trezorrecovery.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezorrecovery.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 17 Jun 2026 21:34:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Jun 2026 02:47:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2156\r\ndate: Wed, 10 Jun 2026 21:34:34 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6942,"size_decoded":2499,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"3c24c075b5d13603ce9b31c1b8730649","sha1":"cf2289ef95b18549e80cf294c6a694879337dc63","sha256":"3830fb6ee9f5cf53898585b7d4a5f50e0e081e15c12e55c1a0c8eadaee013457","sha512":"dae231b2f8bace3dd92f4386c8a6077a0d01b6412d475596c3a7156e0a8115382facf420f34ff07e157e8d25ff83c9a3acc289b0faf99b1628fe8d40a7897cab","ssdeep":"96:dO0ZHQsJcjtwkHY3xY7kj65HULuHfDbyWt8+IQnjRrZE7m12u0gc/q:o0lQYcjtwk43xY7k708+3tZIhu0a","tlshash":"96e19316f73c158b2073016ee8c9b1c53c2f54b7c6190da6fd6624bca8acd907726b5b","first_seen":"2026-06-06T15:59:52.813857Z","last_seen":"2026-06-20T23:30:09.064271Z","times_seen":24,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorrecovery.app/wp-content/uploads/2026/06/Trezor.png","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"ip":{"addr":"82.221.129.44","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorrecovery.app/","date":"2026-06-10T21:34:34.468Z","timestamp":1781127274468,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorrecovery.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 19:05:52 GMT","end":"Sun, 06 Sep 2026 19:05:51 GMT"},"fingerprint":{"sha1":"7D:74:44:86:56:1B:0B:CB:E1:DC:E0:D9:BF:F5:60:E2:60:29:67:C7","sha256":"F4:3D:E7:D3:8F:19:47:2E:2A:B7:B9:20:FA:D8:71:46:EC:16:63:9D:A5:B3:83:29:15:85:3C:30:C7:34:A1:45"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/Trezor.png HTTP/1.1\r\nHost: trezorrecovery.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezorrecovery.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 17 Jun 2026 21:34:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 08 Jun 2026 23:06:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2574\r\ndate: Wed, 10 Jun 2026 21:34:34 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2574,"size_decoded":2859,"mime_type":"image/png","magic":"PNG image data, 410 x 123, 8-bit colormap, non-interlaced","md5":"d9b9f638d20eee0d93612286d82778fb","sha1":"71c73716848c85b7b1174985bb92e79b130df94d","sha256":"ffd1d16818c101b96d62d2639e24ea054e17a1aa63cdf91b03e37e8dc1375175","sha512":"04b3823a364300b9879f92e30ab944893ce64a9b33af4b8f51ca57c10408f6670f761dd5066f9a81e11c9ba35685f2b8cc535553375599d268d4a49c68bfe69f","ssdeep":"","tlshash":"5751e9b7966888948738d3d6abdffa02703019ed5f78520e4c4d4586ea5463761bd12c","first_seen":"2026-06-10T21:35:04.240964Z","last_seen":"2026-06-10T21:37:15.786756Z","times_seen":2,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorrecovery.app/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"ip":{"addr":"82.221.129.44","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezorrecovery.app/","date":"2026-06-10T21:34:34.820Z","timestamp":1781127274820,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorrecovery.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 19:05:52 GMT","end":"Sun, 06 Sep 2026 19:05:51 GMT"},"fingerprint":{"sha1":"7D:74:44:86:56:1B:0B:CB:E1:DC:E0:D9:BF:F5:60:E2:60:29:67:C7","sha256":"F4:3D:E7:D3:8F:19:47:2E:2A:B7:B9:20:FA:D8:71:46:EC:16:63:9D:A5:B3:83:29:15:85:3C:30:C7:34:A1:45"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1 HTTP/1.1\r\nHost: trezorrecovery.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezorrecovery.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 17 Jun 2026 21:34:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 19 May 2026 14:30:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14887\r\ndate: Wed, 10 Jun 2026 21:34:34 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40106,"size_decoded":15231,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40105)","md5":"f0866401d2e6bf0b38495c9f278cf96a","sha1":"78a648d27819f61c8b8678d64632d2c35ac6801f","sha256":"726ac59577c8aeeec94c61bfb7791a709e401b5d871d35c39a65cd948f6124e3","sha512":"7889b5b5b511b2d7af4752fb4d4ae4edcf96b18351224867e39c5dbff54fb6fadf3e18a40bfa35cd803d34426e95623768e64a132282f1813525a7d1844f101f","ssdeep":"768:oqEYJ8Mc56JH6u0HpQPu3iU7bwUCD2XZjVV300FKKh:YYJC0cHWujsIl39KKh","tlshash":"37031af8b2a8703183ef50b5503f040bf3366968588d8068ba65d4eb68f454a51f7fbd","first_seen":"2026-05-21T20:58:39.683163Z","last_seen":"2026-06-21T07:22:33.861491Z","times_seen":2525,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-06-10","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"trezorrecovery.app/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorrecovery.app/wp-content/plugins/cookieadmin/assets/css/consent.css?ver=1.2.1","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"ip":{"addr":"82.221.129.44","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezorrecovery.app/","date":"2026-06-10T21:34:34.428Z","timestamp":1781127274428,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorrecovery.