{"report_id":"6ca9ddae-8800-496b-b22e-40b8c241bdc5","version":6,"status":"done","tags":[],"date":"2025-08-29T08:01:50Z","url":{"schema":"http","addr":"exoduswixe.cfd","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"final":{"url":{"schema":"https","addr":"exoduswixe.cfd/","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"title":"ExodusWixe | Home"},"submit":{"url":{"schema":"http","addr":"exoduswixe.cfd","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-03T08:01:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-08-27T15:11:05.791298Z","alert_count":0,"request_count":5,"received_data":231310,"sent_data":2855,"comment":"","tags":null,"fingerprints":null},{"fqdn":"node-ya-2.jivosite.com","ip":{"addr":"158.160.45.40","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":869812,"first_seen":"2023-01-17T17:11:06Z","last_seen":"2025-08-27T02:19:12.041705Z","alert_count":0,"request_count":2,"received_data":1448,"sent_data":981,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-08-27T15:14:26.687687Z","alert_count":0,"request_count":1,"received_data":33609,"sent_data":535,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"vi-ya-2.jivosite.com","ip":{"addr":"130.193.38.59","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":1543013,"first_seen":"2022-10-11T08:04:14Z","last_seen":"2025-08-28T14:21:14.847011Z","alert_count":0,"request_count":1,"received_data":200,"sent_data":585,"comment":"","tags":null,"fingerprints":null},{"fqdn":"telemetry.jivosite.com","ip":{"addr":"94.139.253.159","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":346139,"first_seen":"2015-07-15T08:41:42Z","last_seen":"2025-08-23T12:44:52.118465Z","alert_count":0,"request_count":1,"received_data":111,"sent_data":461,"comment":"","tags":null,"fingerprints":null},{"fqdn":"files.jivosite.com","ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":900178,"first_seen":"2014-01-17T11:07:42Z","last_seen":"2025-08-28T17:26:18.00849Z","alert_count":0,"request_count":1,"received_data":12527,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"code.jivosite.com","ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":232952,"first_seen":"2012-07-22T02:03:39Z","last_seen":"2025-08-27T05:52:40.499383Z","alert_count":0,"request_count":12,"received_data":1849772,"sent_data":5548,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"exoduswixe.cfd","ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":62,"received_data":6976738,"sent_data":73813,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"jQuery:3.6.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/js/swiper-bundle.min.js","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"31f6d85f687bd563b365886fdd14c6d7","sha1":"3d10fb34a02205d6fa427ddfab5895e34853855c","sha256":"fc88096bfcd4a0f5764157ff6a9b447ad3555f130d61ca62b4268796ba7adc6b","sha512":"5d1fd43c089433aa05c8ac12de4d7be4d5aa8d664cb5e388516f23a27dcdf046ef5689ba0d3cb64cafa78b3752e5d083bb2d6b31b3a33114683e27356261dd2b","ssdeep":"1536:1IJmfG2cF8NkHfG/9+OzdolxU8GBkizrACWi6vtnV4U9ampFIzba7r5J7ifuANqi:CJiNeiMGBk90U9FpFIzO/5JeWABh","tlshash":"4cd308896220b57646e356db93e4c261a3b50540b80ac8f470bd4c9f597ec9813feffa","size":135969,"data":"","first_seen":"2025-05-05T11:12:30.402452Z","last_seen":"2026-06-12T13:03:21.590039Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/c775408/chatcontainer.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"121a81b58b2fe1381353fa74b29bf37f","sha1":"f2399f81e037e43870ebacaec05ea70ea24fcd25","sha256":"78b55aa83342da20d2ca142f652c4ea9022890e8380bc3b89293c4ecab701ac6","sha512":"d721284ab22598591d4619d222da3d8340aed2a41f977c273a0241e854ef2674d7a1ea9eb7930b89b5ea653b5351c81ba38ee6cee1dc3f9587ee9dda93ff9a22","ssdeep":"3072:ifHy9dHe/o7gMv/dDYfOLxIQ3i49XgXDeRoOw3Odayf81+9FP:4y9hHdDYfMxIQn9Dw3Odae8k9FP","tlshash":"6c542ac472d0f8a942e741da947f2101f2292c2df409b958f3f8dcd9ab5598e2266f3d","size":298448,"data":"","first_seen":"2025-08-20T19:14:17.38903