{"report_id":"3f299745-0826-4709-856d-502155f1d77e","version":0,"status":"done","tags":[],"date":"2026-09-05T19:14:25Z","url":{"schema":"http","addr":"exitodoribax-app.com/","fqdn":"exitodoribax-app.com","domain":"exitodoribax-app.com","tld":"com"},"ip":{"addr":"91.236.116.210","port":0,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"final":{"url":{"schema":"https","addr":"exitodoribax-app.com/","fqdn":"exitodoribax-app.com","domain":"exitodoribax-app.com","tld":"com"},"title":"Exito Doribax | Official Website Platform","dom":{"size":143727,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (32938)","md5":"de5dab41f31a048f38668f43882da5ac","sha1":"908703268ebd752e615f16189d69020ce3cd4b97","sha256":"1aa10e81d0b1b800e61ad0bdd0d4aaeba49172989e3693b4f77d9a88e875d78d","sha512":"6708063e4cf99973cd7462793edbf9d3c1e5d3abd34c1cb299f4fff2f7aa28da27495ab3d23af05ed61103d32ef3ad577ee6578334b196421d6ceaeedc81366b","ssdeep":"1536:93P89tMbXlOJi55R+Oviw+fHBDEliclYBdP8hUQIKumhU:BwMwXwAQisEGMbm6","tlshash":"ade3332341a93526003783d530aa1f3bd5aa994bfae609407edcc7f61ffac94702b65d","dom_hash":"domhash6095fb0c0e393082bebfc1a3a980c6af","first_seen":"2026-09-05T19:14:41.115717Z","last_seen":"2026-09-05T19:14:41.115717Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"exitodoribax-app.com/","fqdn":"exitodoribax-app.com","domain":"exitodoribax-app.com","tld":"com"},"ip":{"addr":"91.236.116.210","port":0,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-10T19:14:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"exitodoribax-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-08-30T23:14:54.105192Z","alert_count":0,"request_count":3,"received_data":331342,"sent_data":1585,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-30T22:22:21.72184Z","alert_count":0,"request_count":3,"received_data":792324,"sent_data":1718,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-08-30T23:29:53.363005Z","alert_count":0,"request_count":7,"received_data":3552196,"sent_data":3723,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":1,"received_data":8789,"sent_data":526,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-08-30T22:54:14.488664Z","alert_count":0,"request_count":4,"received_data":76703,"sent_data":2811,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.country.is","ip":{"addr":"172.67.75.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-01-30","domain_rank":253271,"first_seen":"2016-09-23T06:54:06Z","last_seen":"2026-09-03T09:15:58.380521Z","alert_count":0,"request_count":1,"received_data":671,"sent_data":467,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"exitodoribax-app.com","ip":{"addr":"91.236.116.210","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":55,"request_count":11,"received_data":254726,"sent_data":5682,"comment":"","tags":null,"fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"UIKit","description":"UIKit is the framework used for developing iOS applications.","website":"https://getuikit.com","common_platform_enumeration":"","icon":"UIKit.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.google.com/recaptcha/enterprise.js?render=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e42675e2728e70eaaa00d4ff30698aec","sha1":"a3999b4419e769a577f73bb4445cba7421fe095b","sha256":"1b0395e6ebb1dfd80e67d9c15e422e2045d1c48adea674725efa942b920b72b1","sha512":"bb72f39bd32615335e4fef3e79a9555e2492221184c32384981c72fcfd84d69552db3095345b3621c7334577309f11457b3b073186905755bc1d200c85e5ac5f","ssdeep":"","tlshash":"f42103b61759a07a0bb20da1e0fdc772e811701cb15c49dca547da861eaaccfce02695","size":1159,"data":"","first_seen":"2026-09-03T18:54:10.549295Z","last_seen":"2026-09-06T02:42:06.452049Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"79e251d536cdd001a23818a648c6e5af","sha1":"27829f43c050bc8da3a45501d048feb67dc8d1b2","sha256":"25068be5bad4bf87c01c5bef4c33825addea39e12d99aa7b55b52288fd0631a6","sha512":"ed7b75e6ae6f0a98eaaec9ea2e454193c10c5844245565ab08b48aa5d381a8c9a733c601105496de3bf521959bc83f30353d82d5be2f1a88d0899d2e35f44347","ssdeep":"12288:x9jhlvbfgbTB4LEeebL3B51euHaZS10YE+:f7aFlbL3B51euHm+","tlshash":"1c052bddb49676b16332b5f910772109533d9815d88c086db1abd8f03ab084ea17befb","size":844493,"data":"","first_seen":"2026-09-01T09:18:25.8255Z","last_seen":"2026-09-06T02:09:34.868006Z","times_seen":2598,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/enterprise/webworker.js?hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"8a4926c35e1da2fd820be78def3ef558","sha1":"598caf385688df918ed770bf52f30e4be0a9c8df","sha256":"33b7926ea401f1fffa38686dfa9896ab5c6b788508e1da41342f1e5c84d251e8","sha512":"38241bb0a8dfbf631c1c67e33940496dec530e5048407a25444d4bc628aab4f9c253eacbe6d3ea0cce7eeaed4bd7ed0078cdd6fd2caf72e14ded39b37428293d","ssdeep":"","tlshash":"73b012232520c8180c010703c86bd3f8e1019028e66090f0c4ad0fdd4530863d011500","size":102,"data":"","first_seen":"2026-09-01T09:18:25.80804Z","last_seen":"2026-09-06T02:09:34.86847Z","times_seen":1877,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/enterprise/bframe?hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026k=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH\u0026bft=0dAFcWeA4DKJ3_nhcl0KbuMaZ1UdF6uhAC2lpQJn2Gm4EvfWs-HSzIxcukQZjFc0WeaXcJ9_eNABVHydjnpsOlR1gpAiS2rmBBtQ","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"dca9d53787fff314e5bd1a123b28906a","sha1":"1350c858f60bbb03d1b53b05cbad6cea82ff29d1","sha256":"2475d902b4182bac667d464a44c89ee405e5cfd64156b30f811557cf2b347e2f","sha512":"4f123c356eec731b4f3653afdc258b385c8a0040ea14831893fa850c1275efe1fd49c51d4acb5f7541e01f2b9e46bbac0266e5893a6987b568f6aa2e0b0d492a","ssdeep":"","tlshash":"41a002f3187682224e93c660d963fb88d952515dfd4985cc60259e5ae7e29dbc010e90","size":75,"data":"","first_seen":"2023-03-07T01:15:59Z","last_seen":"2026-09-06T01:10:55.57056Z","times_seen":109979,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/enterprise/bframe?hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026k=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH\u0026bft=0dAFcWeA4DKJ3_nhcl0KbuMaZ1UdF6uhAC2lpQJn2Gm4EvfWs-HSzIxcukQZjFc0WeaXcJ9_eNABVHydjnpsOlR1gpAiS2rmBBtQ","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"25ffe7e0adcc69ccd9fbbf2ca12c1faf","sha1":"3f25343a309e74596c56449768f4cbc8f5c9af9b","sha256":"a783d3c4980b239a6bf43d1849b3a4614858dadac0c7912c771ded9f0906e145","sha512":"e61978e530cb0be17cb4724f4c72c4d2c79dab79703f8ae21608aab411927b60381451fb39094287b5504b2c107e501fc9d8750f2f51003e620033f2a3864a8f","ssdeep":"","tlshash":"6bc0127761920ef30c65bc52449540ef1d990c27d212a7f49bda7c157da1c55be00b74","size":194,"data":"","first_seen":"2026-06-09T00:34:53.301005Z","last_seen":"2026-09-05T19:14:41.135326Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exitodoribax-app.com/","fqdn":"exitodoribax-app.com","domain":"exitodoribax-app.com","tld":"com"},"ip":{"addr":"91.236.116.210","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"78178bfddb1a0f6883f1bb03723f7f73","sha1":"e0633a04e2148de40955a123ae76d72ca332206b","sha256":"d937eb458a92a535f517bbc92d354fdb19452d4ad49887e6c00b4af0ce163b5b","sha512":"e7dda93d1fabde9eada93aa0828575f95013efe60d216dda048996386856e689f72310864c2c57f5809ea0b560815797937ba3daa5c84fc046a7f8884bc5bdcd","ssdeep":"96:+4f0FQUriUl/udLOmoi4CTeZwpb3Q+RiumK4iWrdrPKE4iCDB:+4f0KHUcdLToiVTeOpbQ+RiumK4iWBbM","tlshash":"1981107612fb013616739bba57cf5206b26990476dc0cc443f5c43461f8ecaa6ae27ed","size":4186,"data":"","first_seen":"2026-07-25T23:32:49.830833Z","last_seen":"2026-09-06T02:42:06.464716Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exitodoribax-app.com/","fqdn":"exitodoribax-app.com","domain":"exitodoribax-app.com","tld":"com"},"ip":{"addr":"91.236.116.210","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"74241dc7c957dd184e1b83ebc4220cc1","sha1":"195545eb539ede25bf5c4ea2a9ba5839e10fdb35","sha256":"143fafc7c399d78b40fa28358935692a1d53f344302d05978c5aebfea2ddb58b","sha512":"87aa993e3b1ab6d6e56c46ca103674372fbf5f1ff724633eabc1dea5c178f09ba85af06eb404c59bb4e4f9ca25f086bcacb768df81ba348c8efccea8e935e384","ssdeep":"","tlshash":"76f09e08f38cc9722661074e26ed8c0d22d0c9978dc0314d37fd120a0fdfbaa5ad465e","size":439,"data":"","first_seen":"2026-05-25T18:38:13.045507Z","last_seen":"2026-09-06T02:42:06.465299Z","times_seen":230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.8.3/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7657299ef4e0a3abdc478c0b9d7075aa","sha1":"25138af863e2ad69bb09af4e93009449f2e75ccb","sha256":"8e184485db8b6a8a741dd831f7bae84644eedf8f0c371172e69721e1236a7cd1","sha512":"eb5e7ae63fb48ea7b543f7339625284b3cc5477b6c8be03667714ebab1eb7c493a1445bae46348d992a4477a2080634c532b16c7b6ae4102e1524e51ab142b6b","ssdeep":"768:U+h03XVqC/iPIqXpwJxsyysdjx2nmY249lHGIw:UiPIsy/tWHG","tlshash":"c0f2f9aeb3646637abfd82a270e54403ae6f79444604043d78bc8ede1399dd171f6b38","size":34586,"data":"","first_seen":"2025-10-21T03:51:56.40324Z","last_seen":"2026-09-06T02:42:06.458256Z","times_seen":1887,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH\u0026co=aHR0cHM6Ly9leGl0b2RvcmliYXgtYXBwLmNvbTo0NDM.\u0026hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=3t9sbf9h8f5f","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"dca9d53787fff314e5bd1a123b28906a","sha1":"1350c858f60bbb03d1b53b05cbad6cea82ff29d1","sha256":"2475d902b4182bac667d464a44c89ee405e5cfd64156b30f811557cf2b347e2f","sha512":"4f123c356eec731b4f3653afdc258b385c8a0040ea14831893fa850c1275efe1fd49c51d4acb5f7541e01f2b9e46bbac0266e5893a6987b568f6aa2e0b0d492a","ssdeep":"","tlshash":"41a002f3187682224e93c660d963fb88d952515dfd4985cc60259e5ae7e29dbc010e90","size":75,"data":"","first_seen":"2023-03-07T01:15:59Z","last_seen":"2026-09-06T01:10:55.57056Z","times_seen":109979,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH\u0026co=aHR0cHM6Ly9leGl0b2RvcmliYXgtYXBwLmNvbTo0NDM.\u0026hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=3t9sbf9h8f5f","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"52abe84a6b1596551a839b2f0976f852","sha1":"0f006eda9b0e1149c600c9b868ba736ee39063fa","sha256":"92d758938ee7a6850b02885b9ff1f27016bfbf047b80fe6db09d5d911dce13be","sha512":"b81aef56c38f186df35bdf59455a20fe71db058e1bac0deb0de44016c9b88673d16b4bac13b7d872565fb6786d6104ea1142c0fbfb2e31a7e23ba414975ad575","ssdeep":"768:aCWLJjy2aURInxlN89Bhcl34K0j9ZkYnlnLkPZLd8vzrj3WzCENxWrwwolBiuF:aCWLZylxxlNahI4K0AYJwrkzrjG8IlBf","tlshash":"1cf29e1ce51a28bfcfae97b26bf573c8116d4196098e112d31ee14875a62c93f84b0e8","size":36224,"data":"","first_seen":"2026-09-05T19:14:41.137856Z","last_seen":"2026-09-05T19:14:41.137856Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.8.3/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"9bee4a74ffbbe72187a236bea356b2b2","sha1":"f59fed8371be6a1546f6ec8c3e86d45c835469e6","sha256":"b606e1dd5ec0876b3ad78b251b9cb83459d99e1dc4b660466383a0377a0a7fb8","sha512":"0fef840d5afb8ad8d0b9834bd52c14484c02539d74d1e611a5381a8da10cd0df66bed6b1bb2d65eb872a87708161e03f0e26ca0c66d9c2294f74bbe7216fffb4","ssdeep":"3072:9klM0tDKjFs3OwPss3MwP5y1APtA2x2MfMPihvi8EA4JhNyf4L9jo/QKWV+lumVu:9klMmDO11Ix2MfMPig7ou","tlshash":"a744f0ebd63c973ba1d87b35968eb3cd5a8cbca3c848567826c3b54f52784e0706c205","size":266273,"data":"","first_seen":"2025-10-21T03:51:56.414562Z","last_seen":"2026-09-06T02:42:06.460733Z","times_seen":849,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Noto+Color+Emoji\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exitodoribax-app.com/","date":"2026-09-05T19:13:44.255Z","timestamp":1788635624255,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Noto+Color+Emoji\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exitodoribax-app.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 05 Sep 2026 19:13:44 GMT\r\ndate: Sat, 05 Sep 2026 19:13:44 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8105,"size_decoded":2794,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1209)","md5":"5e5b7351a79c78358de8794a46b6bbf3","sha1":"fb4e1dab0fc1faac137b012fae2c50944e5b2219","sha256":"b49d06a03831ea14989c31fe1e15e76c929b5b67828ae546ca0c6d0c13098f1d","sha512":"18136bd3960a7970e7619bf2bb023cb6729aa6a94ef735e3eafae6beb5d9cffbb9113a507080ddd1b6424cad9fe046d262557b08d48d91058955e9dc841a8c91","ssdeep":"96:qOEadOEa7lgOEa4wSer9hWlJ+OEa50B8mH+MIlnOEaJAvUqH3BeOEaWVNCYOEaWa:NCNzr9OZiR+4rqX/WkvPrF7OK/","tlshash":"b0f1ee684816cb88f5933ca743df1e25f97d14807910c92f5afa7b53afca4a6858db0c","first_seen":"2026-08-10T23:02:04.998707Z","last_seen":"2026-09-06T02:42:06.461329Z","times_seen":109,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":34,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/enterprise.js?render=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exitodoribax-app.com/","date":"2026-09-05T19:13:44.264Z","timestamp":1788635624264,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"GET /recaptcha/enterprise.js?render=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exitodoribax-app.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Sat, 05 Sep 2026 19:13:44 GMT\r\ndate: Sat, 05 Sep 2026 19:13:44 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1159,"size_decoded":1354,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1159), with no line terminators","md5":"e42675e2728e70eaaa00d4ff30698aec","sha1":"a3999b4419e769a577f73bb4445cba7421fe095b","sha256":"1b0395e6ebb1dfd80e67d9c15e422e2045d1c48adea674725efa942b920b72b1","sha512":"bb72f39bd32615335e4fef3e79a9555e2492221184c32384981c72fcfd84d69552db3095345b3621c7334577309f11457b3b073186905755bc1d200c85e5ac5f","ssdeep":"","tlshash":"f42103b61759a07a0bb20da1e0fdc772e811701cb15c49dca547da861eaaccfce02695","first_seen":"2026-09-03T18:54:10.549295Z","last_seen":"2026-09-06T02:42:06.452049Z","times_seen":5,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":2,"connect":26,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.country.is/","fqdn":"api.country.is","domain":"country.is","tld":"is"},"ip":{"addr":"172.67.75.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exitodoribax-app.com/","date":"2026-09-05T19:13:44.493Z","timestamp":1788635624493,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"country.is","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 00:18:08 GMT","end":"Tue, 20 Oct 2026 01:17:54 GMT"},"fingerprint":{"sha1":"C8:95:B6:41:54:BF:CC:CB:F6:25:39:AC:AD:BB:8C:44:02:D7:AE:5F","sha256":"44:1F:B8:8A:5E:D7:23:CD:EA:13:42:96:1B:04:9F:C7:7D:C7:AB:7C:D5:D8:F8:31:AC:3A:DE:D1:D8:12:39:F8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.country.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exitodoribax-app.com/\r\nOrigin: https://exitodoribax-app.