{"report_id":"27a4e2ac-ad01-4b99-b86f-a48adf26add9","version":0,"status":"done","tags":[],"date":"2026-08-18T11:36:08Z","url":{"schema":"http","addr":"exodus-app.app/","fqdn":"exodus-app.app","domain":"exodus-app.app","tld":"app"},"ip":{"addr":"45.74.7.27","port":0,"asn":0,"as":"","country":"Liechtenstein","country_code":"LI"},"final":{"url":{"schema":"https","addr":"exodus-app.app/","fqdn":"exodus-app.app","domain":"exodus-app.app","tld":"app"},"title":"Exodus Wallet | The Multi-Chain Crypto \u0026 Web3 Wallet","dom":{"size":91342,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (15221)","md5":"e1fe52375c48374a58f6d99c586eff12","sha1":"7b1fb32cd3639f111213e0e5f97ef41f8f64dbe1","sha256":"476f4e02436d37ec62f35e097eaafd0805441f5030d34902ce84120abe077da2","sha512":"444f6b58d5b39279ad60353cbc3d82d7c7c8e45b15a79309a9912299ba4c059490fba1e7fded52536c54f3ae9948aed3b1d3d46926a8c36ca16f2b51f5a00868","ssdeep":"768:Aj33XXEdfqeuyADB2ibeCsSTw9Me6GrJK3+FxA+MpG4YZxqR4nJ5hS+cZ8QzNiHA:AjnlJb8D6CguZxqRU085+aAemkfQ","tlshash":"74933bbb73051b3b0a8302e9bbaf35d9e3954120d7321df08aa5c75b53e1d61463b78a","dom_hash":"domhash3ad0580c1a87450e12bf4e93c55294da","first_seen":"2026-08-18T11:36:17.745333Z","last_seen":"2026-08-18T11:36:17.745333Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"exodus-app.app/","fqdn":"exodus-app.app","domain":"exodus-app.app","tld":"app"},"ip":{"addr":"45.74.7.27","port":0,"asn":0,"as":"","country":"Liechtenstein","country_code":"LI"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-22T11:36:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exodus-app.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"exodus-app.app","ip":{"addr":"45.74.7.27","port":443,"asn":0,"as":"","country":"Liechtenstein","country_code":"LI"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-18T11:36:09.064719Z","last_seen":"2026-08-18T11:36:09.064719Z","alert_count":4,"request_count":4,"received_data":340268,"sent_data":2005,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"exodus-app.app/image.jpg","fqdn":"exodus-app.app","domain":"exodus-app.app","tld":"app"},"ip":{"addr":"45.74.7.27","port":443,"asn":0,"as":"","country":"Liechtenstein","country_code":"LI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodus-app.app/","date":"2026-08-18T11:35:41.930Z","timestamp":1787052941930,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-app.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 14:16:37 GMT","end":"Thu, 12 Nov 2026 14:16:36 GMT"},"fingerprint":{"sha1":"84:DF:31:82:F9:FA:CC:C4:7A:31:5B:50:BA:CB:33:C7:1B:CA:CC:44","sha256":"C6:4B:58:2E:3C:8E:7F:06:D1:7E:64:B9:22:CD:7A:20:94:A2:D3:96:B0:36:28:4E:A5:E0:3D:B3:64:66:C1:1A"}}},"request":{"raw":"GET /image.jpg HTTP/1.1\r\nHost: exodus-app.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-app.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 18 Aug 2026 11:35:44 GMT\r\ncontent-length: 205050\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 14 Aug 2026 15:29:27 GMT\r\nserver: Apache/2.4.41 (Ubuntu)\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":205050,"size_decoded":205230,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x1024, components 3","md5":"26c2154a7810eb5e7857d4f7bb2ba075","sha1":"fef1995e9158b9b3902700b9f8a634056660e241","sha256":"056468e2c95f4370cbc4953abd8e8044985ca41d9325ac1191841018df78acad","sha512":"6860971dc259105c4e4a2afafd8c7208e03e235a0d1fe6470e8b310ce6357427e75ee679b91ae3856376a0cb73e3e197cf25568c816974c16dc330bad272b78b","ssdeep":"3072:jpJahhYXHtJbF7lF3RY9Zh2s83wVKbtdxO6psYg/GQSNCyDMwwJ0T3LmRe70:jp0hgbF77RY9ZQs8AQ9Xpbsy7tTiq0","tlshash":"0c141205cb366612b6111dfacdc32efe54ce67ea6e64ee50a86d740cf247098bb85c07","first_seen":"2026-08-18T11:36:17.747817Z","last_seen":"2026-08-18T11:36:17.747817Z","times_seen":1,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exodus-app.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-app.app/apple-touch-icon.png","fqdn":"exodus-app.app","domain":"exodus-app.app","tld":"app"},"ip":{"addr":"45.74.7.27","port":443,"asn":0,"as":"","country":"Liechtenstein","country_code":"LI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodus-app.app/","date":"2026-08-18T11:35:42.049Z","timestamp":1787052942049,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-app.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 14:16:37 GMT","end":"Thu, 12 Nov 2026 14:16:36 GMT"},"fingerprint":{"sha1":"84:DF:31:82:F9:FA:CC:C4:7A:31:5B:50:BA:CB:33:C7:1B:CA:CC:44","sha256":"C6:4B:58:2E:3C:8E:7F:06:D1:7E:64:B9:22:CD:7A:20:94:A2:D3:96:B0:36:28:4E:A5:E0:3D:B3:64:66:C1:1A"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: exodus-app.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-app.