Z","last_seen":"2025-09-01T11:30:14.326201Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"eb7eec267ef2577c7c70fa6ca9a2d6fb","sha1":"bd8dfae7a2c6d57c4bb0539303e58a4b78d885a6","sha256":"5c9a2ceecd9f53aae6b1f9218a955cd99fc866e7e6ae11708b26354081bfee4a","sha512":"93f95636fcf628ba2e953757b5a6ca502a06232868ce8141bcb8514e276c003570b172079dfadf7a0c183bd9e90de5ae43d07c39a89a4c5b08cc718930149385","ssdeep":"","tlshash":"1bf09e3b36877f1214a2d0b9035ea400032e21a75045f919bb8e07884f6411e59f8fda","size":575,"data":"","first_seen":"2025-05-05T11:12:30.438688Z","last_seen":"2026-04-04T09:15:14.250538Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/js/parallax-scroll.js","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb5ac2eaf845ad54acf8a04b4e2365fe","sha1":"6efe644b858c2f6fca10425fa736ab7cde2a965a","sha256":"8177305204a6ee458688396a7bd4855fa54cc20808a8bb09311398a72e946565","sha512":"00d9ca18b6074dc0a68a85b55fc4014cafc72d991571f4bf23141bc07b3fad60d43a0e6f0a090a94d35c8e0b28f8055cc305f5fe42e92b8d7bdc49ece03d0567","ssdeep":"384:k/wxTUBDVOkiVNyHg2mPX+xvx2R8m3Yftxm5ih:k/wQDVOkiVNyHg2S+xvc33OxN","tlshash":"3b627348e502152a91b77339cfae079ef77a662741128026be5c868a1fb093453e4ffd","size":15355,"data":"","first_seen":"2025-05-05T11:12:30.415756Z","last_seen":"2026-08-09T21:38:00.022947Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/js/slick.min.js","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"777da4aaf5b960636dec0fd4e50ba489","sha1":"9a94038ccae90e6d2a0f9cb61f79ae7c70320287","sha256":"e1a52c0a06fa9f65e015b02e7ec463fd621211a9d2ae44b6660597900e927fbb","sha512":"9b810776ff98b94fe765b192187064d2ce4921fb60baf4c797c3302d332f7e55556e54eb070cc8917f61aa74191539a294457aa18d54f5e85527652695c6f848","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYK:EPrYdlNixEePiYK","tlshash":"6213a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","size":42864,"data":"","first_seen":"2023-03-07T01:06:24Z","last_seen":"2026-08-11T23:26:53.541646Z","times_seen":14889,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/js/select2.min.js","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"6261aaed8d3c438b7cd60241462bb6b2","sha1":"c61d3ddf3aca8c24d0cbc10458d5a2177d2e62a7","sha256":"6bb9759501fa8c53c40288058344ca38b1e8aec830575aa543b63bd0afcd61f8","sha512":"d3f2a632763d292ee4ef426bc4b9f85484023a936f52d59381c8396eb077efe9d317f7097c2b696d1dc1db14502b8a48c805b17a0c4c6357c6d656a0c355c235","ssdeep":"1536:0ZoMrztEsa7loyQYTdqQ3RdOpbCo73pcdOIRb8EMc5g3PywNaQec5AY7:0mWEh2yQYTdXnOpbf73pcUIRb8EMcq3x","tlshash":"28838515f3e33b37825f70e26c9f9c4c7234593c51865948661cc9e8987c828a7beead","size":83309,"data":"","first_seen":"2024-10-04T10:44:16.250189Z","last_seen":"2026-08-09T21:38:00.087942Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/js/nouislider.min.js","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c81c26999ceb485d4f9204b6ac2e83b","sha1":"472923517f13c3037e48935ef87e000920d78aee","sha256":"995d5e01bd25ecc38eab3aa72df6ebcabdc6959b693ea1a4901c2a18ca6e36a6","sha512":"50e25ee29695ea16160674b473d1a72111fc3cb9b69c52b6dae85f02fb1322a777bb09d6b15ae2d4e3e7e5f25874bb46637c01d752c61c9e323d4d5614978161","ssdeep":"768:iE4Zj4wv5Uyweawt2LBtke6swBxT0tN8bUHKKO0qSLeZW7jgSz63k0qm1GVfUPJD:Hrwv5wzjg/U622","tlshash":"08c20880b25438360a633071902fe60ea1337750b94a89b5e675d5d23c78e6c5affe7d","size":27118,"data":"","first_seen":"2023-04-05T01:40:37Z","last_seen":"2026-08-11T18:33:35.097998Z","times_seen":2007,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/js/main.js","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"817da95d9f09f3433244d7f0b09f5b0c","sha1":"fb004990b4d174c13cc614c8e6721dd91447f0e5","sha256":"c4948256b85dbdebde01e5ba1ef4f20463e3ad0cda670a532943b0b074746891","sha512":"2c81d1e231970b6952fa1f452e0a97ca8176aa070d62a10c4b14a3af9fbf37baa097c5d78779ffd179dc60c7edac999024845f47420334a99c2e4b79b20921f7","ssdeep":"192:+JgsCExW/+eLS9R4RnQimivZhiJimnHiWip5+iJiyroP2P1yfUQJZYiridLYiril:+GsCE3eLK4