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 19:13:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 38\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hzDwy%2BgovNJH9EphNGPvIIm%2B0243fp6ho3Lr5eXCHscv6SYhCn%2FSdwxkUlA1pHfPhe399KEfkSSSMVjn3f2gtHtek8U6cAR7tdQLjMpwfgU9S78vClXVD00q%2FL0RRGzc\"}]}\r\netag: W/\"26-s87Asb/nOWeVJNZsRLZ5EgeHar0\"\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a3678d8d3bb68deb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38,"size_decoded":671,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"84ce7d452c22b1ff0ffc904e7ab8394f","sha1":"b3cec0b1bfe739679524d66c44b6791207876abd","sha256":"73029324a548df1d37ca51cc4e456e4925e9bb95cefab9e69892626377f64f40","sha512":"9871e27e557fd6f1deaeb8c3ce3d5638c659e1b6085c49e851501dc3300b1207d89eb1847fd0e32355132e7df50c4505b61e4d2601c78e13c9ef22c8d3012cb2","ssdeep":"","tlshash":"3580045500704f04d45043451445503040d7534113434d04c3c4333d4d401dc7000031","first_seen":"2025-12-20T16:42:41.64905Z","last_seen":"2026-09-06T02:42:06.450264Z","times_seen":512,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":34,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exitodoribax-app.com/styles/main.css","fqdn":"exitodoribax-app.com","domain":"exitodoribax-app.com","tld":"com"},"ip":{"addr":"91.236.116.210","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exitodoribax-app.com/","date":"2026-09-05T19:13:44.259Z","timestamp":1788635624259,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exitodoribax-app.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 16:22:52 GMT","end":"Tue, 03 Nov 2026 16:22:51 GMT"},"fingerprint":{"sha1":"48:A7:7E:FC:1C:8C:7F:18:94:E8:F5:9F:7F:C4:DA:D3:05:E3:99:77","sha256":"66:37:44:3D:3C:12:09:90:AF:81:3D:25:F1:69:F1:DF:FF:7D:5E:F8:98:45:AE:16:EC:E1:BD:93:6A:1D:0F:A7"}}},"request":{"raw":"GET /styles/main.css HTTP/1.1\r\nHost: exitodoribax-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exitodoribax-app.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=3600, stale-while-revalidate=2592000\r\nstrict-transport-security: max-age=31536000;\r\nx-content-type-options: nosniff\r\netag: \"dht39bszwy93e6w-zstd\"\r\ncontent-encoding: zstd\r\nx-frame-options: DENY\r\nvary: Accept-Encoding\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Tue, 14 Apr 2026 18:27:56 GMT\r\ndate: Sat, 05 Sep 2026 19:13:44 GMT\r\nserver: Caddy\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18392,"size_decoded":4736,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c109710ac51828fbc6ffde952edb40ca","sha1":"76110c1b3b8d60eeb8e2ecb3665b95594fac6659","sha256":"eb630ed0c372a40a587d4b1014c0faee736a072e03f98f9fa6027d4be2d69bee","sha512":"c30e9f847bca574f99bdeeac827a942c0599f4af64220ff5b155a1f5bbdaaf0ea29529a7e205df009e4daa795fff1305fac17afb14a1da1beca9df8313efd135","ssdeep":"192:yDf7LE0ko+BPqDjzAqfkUmppi48QUXhNSq36VQVdXyxRYTv46YNi7CUVQykBXySe:eaPmzHuAOMwDEx20Dqm","tlshash":"3e82436797a31945b00b846c2beba755332c4043860ede7d7f9e7348cf4a1e8d5a2b8d","first_seen":"2026-04-14T23:40:51.073598Z","last_seen":"2026-09-06T02:42:06.455387Z","times_seen":364,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"exitodoribax-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.8.3/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exitodoribax-app.com/","date":"2026-09-05T19:13:44.262Z","timestamp":1788635624262,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@25.8.3/build/js/intlTelInput.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exitodoribax-app.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 25.8.3\r\nx-jsd-version-type: version\r\netag: W/\"871a-JROK+GPirWm7Ca9OkwCUSfLnXMs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 1041642\r\ndate: Sat, 05 Sep 2026 19:13:44 GMT\r\nx-served-by: cache-fra-etou8220125-FRA, cache-bma-essb1270075-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 12976\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34586,"size_decoded":13771,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18251)","md5":"7657299ef4e0a3abdc478c0b9d7075aa","sha1":"25138af863e2ad69bb09af4e93009449f2e75ccb","sha256":"8e184485db8b6a8a741dd831f7bae84644eedf8f0c371172e69721e1236a7cd1","sha512":"eb5e7ae63fb48ea7b543f7339625284b3cc5477b6c8be03667714ebab1eb7c493a1445bae46348d992a4477a2080634c532b16c7b6ae4102e1524e51ab142b6b","ssdeep":"768:U+h03XVqC/iPIqXpwJxsyysdjx2nmY249lHGIw:UiPIsy/tWHG","tlshash":"c0f2f9aeb3646637abfd82a270e54403ae6f79444604043d78bc8ede1399dd171f6b38","first_seen":"2025-10-21T03:51:56.40324Z","last_seen":"2026-09-06T02:42:06.458256Z","times_seen":1887,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":10,"receive":1,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH\u0026co=aHR0cHM6Ly9leGl0b2RvcmliYXgtYXBwLmNvbTo0NDM.\u0026hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=3t9sbf9h8f5f","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://exitodoribax-app.com/","date":"2026-09-05T19:13:44.849Z","timestamp":1788635624849,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"GET /recaptcha/enterprise/anchor?ar=1\u0026k=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH\u0026co=aHR0cHM6Ly9leGl0b2RvcmliYXgtYXBwLmNvbTo0NDM.\u0026hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=3t9sbf9h8f5f HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exitodoribax-app.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 05 Sep 2026 19:13:44 GMT\r\ncontent-security-policy: script-src 'nonce-QL8SonupTqCbQP8VTRCj9w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54759,"size_decoded":29526,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (36230)","md5":"4d5e3c14167caecb83aba572f6b98d9b","sha1":"fce6f3609d20c767559fc1ee78a5ef25a8e9ccb2","sha256":"8a698750990c94628dea47c50bf9c0f94dea7a4a9abebdc2725ca0b46694bfb0","sha512":"220dbf40b9fcb23ec4dc480135c24cc1a2aea9841fb96f7c10d30bd22ed35979968e8dc2caafdd01be6b0d6a34670e48752a5988f3e34d0e9016d3cf201a47ac","ssdeep":"1536:y+kGPrCWLZylxxlNahI4K0AYJwrkzrjG8IlBe:y+kGQfNa+q6rEj8e","tlshash":"53338c1444071446cf9b8de223ee7b74fa1e8240314a5079b3fd1b5beed7c93a16a2ac","first_seen":"2026-09-05T19:14:41.120643Z","last_seen":"2026-09-05T19:14:41.120643Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.8.3/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exitodoribax-app.com/","date":"2026-09-05T19:13:45.275Z","timestamp":1788635625275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@25.8.3/build/js/utils.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://exitodoribax-app.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exitodoribax-app.