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 19:05:52 GMT","end":"Sun, 06 Sep 2026 19:05:51 GMT"},"fingerprint":{"sha1":"7D:74:44:86:56:1B:0B:CB:E1:DC:E0:D9:BF:F5:60:E2:60:29:67:C7","sha256":"F4:3D:E7:D3:8F:19:47:2E:2A:B7:B9:20:FA:D8:71:46:EC:16:63:9D:A5:B3:83:29:15:85:3C:30:C7:34:A1:45"}}},"request":{"raw":"GET /wp-content/plugins/cookieadmin/assets/css/consent.css?ver=1.2.1 HTTP/1.1\r\nHost: trezorrecovery.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezorrecovery.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 17 Jun 2026 21:34:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Jun 2026 12:43:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2450\r\ndate: Wed, 10 Jun 2026 21:34:34 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9315,"size_decoded":2779,"mime_type":"text/css","magic":"ASCII text","md5":"36e6b84ac7606d6522af953b077a9015","sha1":"a570681ac068ce9aa775f6005e02e63a55704eda","sha256":"894b78c070c0f60746303c039954889fecff8eaa0b2e2e24dcbb9185edf6296f","sha512":"1d115c4bbf8d440c094cdc6f4b043e7d45c13acf63dcb82d764f88ef459a5b301f5c6934b8068e83db90efc21eb1e26783b6e773c04097677ef9f2565d3a1a60","ssdeep":"96:F4s1BGxG6rCZL5XyOmHQikEciAP6iHKm20S5wkLACq9LZRczmDIh6iM7ABF:F4s1yCM5ciAIm235+LZuO77ABF","tlshash":"c01234163e9c560c621b80d8f994db46953e4152fa0f0d9e56b238bcc2c87d74ca2eee","first_seen":"2026-06-05T21:04:03.38319Z","last_seen":"2026-06-21T01:39:33.010986Z","times_seen":87,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuLyfAZ9hiA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trezorrecovery.app/","date":"2026-06-10T21:34:34.978Z","timestamp":1781127274978,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/inter/v20/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuLyfAZ9hiA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://trezorrecovery.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23664\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Jun 2026 02:32:44 GMT\r\nexpires: Fri, 04 Jun 2027 02:32:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 586911\r\nlast-modified: Tue, 09 Sep 2025 18:36:19 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":23664,"size_decoded":24477,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23664, version 1.0","md5":"da03732a27e16543f09d6a6a62b0cdd4","sha1":"68f645c6b6ff12e25c54b13d4ed119e631dcbb26","sha256":"8909904ab6c872eb994093482a88a28eca2cd95912d7b6fecd72103b0dc07edc","sha512":"8f8a1b22d7fedc8a5c0b75a237932fa00b71d25b1c13d1ec6f9c31fbeceba5d7e1a728a06fc3c2abd803337617394f91d2cc08e9798417b73e3587da3b9d882e","ssdeep":"384:LDIByvvcpxzNfjZ7amidC7gcUH6rpfmzO59sT+m+WFg5ivhjpaBNSS6X:LMBYabZ7aXvaVfSCWSogoSSSi","tlshash":"fdb2e0e97b5be3e2e077c67d41bbdf94e64c2860435e4b830e24be14e2d24fe6484416","first_seen":"2025-05-30T09:01:41.826892Z","last_seen":"2026-06-21T06:52:28.154175Z","times_seen":14084,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":31,"send":0,"wait":16,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorrecovery.app/wp-content/plugins/pagelayer/css/givecss.php?give=pagelayer-frontend.css,nivo-lightbox.css,animate.min.css,owl.carousel.min.css,owl.theme.default.min.css,font-awesome5.min.css\u0026premium=premium-frontend.css\u0026ver=2.1.0","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"ip":{"addr":"82.221.129.44","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezorrecovery.app/","date":"2026-06-10T21:34:34.426Z","timestamp":1781127274426,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorrecovery.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 19:05:52 GMT","end":"Sun, 06 Sep 2026 19:05:51 GMT"},"fingerprint":{"sha1":"7D:74:44:86:56:1B:0B:CB:E1:DC:E0:D9:BF:F5:60:E2:60:29:67:C7","sha256":"F4:3D:E7:D3:8F:19:47:2E:2A:B7:B9:20:FA:D8:71:46:EC:16:63:9D:A5:B3:83:29:15:85:3C:30:C7:34:A1:45"}}},"request":{"raw":"GET /wp-content/plugins/pagelayer/css/givecss.php?give=pagelayer-frontend.css,nivo-lightbox.css,animate.min.css,owl.carousel.min.css,owl.theme.default.min.css,font-awesome5.min.css\u0026premium=premium-frontend.css\u0026ver=2.1.0 HTTP/1.1\r\nHost: trezorrecovery.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezorrecovery.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset: UTF-8;charset=UTF-8\r\ncache-control: must-revalidate\r\nlast-modified: Wed, 18 Feb 2026 10:29:02 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Wed, 10 Jun 2026 21:34:34 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":293855,"size_decoded":46514,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"4d6936c75852658e7b6c3650b0b93646","sha1":"6374a23b133345fb467881cf2f74b56989ca419f","sha256":"08dc881a346771db45d330bc95502484b3f5362cc8b775c277605c9cec18a0d5","sha512":"25d6112fc0f167f3ab3585b6db05a6ee2d8cd4145ae672cba9c246e75b7ac5e4b1174d2555f7ea45cc2eb00cbd7f4038c74e50dc046835d5c8fafb1accf80643","ssdeep":"6144:Eh3bokiVAIH1gvkZUwI1OAvkqDb3ay25FrCes0+TgPx0yFTSo:Eh3bokmAjsZUwI1OAvkqDb3ay25FrCef","tlshash":"065411a9d56400c41336c617f7c9bb6827b8f266d5114ca9f1463c0e4fcbb9a23e5b2b","first_seen":"2025-03-13T02:46:44.999136Z","last_seen":"2026-06-21T03:02:12.385922Z","times_seen":767,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Inter%3A400\u0026ver=2.1.0","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezorrecovery.app/","date":"2026-06-10T21:34:34.436Z","timestamp":1781127274436,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:22 GMT","end":"Mon, 10 Aug 2026 18:37:21 GMT"},"fingerprint":{"sha1":"09:D4:FC:2F:81:37:26:42:91:15:6F:27:1B:72:A7:D2:1A:FC:31:72","sha256":"E9:45:95:A3:A1:F2:6E:F0:08:73:C1:35:32:67:E6:72:BB:89:C7:27:C0:8F:D7:48:6F:0A:88:7E:8B:00:2F:B9"}}},"request":{"raw":"GET /css?family=Inter%3A400\u0026ver=2.1.0 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezorrecovery.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 10 Jun 2026 21:34:34 GMT\r\ndate: Wed, 10 Jun 2026 21:34:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2437,"size_decoded":1305,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"cbab9f048137354a7ae7c0fa4f754f79","sha1":"4be46106db76e25378539a4d71d2f1833942c017","sha256":"ebb652d024c828b441fdef0a049e22c71101da86a1f72532e78167b68bed12cd","sha512":"7d4562da8445d4d3ae396c315087d6fedb0b5b10429929de247e1e48063d5b362cc7f881ea74ae9913f7b91183cc5bc48f8c9b78eefe64a1ba5920cd9a67fccd","ssdeep":"","tlshash":"5041c192002b95045b471dd623cf3f359ece22882085d57a5ffe0dc5acead368369b9e","first_seen":"2025-09-11T07:19:29.305886Z","last_seen":"2026-06-20T23:04:10.171559Z","times_seen":2024,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":33,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorrecovery.app/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"ip":{"addr":"82.221.129.44","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezorrecovery.app/","date":"2026-06-10T21:34:34.440Z","timestamp":1781127274440,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorrecovery.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 19:05:52 GMT","end":"Sun, 06 Sep 2026 19:05:51 GMT"},"fingerprint":{"sha1":"7D:74:44:86:56:1B:0B:CB:E1:DC:E0:D9:BF:F5:60:E2:60:29:67:C7","sha256":"F4:3D:E7:D3:8F:19:47:2E:2A:B7:B9:20:FA:D8:71:46:EC:16:63:9D:A5:B3:83:29:15:85:3C:30:C7:34:A1:45"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: trezorrecovery.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezorrecovery.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 17 Jun 2026 21:34:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 09 Jun 2023 05:49:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4678\r\ndate: Wed, 10 Jun 2026 21:34:34 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":5021,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-21T07:29:51.500978Z","times_seen":845930,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorrecovery.app/wp-includes/js/wp-emoji-release.min.js?ver=7.0","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"ip":{"addr":"82.221.129.44","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezorrecovery.app/","date":"2026-06-10T21:34:35.306Z","timestamp":1781127275306,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorrecovery.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 19:05:52 GMT","end":"Sun, 06 Sep 2026 19:05:51 GMT"},"fingerprint":{"sha1":"7D:74:44:86:56:1B:0B:CB:E1:DC:E0:D9:BF:F5:60:E2:60:29:67:C7","sha256":"F4:3D:E7:D3:8F:19:47:2E:2A:B7:B9:20:FA:D8:71:46:EC:16:63:9D:A5:B3:83:29:15:85:3C:30:C7:34:A1:45"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.0 HTTP/1.1\r\nHost: trezorrecovery.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezorrecovery.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 17 Jun 2026 21:34:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 07 Nov 2025 14:44:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4949\r\ndate: Wed, 10 Jun 2026 21:34:35 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22762,"size_decoded":5292,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-06-21T07:30:43.004728Z","times_seen":277268,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorrecovery.app/wp-content/plugins/cookieadmin-pro/assets/js/consent.js?ver=1.2.1","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"ip":{"addr":"82.221.129.44","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezorrecovery.app/","date":"2026-06-10T21:34:34.445Z","timestamp":1781127274445,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorrecovery.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 19:05:52 GMT","end":"Sun, 06 Sep 2026 19:05:51 GMT"},"fingerprint":{"sha1":"7D:74:44:86:56:1B:0B:CB:E1:DC:E0:D9:BF:F5:60:E2:60:29:67:C7","sha256":"F4:3D:E7:D3:8F:19:47:2E:2A:B7:B9:20:FA:D8:71:46:EC:16:63:9D:A5:B3:83:29:15:85:3C:30:C7:34:A1:45"}}},"request":{"raw":"GET /wp-content/plugins/cookieadmin-pro/assets/js/consent.js?ver=1.2.1 HTTP/1.1\r\nHost: trezorrecovery.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezorrecovery.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 17 Jun 2026 21:34:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 11 May 2026 07:53:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2244\r\ndate: Wed, 10 Jun 2026 21:34:34 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7829,"size_decoded":2587,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"04bac1b8ff9eb022505f065934355181","sha1":"ba2645b0b75a3398ad73117b73582edf5183c89d","sha256":"2bc6260dc04a9730f91856d73179bccefeb7ac921167298f3453daf926cc3b4c","sha512":"d7e50363c96350505759d2bb261bc2c2515a4e84ed49d18eb3f205555c20cb0a85e1127eee4b1333513def4413d65f34333d09f910aedc29abbb6389b1cce0b3","ssdeep":"192:WTpX4TDpuTBE9Zshnv9MD3nSyztxln1V/Qfo:WXBE7shnV0HQfo","tlshash":"d0f15696fabc0b7813f510b1d49aa58d713cd431b8a55d9a563c60bc42d0fe98cf3aa3","first_seen":"2026-05-14T02:27:58.482712Z","last_seen":"2026-06-21T00:48:01.197788Z","times_seen":115,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googleapis.com/","fqdn":"googleapis.com","domain":"googleapis.com","tld":""},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezorrecovery.app/","date":"2026-06-10T21:34:34.450Z","timestamp":1781127274450,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezorrecovery.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-type: text/html; charset=UTF-8\r\nreferrer-policy: no-referrer\r\ncontent-length: 1561\r\ndate: Wed, 10 Jun 2026 21:34:34 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T07:29:47.333633Z","times_seen":16602482,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorrecovery.app/wp-content/plugins/cookieadmin-pro/assets/images/re-consent-icons/cookieadmin.svg","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"ip":{"addr":"82.221.129.44","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorrecovery.app/","date":"2026-06-10T21:34:34.472Z","timestamp":1781127274472,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorrecovery.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 19:05:52 GMT","end":"Sun, 06 Sep 2026 19:05:51 GMT"},"fingerprint":{"sha1":"7D:74:44:86:56:1B:0B:CB:E1:DC:E0:D9:BF:F5:60:E2:60:29:67:C7","sha256":"F4:3D:E7:D3:8F:19:47:2E:2A:B7:B9:20:FA:D8:71:46:EC:16:63:9D:A5:B3:83:29:15:85:3C:30:C7:34:A1:45"}}},"request":{"raw":"GET /wp-content/plugins/cookieadmin-pro/assets/images/re-consent-icons/cookieadmin.svg HTTP/1.1\r\nHost: trezorrecovery.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezorrecovery.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 17 Jun 2026 21:34:34 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 11 Mar 2026 05:51:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 293\r\ndate: Wed, 10 Jun 2026 21:34:34 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":738,"size_decoded":626,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ac4f8069f74c4a83cfcf736471ed9894","sha1":"8e1b411b6f11ef7f9d4c15273b00e232806c1840","sha256":"1c1ca5d2744c185a68b3991a50cb400d0fb126b311fa5249f556a1ea82a220a7","sha512":"43d537b824606ce079bc2123ff86dc996e337b92e503eb6080d52411150cf2858220a74309d0f23df9f611d50345e7bfb1039c8cca643b90550cfbd11e90e8eb","ssdeep":"","tlshash":"8801286ae11c5a1e91020364d3277632a26fb4ede2881b3811acc870e701bdbe4279e2","first_seen":"2025-07-22T15:21:11.528647Z","last_seen":"2026-06-21T05:17:31.250312Z","times_seen":2694,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorrecovery.app/favicon.ico","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorrecovery.app/","date":"2026-06-10T21:34:35.047Z","timestamp":1781127275047,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorrecovery.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 19:05:52 GMT","end":"Sun, 06 Sep 2026 19:05:51 GMT"},"fingerprint":{"sha1":"7D:74:44:86:56:1B:0B:CB:E1:DC:E0:D9:BF:F5:60:E2:60:29:67:C7","sha256":"F4:3D:E7:D3:8F:19:47:2E:2A:B7:B9:20:FA:D8:71:46:EC:16:63:9D:A5:B3:83:29:15:85:3C:30:C7:34:A1:45"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: trezorrecovery.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezorrecovery.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T07:29:47.333633Z","times_seen":16602482,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorrecovery.app/wp-content/uploads/2026/06/cropped-images-32x32.png","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"ip":{"addr":"82.221.129.44","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorrecovery.app/","date":"2026-06-10T21:34:35.101Z","timestamp":1781127275101,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorrecovery.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 19:05:52 GMT","end":"Sun, 06 Sep 2026 19:05:51 GMT"},"fingerprint":{"sha1":"7D:74:44:86:56:1B:0B:CB:E1:DC:E0:D9:BF:F5:60:E2:60:29:67:C7","sha256":"F4:3D:E7:D3:8F:19:47:2E:2A:B7:B9:20:FA:D8:71:46:EC:16:63:9D:A5:B3:83:29:15:85:3C:30:C7:34:A1:45"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/cropped-images-32x32.png HTTP/1.1\r\nHost: trezorrecovery.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezorrecovery.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 17 Jun 2026 21:34:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 08 Jun 2026 21:22:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 482\r\ndate: Wed, 10 Jun 2026 21:34:35 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":482,"size_decoded":766,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"438852a6ca10215b15026c62a5835541","sha1":"3a87aac4b334aed67c8ba33369fcd5dfa16d38eb","sha256":"76209f7beefc318b01fb1014b53d3d206876f169f805e7e759783a88780be336","sha512":"0a43cd0e07ded016bbdfbfd405ad0929cfdddb113db064cf5d8bf1cfb10414a109894671d943eeec3ba5ac22e78ad4d5deaace85a2e5ecd9fe4cbb83dc248516","ssdeep":"","tlshash":"0cf00e821273286c9cda66b8c6ad2ac79c329a845addc82380a47e362e1981098b4522","first_seen":"2026-06-10T21:35:04.253279Z","last_seen":"2026-06-10T21:37:15.810904Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/2716.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorrecovery.app/","date":"2026-06-10T21:34:35.388Z","timestamp":1781127275388,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 19:44:43 GMT","end":"Thu, 23 Jul 2026 19:44:42 GMT"},"fingerprint":{"sha1":"A3:CA:4D:A5:D1:38:98:6D:BA:D3:BC:97:38:87:2F:F8:5D:E6:F3:50","sha256":"EC:0E:74:3E:53:88:CF:E8:5E:13:E6:4D:30:1C:54:A3:37:E0:B5:23:14:D4:A0:54:54:76:D9:8F:22:7F:15:21"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/2716.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezorrecovery.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 10 Jun 2026 21:34:38 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:21:38 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 17\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":500,"size_decoded":759,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"133b77ff9fc321682fed3cde12d6355c","sha1":"4cadfe2e9f50307a51f9d040a916cd4c09baaaa8","sha256":"f39e7ecf003f57bad813ff5b686add8eca88b02f364e0ba946d1ddd8eb25e61e","sha512":"474176f5d483a166386b68f70c0ace7ea7e0bea33525e52bf7dc6d53c11b86ca00bcfdc37213c3fc423a7e109d63b1b8bc102e020a5cc99f0b8ae614837438f3","ssdeep":"","tlshash":"d5f054044776e7c787a545c4ed206d9d5723d0ae9e5920c863d30c9853e6e9f7416428","first_seen":"2023-04-06T18:33:48Z","last_seen":"2026-06-21T01:39:33.002759Z","times_seen":3597,"resource_available":false,"data":null}},"time_used":3310,"timings":{"blocked":0,"dns":2,"connect":9,"send":0,"wait":8,"receive":0,"ssl":3291},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Inter%3A400","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trezorrecovery.app/","date":"2026-06-10T21:34:34.422Z","timestamp":1781127274422,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:22 GMT","end":"Mon, 10 Aug 2026 18:37:21 GMT"},"fingerprint":{"sha1":"09:D4:FC:2F:81:37:26:42:91:15:6F:27:1B:72:A7:D2:1A:FC:31:72","sha256":"E9:45:95:A3:A1:F2:6E:F0:08:73:C1:35:32:67:E6:72:BB:89:C7:27:C0:8F:D7:48:6F:0A:88:7E:8B:00:2F:B9"}}},"request":{"raw":"GET /css?family=Inter%3A400 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://trezorrecovery.