{"report_id":"324e3732-5b40-4151-93bf-6573b9059e91","version":6,"status":"done","tags":[],"date":"2026-04-28T19:01:11Z","url":{"schema":"https","addr":"exo--dus-web3.pages.dev","fqdn":"exo--dus-web3.pages.dev","domain":"exo--dus-web3.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.57","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"exo--dus-web3.pages.dev/","fqdn":"exo--dus-web3.pages.dev","domain":"exo--dus-web3.pages.dev","tld":"pages.dev"},"title":"Exodus Web3 Wallet — Presentation","dom":{"size":8106,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"c077173dcf0a8dd58c08d3895fb7ff16","sha1":"132d447309d738bc3f3b7a0d384ada21cfcc4427","sha256":"dabac1a99abd3537a80552116288c5302506f935ad7bf2e2d3fedd601651fe8d","sha512":"d177611e550524fcd287b7c369a348086450b7b375091871b248cd4beef2dbf0693b0458d6fce1ef933767d623d4d5dbaf1def7766d470da7b8c3f94fd2f6dff","ssdeep":"192:hrxU1CwWtGX33l616xhk+ZUhz8lpWcv/CtcM834j:hrxfIpzk+ZGzoQsKcMq6","tlshash":"0ff1a53ba2f53623050740a373e3d3eabdf458174719455276fdc248af9495ac2e33aa","dom_hash":"domhashad5989f4726b1e7545b57ddb8c06aa3c","first_seen":"2026-02-27T00:14:56.777606Z","last_seen":"2026-04-28T19:01:13.619264Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"exo--dus-web3.pages.dev","fqdn":"exo--dus-web3.pages.dev","domain":"exo--dus-web3.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.57","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-02T19:01:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T19:00:49Z","timestamp":1777402849,"ip_dst":{"addr":"172.66.47.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":33372,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T19:00:49.511357+0000\",\"flow_id\":1266727654631159,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":33372,\"dest_ip\":\"172.66.47.57\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"exo--dus-web3.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3478,\"start\":\"2026-04-28T19:00:49.501495+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"exo--dus-web3.pages.dev","ip":{"addr":"172.66.47.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-04-28T19:01:11.320058Z","last_seen":"2026-04-28T19:01:11.320058Z","alert_count":0,"request_count":2,"received_data":17985,"sent_data":945,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"exo--dus-web3.pages.dev/","fqdn":"exo--dus-web3.pages.dev","domain":"exo--dus-web3.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8ccdd45f5ed6f684785f8f482dbfd485","sha1":"7e85d752c27346d43aa9b293d7c76585c50cdd54","sha256":"208505dafd370368c9df6cffdc4622c614665ac42a707edbc1baf19bf3958a16","sha512":"71b2909a3a0261c3e9e7d4f4c4129c66e9bf37f6218d074cb2b2c4259f38265f86d84be02bbd3d51912402affe45d8115bf4ed7a2d1ea6998abcbdc9a70c16ef","ssdeep":"","tlshash":"c6f0dc3e1b2257300e6f684d133b6352383104037900e0c9726cce498f79e8080eb9ca","size":472,"data":"","first_seen":"2026-02-27T00:14:56.780277Z","last_seen":"2026-04-28T19:01:13.624824Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"exo--dus-web3.pages.dev/","fqdn":"exo--dus-web3.pages.dev","domain":"exo--dus-web3.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-28T19:00:49.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exo--dus-web3.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 13:26:08 GMT","end":"Wed, 17 Jun 2026 14:24:55 GMT"},"fingerprint":{"sha1":"D9:0E:38:C2:01:74:73:B2:45:1A:EA:83:D9:88:9F:51:66:15:A2:96","sha256":"FD:B4:A3:21:CC:91:A7:E4:92:5F:76:CB:6F:B0:AD:34:7F:F6:03:1E:D1:9D:BD:BE:49:94:3A:7E:8D:72:58:24"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: exo--dus-web3.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:00:49 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OhAo6%2BXOeWl8i%2BxZjNtU6S6EXL2hTKCa2N6lbotVMqCCkP1XRW1uW8haQXRzgQkZ6QPbmwZEVCZqACwgwS%2BiB78fr5QVsbIJ%2Bzn74zb%2FuvvWVyHQ1MC9IlrDoscKRfjzbWhUJutDPYPCLQ%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f384fe18dd776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8262,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"d9aa1f1f92b4f4eb97c744bc70b4cbf9","sha1":"f91767fc5f2027289534d4e466bc2b0c7a88a7ba","sha256":"63120cd9e17c518f303f150d18a01b85c8a33be6d72408e06a0675891dd5f9a6","sha512":"4617917256dc9e4fa16b724016bf3d3d2c2cbeb0d7218656e96b848002b9c206ef783c7c0956c63929c5c95479a89c1a6a657e939ebccc9cdd92d50441a3cd53","ssdeep":"192:WH+0WsXb3Lfs3VrhH+bsXzCGyxvv/D7mM8jQ:WRGVlH+byzD6XPmM+Q","tlshash":"e602a73ba2c435320537409b73a3c2d6ffb4444743112a62b6fe924bafb0959c2a37d6","first_seen":"2026-02-27T00:14:56.779154Z","last_seen":"2026-04-28T19:01:13.622554Z","times_seen":3,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":79,"dns":63,"connect":1,"send":0,"wait":266,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exo--dus-web3.pages.dev/favicon.ico","fqdn":"exo--dus-web3.pages.dev","domain":"exo--dus-web3.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exo--dus-web3.pages.dev/","date":"2026-04-28T19:00:50.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exo--dus-web3.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 13:26:08 GMT","end":"Wed, 17 Jun 2026 14:24:55 GMT"},"fingerprint":{"sha1":"D9:0E:38:C2:01:74:73:B2:45:1A:EA:83:D9:88:9F:51:66:15:A2:96","sha256":"FD:B4:A3:21:CC:91:A7:E4:92:5F:76:CB:6F:B0:AD:34:7F:F6:03:1E:D1:9D:BD:BE:49:94:3A:7E:8D:72:58:24"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: exo--dus-web3.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exo--dus-web3.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:00:50 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K5wZhRh8rjmi48GyKDVmBjkRiODKVsmV9jZFdUulC3GIBQNJWSMxuMUy1BP4E5IuKqFEgyzFrqcIOGaHxOLFKmcqKSdhGt6MaRmDFxzfPEAft4rwx0itTACZXXz0WEGfSLwxEOYnOlJBTA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f384fe55dbac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8262,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"d9aa1f1f92b4f4eb97c744bc70b4cbf9","sha1":"f91767fc5f2027289534d4e466bc2b0c7a88a7ba","sha256":"63120cd9e17c518f303f150d18a01b85c8a33be6d72408e06a0675891dd5f9a6","sha512":"4617917256dc9e4fa16b724016bf3d3d2c2cbeb0d7218656e96b848002b9c206ef783c7c0956c63929c5c95479a89c1a6a657e939ebccc9cdd92d50441a3cd53","ssdeep":"192:WH+0WsXb3Lfs3VrhH+bsXzCGyxvv/D7mM8jQ:WRGVlH+byzD6XPmM+Q","tlshash":"e602a73ba2c435320537409b73a3c2d6ffb4444743112a62b6fe924bafb0959c2a37d6","first_seen":"2026-02-27T00:14:56.779154Z","last_seen":"2026-04-28T19:01:13.622554Z","times_seen":3,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}