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 62752\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 25.8.3\r\nx-jsd-version-type: version\r\netag: W/\"41021-9Z/tg3G+ahVG9uyMPobUXINUaeY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 1349481\r\ndate: Sat, 05 Sep 2026 19:13:45 GMT\r\nx-served-by: cache-fra-eddf8230107-FRA, cache-bma-essb1270041-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":266273,"size_decoded":63528,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1903)","md5":"9bee4a74ffbbe72187a236bea356b2b2","sha1":"f59fed8371be6a1546f6ec8c3e86d45c835469e6","sha256":"b606e1dd5ec0876b3ad78b251b9cb83459d99e1dc4b660466383a0377a0a7fb8","sha512":"0fef840d5afb8ad8d0b9834bd52c14484c02539d74d1e611a5381a8da10cd0df66bed6b1bb2d65eb872a87708161e03f0e26ca0c66d9c2294f74bbe7216fffb4","ssdeep":"3072:9klM0tDKjFs3OwPss3MwP5y1APtA2x2MfMPihvi8EA4JhNyf4L9jo/QKWV+lumVu:9klMmDO11Ix2MfMPig7ou","tlshash":"a744f0ebd63c973ba1d87b35968eb3cd5a8cbca3c848567826c3b54f52784e0706c205","first_seen":"2025-10-21T03:51:56.414562Z","last_seen":"2026-09-06T02:42:06.460733Z","times_seen":849,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exitodoribax-app.com/styles/uikit.min.css","fqdn":"exitodoribax-app.com","domain":"exitodoribax-app.com","tld":"com"},"ip":{"addr":"91.236.116.210","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exitodoribax-app.com/","date":"2026-09-05T19:13:44.257Z","timestamp":1788635624257,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exitodoribax-app.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 16:22:52 GMT","end":"Tue, 03 Nov 2026 16:22:51 GMT"},"fingerprint":{"sha1":"48:A7:7E:FC:1C:8C:7F:18:94:E8:F5:9F:7F:C4:DA:D3:05:E3:99:77","sha256":"66:37:44:3D:3C:12:09:90:AF:81:3D:25:F1:69:F1:DF:FF:7D:5E:F8:98:45:AE:16:EC:E1:BD:93:6A:1D:0F:A7"}}},"request":{"raw":"GET /styles/uikit.min.css HTTP/1.1\r\nHost: exitodoribax-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exitodoribax-app.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nstrict-transport-security: max-age=31536000;\r\nx-frame-options: DENY\r\nlast-modified: Sat, 04 Apr 2026 17:40:13 GMT\r\ndate: Sat, 05 Sep 2026 19:13:44 GMT\r\nserver: Caddy\r\ncache-control: public, max-age=3600, stale-while-revalidate=2592000\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\netag: \"dhkjzcki9ivggtw-zstd\"\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: zstd\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":21812,"size_decoded":4872,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (21810), with no line terminators","md5":"567a4fb6fbe8f44d9c063b797faa75fe","sha1":"da3b6560c912170fd4464c5fe75fcc3c44d0445c","sha256":"08fae18a093d29e7a1fb3ecff2268fbef7ed37be7a93168528357b579205cedd","sha512":"5fe76d61f3338d447e442178edfad11f4bda9198852aed0b13e364915c09ef383b1aac386979a19024791ebbe7e4c19b649a4c46757e7abf4f2289850a684d25","ssdeep":"384:D8Z2Rak8G3S6ixiXC8vZ/vu6cror9ACQgvm:4ZTk8GbixiXC8vZ/vu6cror9ACQgvm","tlshash":"eea23348a24478fecd33894b619472fceb995d12b3b61efbe6ae52824b426c70174918","first_seen":"2025-10-21T03:51:56.416779Z","last_seen":"2026-09-06T02:42:06.461924Z","times_seen":774,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"exitodoribax-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH\u0026co=aHR0cHM6Ly9leGl0b2RvcmliYXgtYXBwLmNvbTo0NDM.\u0026hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=3t9sbf9h8f5f","date":"2026-09-05T19:13:45.196Z","timestamp":1788635625196,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 10:12:28 GMT\r\nexpires: Sat, 04 Sep 2027 10:12:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 118877\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":40941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-09-06T02:02:31.052491Z","times_seen":984478,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notocoloremoji/v40/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exitodoribax-app.com/","date":"2026-09-05T19:13:44.422Z","timestamp":1788635624422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/notocoloremoji/v40/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://exitodoribax-app.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 709628\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:39:24 GMT\r\nexpires: Thu, 02 Sep 2027 10:39:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 290060\r\nlast-modified: Mon, 10 Aug 2026 16:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":709628,"size_decoded":710442,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 709628, version 1.0","md5":"aee3120deb6abe19c1351f372e23935b","sha1":"41aee579dc07516b547b7e59a0c241f346be8fdc","sha256":"1ea085e149cb9e5f1ac086f0580f7dc10d6cc06cb2e29caa8a7360064a7eadd6","sha512":"b671e3fd574c6849b1301da19d5946308cd8fcc99dab690b7779c6afa761f472a340dd5b69e41e42aa520a9d92719bfb8d71b5ad790066a82acbf6337a8add89","ssdeep":"12288:ssZLH3vHM8eicr0CNHwJsfXLsdEHp65/nfZ7N8tOJt86YjsSEEWKinOB:dZ3vUiqN1D45nPtudWKhB","tlshash":"c0e423746051170ae093ccae3c275c2e35e1ae517c0c3a3a65c57a5992acef370aee7d","first_seen":"2026-02-18T08:28:29.769217Z","last_seen":"2026-09-06T02:42:06.463016Z","times_seen":564,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":0,"dns":0,"connect":29,"send":0,"wait":17,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/enterprise/webworker.js?hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt","date":"2026-09-05T19:13:45.333Z","timestamp":1788635625333,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 352523\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 31 Aug 2026 17:27:07 GMT\r\nexpires: Tue, 31 Aug 2027 17:27:07 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 31 Aug 2026 04:01:33 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 438398\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":844493,"size_decoded":353410,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (746)","md5":"79e251d536cdd001a23818a648c6e5af","sha1":"27829f43c050bc8da3a45501d048feb67dc8d1b2","sha256":"25068be5bad4bf87c01c5bef4c33825addea39e12d99aa7b55b52288fd0631a6","sha512":"ed7b75e6ae6f0a98eaaec9ea2e454193c10c5844245565ab08b48aa5d381a8c9a733c601105496de3bf521959bc83f30353d82d5be2f1a88d0899d2e35f44347","ssdeep":"12288:x9jhlvbfgbTB4LEeebL3B51euHaZS10YE+:f7aFlbL3B51euHm+","tlshash":"1c052bddb49676b16332b5f910772109533d9815d88c086db1abd8f03ab084ea17befb","first_seen":"2026-09-01T09:18:25.8255Z","last_seen":"2026-09-06T02:09:34.868006Z","times_seen":2598,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exitodoribax-app.com/images/003.avif","fqdn":"exitodoribax-app.com","domain":"exitodoribax-app.com","tld":"com"},"ip":{"addr":"91.236.116.210","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exitodoribax-app.com/","date":"2026-09-05T19:13:44.273Z","timestamp":1788635624273,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exitodoribax-app.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 16:22:52 GMT","end":"Tue, 03 Nov 2026 16:22:51 GMT"},"fingerprint":{"sha1":"48:A7:7E:FC:1C:8C:7F:18:94:E8:F5:9F:7F:C4:DA:D3:05:E3:99:77","sha256":"66:37:44:3D:3C:12:09:90:AF:81:3D:25:F1:69:F1:DF:FF:7D:5E:F8:98:45:AE:16:EC:E1:BD:93:6A:1D:0F:A7"}}},"request":{"raw":"GET /images/003.avif HTTP/1.1\r\nHost: exitodoribax-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exitodoribax-app.