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezorrecovery.app/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 10 Jun 2026 21:34:34 GMT\r\ndate: Wed, 10 Jun 2026 21:34:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2437,"size_decoded":1305,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"cbab9f048137354a7ae7c0fa4f754f79","sha1":"4be46106db76e25378539a4d71d2f1833942c017","sha256":"ebb652d024c828b441fdef0a049e22c71101da86a1f72532e78167b68bed12cd","sha512":"7d4562da8445d4d3ae396c315087d6fedb0b5b10429929de247e1e48063d5b362cc7f881ea74ae9913f7b91183cc5bc48f8c9b78eefe64a1ba5920cd9a67fccd","ssdeep":"","tlshash":"5041c192002b95045b471dd623cf3f359ece22882085d57a5ffe0dc5acead368369b9e","first_seen":"2025-09-11T07:19:29.305886Z","last_seen":"2026-06-20T23:04:10.171559Z","times_seen":2024,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":33,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorrecovery.app/wp-includes/css/dashicons.min.css?ver=7.0","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"ip":{"addr":"82.221.129.44","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezorrecovery.app/","date":"2026-06-10T21:34:34.431Z","timestamp":1781127274431,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorrecovery.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 19:05:52 GMT","end":"Sun, 06 Sep 2026 19:05:51 GMT"},"fingerprint":{"sha1":"7D:74:44:86:56:1B:0B:CB:E1:DC:E0:D9:BF:F5:60:E2:60:29:67:C7","sha256":"F4:3D:E7:D3:8F:19:47:2E:2A:B7:B9:20:FA:D8:71:46:EC:16:63:9D:A5:B3:83:29:15:85:3C:30:C7:34:A1:45"}}},"request":{"raw":"GET /wp-includes/css/dashicons.min.css?ver=7.0 HTTP/1.1\r\nHost: trezorrecovery.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezorrecovery.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 17 Jun 2026 21:34:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 24 Nov 2025 18:47:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 35101\r\ndate: Wed, 10 Jun 2026 21:34:34 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59004,"size_decoded":35431,"mime_type":"text/css","magic":"ASCII text, with very long lines (58969)","md5":"6c05185027c3a169cea5b065ac28b6f9","sha1":"d075b19cf8656586e9a561d00ea64f19ff0218ee","sha256":"26a7e7b9d4bb9948771c126085b99fba6546af4399e6263e8a69a3e33f6271cb","sha512":"ecb2602801c8b16c7c079c8f76b09e7b42d71000ba3968fc8c173f8c88cfe99e3739f1cc0149ddea7e69e04755f9b077c48f622e7ab8275ec8b4fdf040ee81f5","ssdeep":"768:oey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5IJq:ox/ZvB/qPWMiquqioMUXQSJYIMW+IJq","tlshash":"2c43c2b1a74a40d677b0c843af65b26a5582bd7df8409cdef40b821c1af3635069dfb8","first_seen":"2025-12-02T22:25:19.065399Z","last_seen":"2026-06-21T07:26:05.145115Z","times_seen":55263,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorrecovery.app/wp-content/plugins/cookieadmin/assets/js/consent.js?ver=1.2.1","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"ip":{"addr":"82.221.129.44","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezorrecovery.app/","date":"2026-06-10T21:34:34.447Z","timestamp":1781127274447,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorrecovery.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 19:05:52 GMT","end":"Sun, 06 Sep 2026 19:05:51 GMT"},"fingerprint":{"sha1":"7D:74:44:86:56:1B:0B:CB:E1:DC:E0:D9:BF:F5:60:E2:60:29:67:C7","sha256":"F4:3D:E7:D3:8F:19:47:2E:2A:B7:B9:20:FA:D8:71:46:EC:16:63:9D:A5:B3:83:29:15:85:3C:30:C7:34:A1:45"}}},"request":{"raw":"GET /wp-content/plugins/cookieadmin/assets/js/consent.js?ver=1.2.1 HTTP/1.1\r\nHost: trezorrecovery.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezorrecovery.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 17 Jun 2026 21:34:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 04 Jun 2026 12:43:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5214\r\ndate: Wed, 10 Jun 2026 21:34:34 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21491,"size_decoded":5557,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (608)","md5":"3bef3782c625c8b92fb7cde0c621ec13","sha1":"87f2107ac9b990076b35be691f26806730498317","sha256":"445198c7468cebf39061215360595f4d21e234d059295759327ad35a754b6646","sha512":"35e2ec6a320b6e58eda24bdfd2f1a430e81224a60928aa6f2d76e77bcbd8a0254bfbf926dcf31b7cf6f5cd803d8980b56e030779cd296029f5723c983f193ec5","ssdeep":"384:tIsxr+Jywi291IR/iF/iiO45iJfiT3iqJklrzKCNXd4w/ibfie2ij8ivfiW7Bfis:t7rFnR6F6R4AJaTyqJklrzKCNXd4w6br","tlshash":"7da20fa4fedc962c00e512f9d56a5689b42c5032f845a99e3f3cb4f48ad0fd38cc5a97","first_seen":"2026-06-05T21:04:03.394332Z","last_seen":"2026-06-21T01:39:33.000171Z","times_seen":88,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorrecovery.app/","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"ip":{"addr":"82.221.129.44","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-10T21:34:30.625Z","timestamp":1781127270625,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorrecovery.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 19:05:52 GMT","end":"Sun, 06 Sep 2026 19:05:51 GMT"},"fingerprint":{"sha1":"7D:74:44:86:56:1B:0B:CB:E1:DC:E0:D9:BF:F5:60:E2:60:29:67:C7","sha256":"F4:3D:E7:D3:8F:19:47:2E:2A:B7:B9:20:FA:D8:71:46:EC:16:63:9D:A5:B3:83:29:15:85:3C:30:C7:34:A1:45"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trezorrecovery.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://trezorrecovery.app/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://trezorrecovery.app/wp-json/wp/v2/pages/65\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://trezorrecovery.app/\u003e; rel=shortlink\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 10 Jun 2026 21:34:33 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"PageLayer","description":"Drag and drop page builder for Wordpress.","website":"https://wordpress.org/plugins/pagelayer","common_platform_enumeration":"","icon":"PageLayer.png","categories":["Widgets","WordPress plugins"]}],"data":{"size":169711,"size_decoded":47179,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20709)","md5":"b56f23b826b669cf12a4597ef2c8cd51","sha1":"6e5dd2e3ce8bdcb6951d1d3fed64f5366b64d8da","sha256":"27fb8f2f71b520b65d593ff684c4a7cbb3a3b423742340a4a59f6f4a54326fe4","sha512":"50cb970a934d71afe0ca194c901005ec752663014f3a72f66aeecd2e5a14a7024feab0b71def251924474eb135b8c7457dea8bf14d13533a0d15d32ceff48f49","ssdeep":"3072:s7pZAf/p/OcmRiBmgT0cTrnbO27kQ06lGPanPEkwhHcGegKii5qiK3NugZMpm4wI:rOcmoTkQ7UHcGegKii5qiK3NJZMpm4wI","tlshash":"b7f35c61e6f4c4f4757b436a95096228a11bd401c6017eb5b0ffe1ac67ccee22ae3b47","first_seen":"2026-06-10T21:35:04.257887Z","last_seen":"2026-06-10T21:35:04.257887Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3107,"timings":{"blocked":-1,"dns":388,"connect":53,"send":0,"wait":2550,"receive":0,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorrecovery.app/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"ip":{"addr":"82.221.129.44","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezorrecovery.app/","date":"2026-06-10T21:34:34.438Z","timestamp":1781127274438,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorrecovery.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 19:05:52 GMT","end":"Sun, 06 Sep 2026 19:05:51 GMT"},"fingerprint":{"sha1":"7D:74:44:86:56:1B:0B:CB:E1:DC:E0:D9:BF:F5:60:E2:60:29:67:C7","sha256":"F4:3D:E7:D3:8F:19:47:2E:2A:B7:B9:20:FA:D8:71:46:EC:16:63:9D:A5:B3:83:29:15:85:3C:30:C7:34:A1:45"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: trezorrecovery.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezorrecovery.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 17 Jun 2026 21:34:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 28 Aug 2023 17:14:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29744\r\ndate: Wed, 10 Jun 2026 21:34:34 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":30088,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-21T07:30:08.925497Z","times_seen":919036,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googleapis.com/","fqdn":"googleapis.com","domain":"googleapis.com","tld":""},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezorrecovery.app/","date":"2026-06-10T21:34:34.822Z","timestamp":1781127274822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleapis.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:06 GMT","end":"Mon, 10 Aug 2026 18:37:05 GMT"},"fingerprint":{"sha1":"74:AD:43:47:22:82:D8:C5:14:4F:6D:17:B1:DC:1D:4C:D4:FC:44:C8","sha256":"C5:7C:9C:22:A7:5F:9E:F3:E8:89:FC:45:D2:98:3F:5F:F2:A4:D3:0A:4F:38:68:D4:52:8D:0A:16:11:E8:8C:9C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezorrecovery.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncontent-type: text/html; charset=UTF-8\r\nreferrer-policy: no-referrer\r\ncontent-length: 1561\r\ndate: Wed, 10 Jun 2026 21:34:34 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T07:29:47.333633Z","times_seen":16602482,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorrecovery.app/wp-content/uploads/2026/06/cropped-images-192x192.png","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"ip":{"addr":"82.221.129.44","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorrecovery.app/","date":"2026-06-10T21:34:35.099Z","timestamp":1781127275099,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorrecovery.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 19:05:52 GMT","end":"Sun, 06 Sep 2026 19:05:51 GMT"},"fingerprint":{"sha1":"7D:74:44:86:56:1B:0B:CB:E1:DC:E0:D9:BF:F5:60:E2:60:29:67:C7","sha256":"F4:3D:E7:D3:8F:19:47:2E:2A:B7:B9:20:FA:D8:71:46:EC:16:63:9D:A5:B3:83:29:15:85:3C:30:C7:34:A1:45"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/cropped-images-192x192.png HTTP/1.1\r\nHost: trezorrecovery.