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 18 Aug 2026 11:35:44 GMT\r\ncontent-length: 27940\r\nserver: Apache/2.4.41 (Ubuntu)\r\ncontent-type: image/png\r\nlast-modified: Fri, 14 Aug 2026 15:29:27 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":27940,"size_decoded":28118,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"f6cbb5ac8af568724b7caad78ac92553","sha1":"9dbe22fb584beb6fe60fbb3aab4ba12fed2692f2","sha256":"94725556a2f8de632d3f80dad0d86e3006e91b9e3faf660f47b565eb9c0c5781","sha512":"c786eb074261da6a5fed59d4ec58d5d53187e53d064a21402b4efdd35d44d67a42822df3b0d11a6f9530650af5764ec4040b0d85dc287e7643c08fdb4035d25b","ssdeep":"768:xV/utA9Lzwhw/wzpu8F4RDPG2Re2e5Ni409Ou0rmmyr3:xV22HUyBe2s2mNiPOfVM3","tlshash":"e7c2e1c696464fb277cd982398bd6b1f716a30030ab7e0d03389559dec21b80ed1d7ba","first_seen":"2026-08-18T11:36:17.750077Z","last_seen":"2026-08-18T11:36:17.750077Z","times_seen":1,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exodus-app.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-app.app/favicon.ico","fqdn":"exodus-app.app","domain":"exodus-app.app","tld":"app"},"ip":{"addr":"45.74.7.27","port":443,"asn":0,"as":"","country":"Liechtenstein","country_code":"LI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodus-app.app/","date":"2026-08-18T11:35:42.050Z","timestamp":1787052942050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-app.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 14:16:37 GMT","end":"Thu, 12 Nov 2026 14:16:36 GMT"},"fingerprint":{"sha1":"84:DF:31:82:F9:FA:CC:C4:7A:31:5B:50:BA:CB:33:C7:1B:CA:CC:44","sha256":"C6:4B:58:2E:3C:8E:7F:06:D1:7E:64:B9:22:CD:7A:20:94:A2:D3:96:B0:36:28:4E:A5:E0:3D:B3:64:66:C1:1A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: exodus-app.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-app.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 18 Aug 2026 11:35:44 GMT\r\ncontent-encoding: zstd\r\ncontent-type: image/x-icon\r\nlast-modified: Fri, 14 Aug 2026 15:29:27 GMT\r\nvary: Accept-Encoding\r\nserver: Apache/2.4.41 (Ubuntu)\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":15086,"size_decoded":5843,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"bd90f82efac37c6c1fab3f9ffec2067a","sha1":"8cc2283bb05b10755248d41ef42438c25ad51114","sha256":"ba23cb90adc157318fa79ba7fbe1f3147ef3af77d3c80a3f352be50e5638fcef","sha512":"33f688293f20c544645b3f1d50b5f41c0355271e267b4ab9c339383556f34bab7d0f1f5c692b75e82e077890fdafe9c35461975c6923d079f3904a675e9fe385","ssdeep":"192:4E5LILFd2E5HGK8888DSoM++2wVJcU5yznFbf:H5ELFdZ5HF8888DSb++vcUYzn5","tlshash":"7062199bfa4a902ddce44d758413c981f2b3fde582d80215b0d87bab91990538233777","first_seen":"2026-08-18T11:36:17.752471Z","last_seen":"2026-08-18T11:36:17.752471Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exodus-app.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-app.app/","fqdn":"exodus-app.app","domain":"exodus-app.app","tld":"app"},"ip":{"addr":"45.74.7.27","port":443,"asn":0,"as":"","country":"Liechtenstein","country_code":"LI"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-18T11:35:40.414Z","timestamp":1787052940414,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-app.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 14:16:37 GMT","end":"Thu, 12 Nov 2026 14:16:36 GMT"},"fingerprint":{"sha1":"84:DF:31:82:F9:FA:CC:C4:7A:31:5B:50:BA:CB:33:C7:1B:CA:CC:44","sha256":"C6:4B:58:2E:3C:8E:7F:06:D1:7E:64:B9:22:CD:7A:20:94:A2:D3:96:B0:36:28:4E:A5:E0:3D:B3:64:66:C1:1A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: exodus-app.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: zstd\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 18 Aug 2026 11:35:43 GMT\r\nlast-modified: Fri, 14 Aug 2026 15:29:27 GMT\r\nserver: Apache/2.4.41 (Ubuntu)\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":91360,"size_decoded":26313,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (15221)","md5":"38dc3a959b5f2a00d3cd78b78d4648b7","sha1":"3fc003c339842581df14a603c0bf0e4de755e78c","sha256":"7d9880ba8a6ee6b1601eb648d288838175169fbf90a6709210fc6f707235e566","sha512":"6434a11c981f9432cf95fc61051bacf74e1990182581d1ff164e9bbb0bd1ec382c6e1a52555ef4b69dd0fe79aff17e7af3b9bbad734b3cbb1ddbaa48b0027c24","ssdeep":"768:0j331XEdfqeuyADB2ibeCsSTw9Me6g9JYP+VZA+Ip8yYZxqj4n75jS+QZ8QxNiHI:0jxlJb8D6SC6BxqjmeWZ+2AemkpK","tlshash":"6e933bbb73051b3b0a8302e8bbef35dde3954121d73209e08aa5c75b53e1d65463b78a","first_seen":"2026-08-18T11:36:17.754828Z","last_seen":"2026-08-18T11:36:17.754828Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1310,"timings":{"blocked":-1,"dns":570,"connect":26,"send":0,"wait":655,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exodus-app.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}