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\netag: \"dhkjzcjz7n1gc02\"\r\ncontent-type: image/avif\r\nlast-modified: Sat, 04 Apr 2026 17:40:13 GMT\r\naccept-ranges: bytes\r\ndate: Sat, 05 Sep 2026 19:13:44 GMT\r\nserver: Caddy\r\nstrict-transport-security: max-age=31536000;\r\nx-frame-options: DENY\r\ncontent-length: 15554\r\ncache-control: public, max-age=2628000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15554,"size_decoded":15928,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"e6009bcbcd96356eb1a28a8af5c7db10","sha1":"7503dd022f2d2666be2ec20fc3701fa58284f079","sha256":"ddf95beaa3052a04d92b996fa5c3522af31cb9aef367a6d9af39e90f2026f035","sha512":"b49d94fa6ded572467743983f1a5637e93fdfa7d70b80eb5bf2a3e3b6341f0699b4cfa049c00269b2c57463a75cc223c3411eb2130b49ec796a3c5169d5f21d4","ssdeep":"384:PUO3if3cksNQl1Pc5oz7ile7XbUmHDNsiZvQff04:MO3u/salz7i6IIDNfZ27","tlshash":"b162c0f8e541a5ceee8ada3c1d19b616260c63641b3575b0390df72c8c96fe49d40ef8","first_seen":"2025-10-21T03:51:56.431567Z","last_seen":"2026-09-06T02:42:06.459428Z","times_seen":769,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"exitodoribax-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exitodoribax-app.com/images/shape-01.avif","fqdn":"exitodoribax-app.com","domain":"exitodoribax-app.com","tld":"com"},"ip":{"addr":"91.236.116.210","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exitodoribax-app.com/","date":"2026-09-05T19:13:44.275Z","timestamp":1788635624275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exitodoribax-app.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 16:22:52 GMT","end":"Tue, 03 Nov 2026 16:22:51 GMT"},"fingerprint":{"sha1":"48:A7:7E:FC:1C:8C:7F:18:94:E8:F5:9F:7F:C4:DA:D3:05:E3:99:77","sha256":"66:37:44:3D:3C:12:09:90:AF:81:3D:25:F1:69:F1:DF:FF:7D:5E:F8:98:45:AE:16:EC:E1:BD:93:6A:1D:0F:A7"}}},"request":{"raw":"GET /images/shape-01.avif HTTP/1.1\r\nHost: exitodoribax-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exitodoribax-app.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\netag: \"dhkjzck1ldipvp\"\r\ncontent-type: image/avif\r\nlast-modified: Sat, 04 Apr 2026 17:40:13 GMT\r\ncontent-length: 1141\r\ncache-control: public, max-age=2628000\r\nstrict-transport-security: max-age=31536000;\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\ndate: Sat, 05 Sep 2026 19:13:44 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1141,"size_decoded":1513,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"f24f37c43d59df4362d94af9b9f7b2f9","sha1":"517da8a13986b69429bd823f250914588864ea13","sha256":"918281d1e2e279a8867eb05690fdf8d6ea4551a68a5effa83a4bdf7af38090a5","sha512":"1d13b32b8902b5a01429844b155d32842b23b17d44a9b1e09c5fb8c2a3fc35b53cf71848ebe6185aa429bc828781ff08b981e2cc55f85916aa49709c0e00073e","ssdeep":"","tlshash":"ae21466533583d52d04e0bba5ebcd3017b61d3b897ef6455b9c17211a9151f1c951c18","first_seen":"2025-10-21T03:51:56.420259Z","last_seen":"2026-09-06T02:42:06.458787Z","times_seen":769,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"exitodoribax-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exitodoribax-app.com/images/background-5.avif","fqdn":"exitodoribax-app.com","domain":"exitodoribax-app.com","tld":"com"},"ip":{"addr":"91.236.116.210","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exitodoribax-app.com/","date":"2026-09-05T19:13:44.438Z","timestamp":1788635624438,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exitodoribax-app.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 16:22:52 GMT","end":"Tue, 03 Nov 2026 16:22:51 GMT"},"fingerprint":{"sha1":"48:A7:7E:FC:1C:8C:7F:18:94:E8:F5:9F:7F:C4:DA:D3:05:E3:99:77","sha256":"66:37:44:3D:3C:12:09:90:AF:81:3D:25:F1:69:F1:DF:FF:7D:5E:F8:98:45:AE:16:EC:E1:BD:93:6A:1D:0F:A7"}}},"request":{"raw":"GET /images/background-5.avif HTTP/1.1\r\nHost: exitodoribax-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exitodoribax-app.com/styles/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\netag: \"dhkjzck1ldipn85\"\r\ncontent-length: 30101\r\nserver: Caddy\r\ncache-control: public, max-age=2628000\r\nstrict-transport-security: max-age=31536000;\r\nx-content-type-options: nosniff\r\ncontent-type: image/avif\r\nlast-modified: Sat, 04 Apr 2026 17:40:13 GMT\r\naccept-ranges: bytes\r\ndate: Sat, 05 Sep 2026 19:13:44 GMT\r\nx-frame-options: DENY\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":30101,"size_decoded":30475,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"83c8d26271cb94d94c31432abf14fbee","sha1":"b3b2c8447940eda43c2423678e7334b6d89ff50a","sha256":"cef01082169630b2ff8bdafb0cc0fb41960295c754566e624770b6531a73378e","sha512":"236257382fa987eb37414af91bf59042309620f166795fe69a8b379b25feb7de7c5597f505ca12a295e8340e26728481588ead1583740f78adb00bf98ed1348f","ssdeep":"768:SC9i23D+riblDTIA3oFgywx8cTaCO+2KabcoGVtFCw+e2pZX:S6Dui9TIZZXcWCODAok/+bXX","tlshash":"07d2f11774e04a97cd707d3a93416d1c30a6c450baaca27f4c653feeb51d09968f2933","first_seen":"2025-10-21T03:51:56.400965Z","last_seen":"2026-09-06T02:42:06.462504Z","times_seen":769,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"exitodoribax-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exitodoribax-app.com/images/background-2.avif","fqdn":"exitodoribax-app.com","domain":"exitodoribax-app.com","tld":"com"},"ip":{"addr":"91.236.116.210","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exitodoribax-app.com/","date":"2026-09-05T19:13:44.440Z","timestamp":1788635624440,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exitodoribax-app.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 16:22:52 GMT","end":"Tue, 03 Nov 2026 16:22:51 GMT"},"fingerprint":{"sha1":"48:A7:7E:FC:1C:8C:7F:18:94:E8:F5:9F:7F:C4:DA:D3:05:E3:99:77","sha256":"66:37:44:3D:3C:12:09:90:AF:81:3D:25:F1:69:F1:DF:FF:7D:5E:F8:98:45:AE:16:EC:E1:BD:93:6A:1D:0F:A7"}}},"request":{"raw":"GET /images/background-2.avif HTTP/1.1\r\nHost: exitodoribax-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exitodoribax-app.com/styles/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 04 Apr 2026 17:40:13 GMT\r\ndate: Sat, 05 Sep 2026 19:13:44 GMT\r\nserver: Caddy\r\ncache-control: public, max-age=2628000\r\nstrict-transport-security: max-age=31536000;\r\nx-frame-options: DENY\r\netag: \"dhkjzcjz7n1gcl5\"\r\ncontent-type: image/avif\r\naccept-ranges: bytes\r\ncontent-length: 16313\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16313,"size_decoded":16687,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"3cfe8d0bff1f59eec36c84b6916d12c7","sha1":"58ea66f373562c323da76d5b916e3882b75182f1","sha256":"b700c328b344cba6adad8e162d56b3ec5bac81faff29d76e40cfd03f95372487","sha512":"8b31e7abb8c04791c2118f01435fd63310de7d6e70627c80e4b7152f9ba1ec881c3700af540cce7d2d84e16378dc5c51517f1afa85cc65a73834f4de18f024cb","ssdeep":"384:N1tO+4aXZGYUW/T9Q6w6K/Cmt4pwzY6RrODYTXu:NnPBtb9QcOCmt/kTDme","tlshash":"6672c0a33322d048e25171b617cfa2e97e7f4e3660fb1c64bd6a26c5ce8344e1f641a5","first_seen":"2025-10-21T03:51:56.446042Z","last_seen":"2026-09-06T02:42:06.454219Z","times_seen":769,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"exitodoribax-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH\u0026co=aHR0cHM6Ly9leGl0b2RvcmliYXgtYXBwLmNvbTo0NDM.