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezorrecovery.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 17 Jun 2026 21:34:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 08 Jun 2026 21:22:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2699\r\ndate: Wed, 10 Jun 2026 21:34:35 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2699,"size_decoded":2984,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"d6c057d57576db19af53f760baba8157","sha1":"1a75f7236e434a8a4504ca94d0fd256c6c953e61","sha256":"c21ee7bc3f55b7b750311d41566eb4e318f19414918ffb6d6bfa9429b4938cd0","sha512":"0bf47096321fb0c0f0060c4630a77f10752ccd6b752c09634e1372596fd461f43c3f508537cebf54a020ff5ebfb3a70dcff1c19f52c04e073b6008c0332ba42e","ssdeep":"","tlshash":"b2515cdb86dada09cbc3b5345370a13071a52a15f17c768acd8164fd9d470bf3b06704","first_seen":"2026-06-10T21:35:04.260693Z","last_seen":"2026-06-10T21:37:15.814592Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorrecovery.app/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=96a846e1d7b789c39ab9","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"ip":{"addr":"82.221.129.44","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezorrecovery.app/","date":"2026-06-10T21:34:34.961Z","timestamp":1781127274961,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorrecovery.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 19:05:52 GMT","end":"Sun, 06 Sep 2026 19:05:51 GMT"},"fingerprint":{"sha1":"7D:74:44:86:56:1B:0B:CB:E1:DC:E0:D9:BF:F5:60:E2:60:29:67:C7","sha256":"F4:3D:E7:D3:8F:19:47:2E:2A:B7:B9:20:FA:D8:71:46:EC:16:63:9D:A5:B3:83:29:15:85:3C:30:C7:34:A1:45"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=96a846e1d7b789c39ab9 HTTP/1.1\r\nHost: trezorrecovery.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezorrecovery.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 17 Jun 2026 21:34:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 10 Mar 2026 11:29:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 999\r\ndate: Wed, 10 Jun 2026 21:34:34 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3053,"size_decoded":1341,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3052)","md5":"be31fdf0c1b991d4ae62d43750c29004","sha1":"2741b37b0171acf8ea67d90ab0927259adf9d66d","sha256":"caf7ad56bd767d2bb8c5b78dfd3c2c4e005e7d01abca7314fbaffed99c7df69d","sha512":"6bc44dd8afdcb3d01143df983b3a5c20300b0a1e9e5cf7d24d04544b2a186d8b1d0d684164489fb0eba865c4d0247001a0e37b1af65b432f03b6e3d02999f71d","ssdeep":"","tlshash":"bc517578336075b5caff4384f224d538b365dec1440b28017d2926df26aefa181e1f6a","first_seen":"2026-04-07T19:24:43.304892Z","last_seen":"2026-06-21T07:22:33.861968Z","times_seen":2460,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trezorrecovery.app/wp-content/plugins/formlayer/assets/css/frontend.css?ver=1.0.5","fqdn":"trezorrecovery.app","domain":"trezorrecovery.app","tld":"app"},"ip":{"addr":"82.221.129.44","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezorrecovery.app/","date":"2026-06-10T21:34:34.433Z","timestamp":1781127274433,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorrecovery.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 19:05:52 GMT","end":"Sun, 06 Sep 2026 19:05:51 GMT"},"fingerprint":{"sha1":"7D:74:44:86:56:1B:0B:CB:E1:DC:E0:D9:BF:F5:60:E2:60:29:67:C7","sha256":"F4:3D:E7:D3:8F:19:47:2E:2A:B7:B9:20:FA:D8:71:46:EC:16:63:9D:A5:B3:83:29:15:85:3C:30:C7:34:A1:45"}}},"request":{"raw":"GET /wp-content/plugins/formlayer/assets/css/frontend.css?ver=1.0.5 HTTP/1.1\r\nHost: trezorrecovery.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trezorrecovery.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 17 Jun 2026 21:34:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 11 May 2026 02:01:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2657\r\ndate: Wed, 10 Jun 2026 21:34:34 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11374,"size_decoded":2986,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"147fd94775dbd836cfc58615860cd002","sha1":"48b8ed61ca861a3bc5079880453109a2e366749e","sha256":"53fcbda67196662a87a0caf8afccb1221e97804bca5b62951b5e80ee57c7820f","sha512":"311ace0db94a75a2b457f8c35967beb82d4416f13ea0535804977669b0aa316bdbee10d8e77a262be191ae84020a2caea8e8acc414c3d2e8ea1e79ff78a8c71c","ssdeep":"192:EWaPkSnfLFZAU477FkvxBZzO0/WXVx0koLqYE:VaPpIV7FC/WphYE","tlshash":"6632231b26242906a12bd5a4e4c6f7d23d2f8212c23f1de8f291799cb3ce1a64535f5f","first_seen":"2026-05-20T05:18:40.256108Z","last_seen":"2026-06-20T23:30:09.083117Z","times_seen":44,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}