\u0026hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=3t9sbf9h8f5f","date":"2026-09-05T19:13:45.182Z","timestamp":1788635625182,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Sep 2026 15:10:22 GMT\r\nexpires: Thu, 10 Sep 2026 15:10:22 GMT\r\ncache-control: public, max-age=604800\r\nage: 187403\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":3002,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-09-06T02:02:31.066883Z","times_seen":721492,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/enterprise/bframe?hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026k=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH\u0026bft=0dAFcWeA4DKJ3_nhcl0KbuMaZ1UdF6uhAC2lpQJn2Gm4EvfWs-HSzIxcukQZjFc0WeaXcJ9_eNABVHydjnpsOlR1gpAiS2rmBBtQ","date":"2026-09-05T19:13:45.869Z","timestamp":1788635625869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42354\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 31 Aug 2026 23:27:58 GMT\r\nexpires: Tue, 31 Aug 2027 23:27:58 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 31 Aug 2026 04:01:33 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 416747\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82980,"size_decoded":43201,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"cc6f30e40407f1871165fd2607e956db","sha1":"fce2064361e33a584c4b5899d3e96bd8213a320f","sha256":"a75325e8b8a5416d4e63d5905ccd8f6385f0352a1854fdffe1ab2d77dad95d10","sha512":"abf515657741cfac7c5acb3cfabd1aab0d40fdc9299528785745deee769e31bfa8b92718d0b05868d6da92663100c03b8a5e0e729dfa03cf266cdaab40f75cd4","ssdeep":"1536:iA7Rpgh9C9ToL9gTNfWNfK4RxHnHZzhXwWx7W1bx7:iA7ArC9ULiTYNC4Rz9Xi","tlshash":"4c838e7338513a1afc2b9b616196bdfdf11cc923e5515bfaa5497a20c3cb0a78223707","first_seen":"2026-09-01T09:18:25.804738Z","last_seen":"2026-09-06T02:09:34.882421Z","times_seen":2087,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exitodoribax-app.com/images/background-4.avif","fqdn":"exitodoribax-app.com","domain":"exitodoribax-app.com","tld":"com"},"ip":{"addr":"91.236.116.210","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exitodoribax-app.com/","date":"2026-09-05T19:13:44.368Z","timestamp":1788635624368,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exitodoribax-app.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 16:22:52 GMT","end":"Tue, 03 Nov 2026 16:22:51 GMT"},"fingerprint":{"sha1":"48:A7:7E:FC:1C:8C:7F:18:94:E8:F5:9F:7F:C4:DA:D3:05:E3:99:77","sha256":"66:37:44:3D:3C:12:09:90:AF:81:3D:25:F1:69:F1:DF:FF:7D:5E:F8:98:45:AE:16:EC:E1:BD:93:6A:1D:0F:A7"}}},"request":{"raw":"GET /images/background-4.avif HTTP/1.1\r\nHost: exitodoribax-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exitodoribax-app.com/styles/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: Caddy\r\nstrict-transport-security: max-age=31536000;\r\nx-frame-options: DENY\r\netag: \"dhkjzcjz7n1g1ah5\"\r\ncache-control: public, max-age=2628000\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncontent-type: image/avif\r\nlast-modified: Sat, 04 Apr 2026 17:40:13 GMT\r\naccept-ranges: bytes\r\ncontent-length: 60233\r\ndate: Sat, 05 Sep 2026 19:13:44 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":60233,"size_decoded":60608,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"cdb0ec10556444a17569d8e5d0e0ff96","sha1":"ce14f4961c02c1fa6ff750981e2d6e9176ce51e4","sha256":"8624f05152f3ce27b3c2a596d7c93bf39f1208b0246dff5b073b94f747cb95ae","sha512":"5ff6812dd4009f70e7eb631f8a32f9e68c0e07835503c5b4bb00cc81f001f204ca29c0f6aa59e0222dc3fd59125fa7baedf99512f557f0eb22a70d9f135a422f","ssdeep":"1536:UrA18Z6po8yFG1+2mSWd6xtxIOvUzWGVPQPDXi7jX:00a8RBBWMxECQiPDWL","tlshash":"7b4312babd302a7d6b978bafc57343051833d12bcc76fa7139d11ac0a091a928fd5b50","first_seen":"2025-10-21T03:51:56.44395Z","last_seen":"2026-09-06T02:42:06.453671Z","times_seen":769,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"exitodoribax-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exitodoribax-app.com/","date":"2026-09-05T19:13:44.377Z","timestamp":1788635624377,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://exitodoribax-app.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exitodoribax-app.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 352523\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 31 Aug 2026 17:27:07 GMT\r\nexpires: Tue, 31 Aug 2027 17:27:07 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 31 Aug 2026 04:01:33 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 438397\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":844493,"size_decoded":353430,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (746)","md5":"79e251d536cdd001a23818a648c6e5af","sha1":"27829f43c050bc8da3a45501d048feb67dc8d1b2","sha256":"25068be5bad4bf87c01c5bef4c33825addea39e12d99aa7b55b52288fd0631a6","sha512":"ed7b75e6ae6f0a98eaaec9ea2e454193c10c5844245565ab08b48aa5d381a8c9a733c601105496de3bf521959bc83f30353d82d5be2f1a88d0899d2e35f44347","ssdeep":"12288:x9jhlvbfgbTB4LEeebL3B51euHaZS10YE+:f7aFlbL3B51euHm+","tlshash":"1c052bddb49676b16332b5f910772109533d9815d88c086db1abd8f03ab084ea17befb","first_seen":"2026-09-01T09:18:25.8255Z","last_seen":"2026-09-06T02:09:34.868006Z","times_seen":2598,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":2,"connect":17,"send":0,"wait":17,"receive":68,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exitodoribax-app.com/images/shape-02.png","fqdn":"exitodoribax-app.com","domain":"exitodoribax-app.com","tld":"com"},"ip":{"addr":"91.236.116.210","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exitodoribax-app.com/","date":"2026-09-05T19:13:44.439Z","timestamp":1788635624439,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exitodoribax-app.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 16:22:52 GMT","end":"Tue, 03 Nov 2026 16:22:51 GMT"},"fingerprint":{"sha1":"48:A7:7E:FC:1C:8C:7F:18:94:E8:F5:9F:7F:C4:DA:D3:05:E3:99:77","sha256":"66:37:44:3D:3C:12:09:90:AF:81:3D:25:F1:69:F1:DF:FF:7D:5E:F8:98:45:AE:16:EC:E1:BD:93:6A:1D:0F:A7"}}},"request":{"raw":"GET /images/shape-02.png HTTP/1.1\r\nHost: exitodoribax-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exitodoribax-app.com/styles/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 276\r\nserver: Caddy\r\ncache-control: public, max-age=2628000\r\nx-frame-options: DENY\r\netag: \"dhkjzck1ldip7o\"\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\ndate: Sat, 05 Sep 2026 19:13:44 GMT\r\nstrict-transport-security: max-age=31536000;\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 04 Apr 2026 17:40:13 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":276,"size_decoded":646,"mime_type":"image/png","magic":"PNG image data, 259 x 259, 4-bit colormap, non-interlaced","md5":"9edc85636b3c04e8825e4d75ee49f4f9","sha1":"678f5cae7eefd779c38d0b5a062f6f3a88693df6","sha256":"6afacb29b13eafebc237920ce8200dea928978569a65a73600e8562c992d9971","sha512":"755986d69d69d5687ec0c38c0cbb309cb851a4e20ec75f8e731892a406b8fb94a0325f5d1312209e71e9c3c85eb83b25db5d72c9c03820c1c8b117a51132f3b8","ssdeep":"","tlshash":"6ad05ec9daf0faf519255a55f1218199986c03e8703f416e93cb84382e62789d7853a3","first_seen":"2025-10-21T03:51:56.422169Z","last_seen":"2026-09-06T02:42:06.449047Z","times_seen":791,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"exitodoribax-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.8.3/build/img/flags.webp","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exitodoribax-app.com/","date":"2026-09-05T19:13:44.491Z","timestamp":1788635624491,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@25.8.3/build/img/flags.webp HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exitodoribax-app.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 28186\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/webp\r\nx-jsd-version: 25.8.3\r\nx-jsd-version-type: version\r\netag: W/\"6e1a-JHPdY1y9Ow2NjbjaGyegi0Qmya4\"\r\naccept-ranges: bytes\r\nage: 1911499\r\ndate: Sat, 05 Sep 2026 19:13:44 GMT\r\nx-served-by: cache-fra-etou8220162-FRA, cache-bma-essb1270041-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28186,"size_decoded":28912,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4af30d041d95c5a83b016ec6812cda19","sha1":"2473dd635cbd3b0d8d8db8da1b27a08b4426c9ae","sha256":"0e2a53ec4d77d08efa8e8f5fc86b1c25e8f2af39d6b44334e1219ed3e0687a61","sha512":"a43b49d0a8830608a8351b1fe3afc5d468664ad79b674583f6e8f1c647fd5270181e9b1d35cbbbddc0285dc15b49e9d53f34a8bd414d32ae3ad6d659168e095e","ssdeep":"384:NmynJhMcWfubAG0nXDutFs4CIwMB7Po+NKC5NPQic7vmUbx2Kh4du2r0mRo3d0:NmynJhMze5CD+3PZ7AEZPyx2KhSRj","tlshash":"66c2e133be32a6c76d998ab018364ffa97354446bdd359c3a1f6ba98dd374c3294020d","first_seen":"2025-03-06T15:46:52.721855Z","last_seen":"2026-09-06T02:42:06.455959Z","times_seen":3541,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exitodoribax-app.com/","fqdn":"exitodoribax-app.com","domain":"exitodoribax-app.com","tld":"com"},"ip":{"addr":"91.236.116.210","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-05T19:13:43.863Z","timestamp":1788635623863,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exitodoribax-app.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 16:22:52 GMT","end":"Tue, 03 Nov 2026 16:22:51 GMT"},"fingerprint":{"sha1":"48:A7:7E:FC:1C:8C:7F:18:94:E8:F5:9F:7F:C4:DA:D3:05:E3:99:77","sha256":"66:37:44:3D:3C:12:09:90:AF:81:3D:25:F1:69:F1:DF:FF:7D:5E:F8:98:45:AE:16:EC:E1:BD:93:6A:1D:0F:A7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: exitodoribax-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: zstd\r\ncontent-type: text/html; charset=UTF-8\r\nstrict-transport-security: max-age=31536000;\r\nvary: Accept-Encoding\r\nvia: 0.0 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ndate: Sat, 05 Sep 2026 19:13:43 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"UIKit","description":"UIKit is the framework used for developing iOS applications.","website":"https://getuikit.com","common_platform_enumeration":"","icon":"UIKit.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]}],"data":{"size":71378,"size_decoded":16214,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1708)","md5":"a528f9c851d6dc94e0762b9926339aee","sha1":"68a9cf9d198233a0329ca158c22f99092f4c9893","sha256":"f0b36477a6f19c5aaed084fb3e2e2c807c633a3ca7f68a807119f57748981db9","sha512":"848852ab9b738929b291a9136b8bf550dddd7e73edafa6dd6ba9882285f6f8c2c81d3cf122bfe43f7fe8f1fe113f6d2b0e6668570adf72b80ba341c34b709000","ssdeep":"768:h3C0wvknbw+fHjVDEliclYQidVGIn9hUQ2KumI:h3C6w+fHBDEliclYBdP9hUQ2KumI","tlshash":"f263d625e2f1253a025306c53bd7260bbfa98147e7468454baac47f80fdbc9dca3369d","first_seen":"2026-09-05T19:14:41.130163Z","last_seen":"2026-09-05T19:14:41.130163Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":12,"connect":9,"send":0,"wait":15,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"exitodoribax-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exitodoribax-app.com/images/cropped-Favicon-32x32.png","fqdn":"exitodoribax-app.com","domain":"exitodoribax-app.com","tld":"com"},"ip":{"addr":"91.236.116.210","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exitodoribax-app.com/","date":"2026-09-05T19:13:44.565Z","timestamp":1788635624565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exitodoribax-app.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 16:22:52 GMT","end":"Tue, 03 Nov 2026 16:22:51 GMT"},"fingerprint":{"sha1":"48:A7:7E:FC:1C:8C:7F:18:94:E8:F5:9F:7F:C4:DA:D3:05:E3:99:77","sha256":"66:37:44:3D:3C:12:09:90:AF:81:3D:25:F1:69:F1:DF:FF:7D:5E:F8:98:45:AE:16:EC:E1:BD:93:6A:1D:0F:A7"}}},"request":{"raw":"GET /images/cropped-Favicon-32x32.png HTTP/1.1\r\nHost: exitodoribax-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exitodoribax-app.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nserver: Caddy\r\ncache-control: public, max-age=2628000\r\nvary: Accept-Encoding\r\ncontent-type: image/png\r\ncontent-length: 609\r\ndate: Sat, 05 Sep 2026 19:13:44 GMT\r\nstrict-transport-security: max-age=31536000;\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\netag: \"dhkjzck1ldipgx\"\r\nlast-modified: Sat, 04 Apr 2026 17:40:13 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":609,"size_decoded":979,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"f17b2d52496a7b6283c91478bcb1d51f","sha1":"c497b97a94a45f2de7310d4722a10c6c54abfacc","sha256":"06a0640bb63a5e1ffb8e6204b8bc4b267997a6a5c0834d2e54cdc5cfe5c2d3c2","sha512":"22a93460f5dae42f5005a67ce62f2f46ab640c060b14a07819a84cc3bba6bb8a12a7cffbbe751a4f24fe32e27144739c7f4bd310d5513776d462f3d0637a08eb","ssdeep":"","tlshash":"3df062dd15d0280942e6e6f2db4f0467f887ffa102ca105cc1a07ce9f1868a174fab05","first_seen":"2025-03-03T22:55:46.45545Z","last_seen":"2026-09-06T02:42:06.456547Z","times_seen":3674,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"exitodoribax-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH\u0026co=aHR0cHM6Ly9leGl0b2RvcmliYXgtYXBwLmNvbTo0NDM.\u0026hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=3t9sbf9h8f5f","date":"2026-09-05T19:13:44.930Z","timestamp":1788635624930,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 352523\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 31 Aug 2026 17:27:07 GMT\r\nexpires: Tue, 31 Aug 2027 17:27:07 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 31 Aug 2026 04:01:33 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 438397\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":844493,"size_decoded":353410,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (746)","md5":"79e251d536cdd001a23818a648c6e5af","sha1":"27829f43c050bc8da3a45501d048feb67dc8d1b2","sha256":"25068be5bad4bf87c01c5bef4c33825addea39e12d99aa7b55b52288fd0631a6","sha512":"ed7b75e6ae6f0a98eaaec9ea2e454193c10c5844245565ab08b48aa5d381a8c9a733c601105496de3bf521959bc83f30353d82d5be2f1a88d0899d2e35f44347","ssdeep":"12288:x9jhlvbfgbTB4LEeebL3B51euHaZS10YE+:f7aFlbL3B51euHm+","tlshash":"1c052bddb49676b16332b5f910772109533d9815d88c086db1abd8f03ab084ea17befb","first_seen":"2026-09-01T09:18:25.8255Z","last_seen":"2026-09-06T02:09:34.868006Z","times_seen":2598,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/enterprise/bframe?hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026k=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH\u0026bft=0dAFcWeA4DKJ3_nhcl0KbuMaZ1UdF6uhAC2lpQJn2Gm4EvfWs-HSzIxcukQZjFc0WeaXcJ9_eNABVHydjnpsOlR1gpAiS2rmBBtQ","date":"2026-09-05T19:13:45.871Z","timestamp":1788635625871,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 352523\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 31 Aug 2026 17:27:07 GMT\r\nexpires: Tue, 31 Aug 2027 17:27:07 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 31 Aug 2026 04:01:33 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 438398\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":844493,"size_decoded":353410,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (746)","md5":"79e251d536cdd001a23818a648c6e5af","sha1":"27829f43c050bc8da3a45501d048feb67dc8d1b2","sha256":"25068be5bad4bf87c01c5bef4c33825addea39e12d99aa7b55b52288fd0631a6","sha512":"ed7b75e6ae6f0a98eaaec9ea2e454193c10c5844245565ab08b48aa5d381a8c9a733c601105496de3bf521959bc83f30353d82d5be2f1a88d0899d2e35f44347","ssdeep":"12288:x9jhlvbfgbTB4LEeebL3B51euHaZS10YE+:f7aFlbL3B51euHm+","tlshash":"1c052bddb49676b16332b5f910772109533d9815d88c086db1abd8f03ab084ea17befb","first_seen":"2026-09-01T09:18:25.8255Z","last_seen":"2026-09-06T02:09:34.868006Z","times_seen":2598,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exitodoribax-app.com/form/intltelinput.min.css","fqdn":"exitodoribax-app.com","domain":"exitodoribax-app.com","tld":"com"},"ip":{"addr":"91.236.116.210","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exitodoribax-app.com/","date":"2026-09-05T19:13:44.261Z","timestamp":1788635624261,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exitodoribax-app.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 16:22:52 GMT","end":"Tue, 03 Nov 2026 16:22:51 GMT"},"fingerprint":{"sha1":"48:A7:7E:FC:1C:8C:7F:18:94:E8:F5:9F:7F:C4:DA:D3:05:E3:99:77","sha256":"66:37:44:3D:3C:12:09:90:AF:81:3D:25:F1:69:F1:DF:FF:7D:5E:F8:98:45:AE:16:EC:E1:BD:93:6A:1D:0F:A7"}}},"request":{"raw":"GET /form/intltelinput.min.css HTTP/1.1\r\nHost: exitodoribax-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exitodoribax-app.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nstrict-transport-security: max-age=31536000;\r\nx-frame-options: DENY\r\nvary: Accept-Encoding\r\netag: \"dhkjzcjz7n1gbge-zstd\"\r\ndate: Sat, 05 Sep 2026 19:13:44 GMT\r\nserver: Caddy\r\nx-content-type-options: nosniff\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Sat, 04 Apr 2026 17:40:13 GMT\r\ncontent-encoding: zstd\r\ncontent-length: 2971\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":14846,"size_decoded":3324,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (14846), with no line terminators","md5":"3c71b12a16f4136cc71d73c73ea7eec3","sha1":"9bb9bc6a029e3e780e12ddd4b602f7665bab5d58","sha256":"c5f324d37d9ea6edfeba4eef39996051d09da795b1bba26959294b0f663bb437","sha512":"3e3acfe52d04776e028b4a05796c901e8ff23e512c90535e041e255def900f597dd32d6f0faca3ca5e4a3af723b799763affda683fbe85b86829a43d13a4e0a2","ssdeep":"192:eRbLgqLmLdLiqE4P5fnX/zScObOFhs+bpmTYCM9oRZJiEnJWoCdsPyj9KKaM:eNaBD/xvgbOEM73","tlshash":"046284030318913ee716d1397172d5bc3bbfbb4174d7cad1e6c8822f988799089aba59","first_seen":"2025-10-21T03:51:56.428574Z","last_seen":"2026-09-06T02:42:06.451426Z","times_seen":772,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"exitodoribax-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"exitodoribax-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH\u0026co=aHR0cHM6Ly9leGl0b2RvcmliYXgtYXBwLmNvbTo0NDM.\u0026hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=3t9sbf9h8f5f","date":"2026-09-05T19:13:44.928Z","timestamp":1788635624928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42354\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 31 Aug 2026 23:27:58 GMT\r\nexpires: Tue, 31 Aug 2027 23:27:58 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 31 Aug 2026 04:01:33 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 416746\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82980,"size_decoded":43201,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"cc6f30e40407f1871165fd2607e956db","sha1":"fce2064361e33a584c4b5899d3e96bd8213a320f","sha256":"a75325e8b8a5416d4e63d5905ccd8f6385f0352a1854fdffe1ab2d77dad95d10","sha512":"abf515657741cfac7c5acb3cfabd1aab0d40fdc9299528785745deee769e31bfa8b92718d0b05868d6da92663100c03b8a5e0e729dfa03cf266cdaab40f75cd4","ssdeep":"1536:iA7Rpgh9C9ToL9gTNfWNfK4RxHnHZzhXwWx7W1bx7:iA7ArC9ULiTYNC4Rz9Xi","tlshash":"4c838e7338513a1afc2b9b616196bdfdf11cc923e5515bfaa5497a20c3cb0a78223707","first_seen":"2026-09-01T09:18:25.804738Z","last_seen":"2026-09-06T02:09:34.882421Z","times_seen":2087,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH\u0026co=aHR0cHM6Ly9leGl0b2RvcmliYXgtYXBwLmNvbTo0NDM.\u0026hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=3t9sbf9h8f5f","date":"2026-09-05T19:13:45.197Z","timestamp":1788635625197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 10:12:28 GMT\r\nexpires: Sat, 04 Sep 2027 10:12:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 118877\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":40941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-09-06T02:02:31.052491Z","times_seen":984478,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/enterprise/webworker.js?hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH\u0026co=aHR0cHM6Ly9leGl0b2RvcmliYXgtYXBwLmNvbTo0NDM.\u0026hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=3t9sbf9h8f5f","date":"2026-09-05T19:13:45.296Z","timestamp":1788635625296,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"GET /recaptcha/enterprise/webworker.js?hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH\u0026co=aHR0cHM6Ly9leGl0b2RvcmliYXgtYXBwLmNvbTo0NDM.\u0026hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=3t9sbf9h8f5f\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Sat, 05 Sep 2026 19:13:45 GMT\r\ndate: Sat, 05 Sep 2026 19:13:45 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":954,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"8a4926c35e1da2fd820be78def3ef558","sha1":"598caf385688df918ed770bf52f30e4be0a9c8df","sha256":"33b7926ea401f1fffa38686dfa9896ab5c6b788508e1da41342f1e5c84d251e8","sha512":"38241bb0a8dfbf631c1c67e33940496dec530e5048407a25444d4bc628aab4f9c253eacbe6d3ea0cce7eeaed4bd7ed0078cdd6fd2caf72e14ded39b37428293d","ssdeep":"","tlshash":"73b012232520c8180c010703c86bd3f8e1019028e66090f0c4ad0fdd4530863d011500","first_seen":"2026-09-01T09:18:25.80804Z","last_seen":"2026-09-06T02:09:34.86847Z","times_seen":1877,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/enterprise/bframe?hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026k=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH\u0026bft=0dAFcWeA4DKJ3_nhcl0KbuMaZ1UdF6uhAC2lpQJn2Gm4EvfWs-HSzIxcukQZjFc0WeaXcJ9_eNABVHydjnpsOlR1gpAiS2rmBBtQ","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://exitodoribax-app.com/","date":"2026-09-05T19:13:45.828Z","timestamp":1788635625828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"GET /recaptcha/enterprise/bframe?hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026k=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH\u0026bft=0dAFcWeA4DKJ3_nhcl0KbuMaZ1UdF6uhAC2lpQJn2Gm4EvfWs-HSzIxcukQZjFc0WeaXcJ9_eNABVHydjnpsOlR1gpAiS2rmBBtQ HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exitodoribax-app.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 05 Sep 2026 19:13:45 GMT\r\ncontent-security-policy: script-src 'nonce-EuH4Wli6GLalBH3mJluD1w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17044,"size_decoded":3287,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1572)","md5":"ea9c720aee2d6f309c8cc3f21a476f58","sha1":"e851cff9b130244298b98ab93939c4542d2ad524","sha256":"17d72b3076e7c677351b902a2e8d2a59c2b89d2cdceb58cc7e98cfef1347abe1","sha512":"54254b8e107c8123ca321aebdaeba70369972c2191d4a9ec396a5585701f9f765cb14a804f77ea171cc9571fe5aeb2bee9a86925cf61e4adb115a77ec1c8d759","ssdeep":"384:EjfZjYjnjbjyEj/qY4WjgjAjzjfCjPjwjkjy7j/qY49jXj3j/jfmjDjUjAjyXj/x:EFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+2","tlshash":"29720e50041744009b835ce223ce7f30fe4e92517242d0b1abfd9b6beedbda6926939d","first_seen":"2026-09-05T19:14:41.133503Z","last_seen":"2026-09-05T19:14:41.133503Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}