RnQimivZhiJimnHiWip5+x","tlshash":"3b323e1f701606314d7b73b7aae6a348fb71102f6842c6027c6c4ad4af74996a3b1fd9","size":11206,"data":"","first_seen":"2025-05-05T11:12:30.437216Z","last_seen":"2026-01-27T11:29:18.331461Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/feqGZTqMd4","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb67ace13289d0a81d036d9fef5831a5","sha1":"899370b37be05ac62acc0eaea3be85094ac53de0","sha256":"f86b7ffc0af355910158533d9fbf988232bd7656e53450579a53ffffe6d029c8","sha512":"050d81dd86043d98d3974bd5ddb63c8aa6bab6464ea5ca7045d77b01fdbc383d0780736a98e86f87e4000012de4a406749c741ddfd0d29719e1c6a01ff6a42b7","ssdeep":"384:boUJJkQymrml40+rANbl0q09TmF0q6QlEeJBz8U08waxceb4:6lviAfJMKv8UDxceb4","tlshash":"04822b6e7959b93743b208b5a16f6209b33549ebd404c920a405e94c7db8edf813fef8","size":18073,"data":"","first_seen":"2025-08-20T12:20:50.31739Z","last_seen":"2026-01-03T17:18:00.984344Z","times_seen":187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/global/js/axios.min.js","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"30e194541bcdd371e8fadf5961d4bee5","sha1":"6238205fa0564bd8a25b90fb66233990e46c8d70","sha256":"ea52c2604519304144d7267cf90f912ee6b092b2c5505576948568fe653dcac0","sha512":"07d7a69d6ceff3c199874a2295be37e1c9c8593aad4c969929de6867b1f56b6528f51a7ad85d33e3617c5ed4bd3e00b211aaa3d3b8d3c8756d3c7a6068755520","ssdeep":"384:vtuDoBdyteApZXfgHH7MsMRrVkkaFW4Um6kxTF6T9eeiu:w0kvRrVwWQ6k5F6T9e5u","tlshash":"625295ceb4a1b09747e720f0809f4a0fb2ba552a644dc4a0fa60e8f66c7552d8733f5d","size":14357,"data":"","first_seen":"2023-03-07T01:10:40Z","last_seen":"2026-08-10T09:19:40.621289Z","times_seen":726,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"b47079d97c7a4348a359163015755fe4","sha1":"2193f7f950175252e7a8e9a157432eff2c9d1972","sha256":"923b0a771830686f7c5fc2fea0de4806caa80c09ed72653fa87e2198d2cd8672","sha512":"d7c856147ad443b7b2403fb112f979d183895d06474a058780145ae89aae21d86ee56baa78cc23d1fce9ef81d2d74bc3629071fdc1e35fbdd2bbce7137b2b5df","ssdeep":"","tlshash":"fee02bde3ca5204746e730a986cf640a3012600718086e047d4c82604f3de3c2573b6c","size":326,"data":"","first_seen":"2025-08-29T08:02:00.853966Z","last_seen":"2025-08-29T08:02:00.853966Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"53c4985992e1c328f24c55dba63d3d71","sha1":"0c829eab370a1be2f6a988a7fbb2863d3746f9a3","sha256":"9a25ccad2aea270fde5087d0dd3ceb701f7bb506e9b13d6bbcd0f7d372b5fbee","sha512":"76dbf4a2ed231f691978c139c1b24599de0bb6da8f84585e2995634f7bb397cb731e3d8446052e8c768876601793b7b15218b06e4fcb3f0beeb2b2bd0ecba657","ssdeep":"","tlshash":"5af0e9048d5b1e128173c8efaa42a812b5ca940f9234f305737f93b44fd0b282127af5","size":532,"data":"","first_seen":"2025-05-05T11:12:30.444069Z","last_seen":"2026-04-22T09:22:36.183627Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"e161e1ea1bd4ab5573174b8e99af5cd0","sha1":"0e52870820c79a796e4dbf874c6dcce25cc62ec0","sha256":"f5d641bc17e7bbf332d6c0fe4dacd2eb388c2e6fa75d0a0ac5a1f6ee4b3b9ab0","sha512":"f9b188abe82594b875def325a8b4689271645568ae85ce4adb69a05ee627b87d4918043d241aa7716709ca1daadc243b428f0bea7796786e7de542a8b1383d9f","ssdeep":"24576:UZc+CRaJl09dqNykgy00HpesgCHv+Ks67veMFqxJOuz6CEzlS1m:OcT9UNykgy00HpxgA06LeMkxJOuz6tzZ","tlshash":"0d455bd571d1f4a907e355e9943f2005f23a2c2a7409e064fabcdcc6aa6658e6237f3c","size":1178168,"data":"","first_seen":"2025-08-20T15:19:29.200734Z","last_seen":"2025-09-01T11:30:14.355622Z","times_seen":171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle.js?rand=1755692275","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"36ed3928d4677835a0fa15a5fa268db8","sha1":"c56d62cb1533751eb3e4b837f84f13c29bbf9b0a","sha256":"adce61b05fe4330bed9178b616ff95b5703b15c3157fe7a0cd4e22659f55d911","sha512":"5593b617acde340647b90a0bc5579a7ce673a6121003eb4fbc30c2fc44127eb28b2d689f0cb54c90f1722454d4cdfad1fb58a49611feb7038d13f39dff55f122","ssdeep":"24576:BVSwS96xbB0ljHeY8yuWoBm+QsVduhEyuD1eb4d5oVIUfWuAbP36IHEdbDORs:zSG0lj+Y8yuWoB7QaQFu5eb4d5ouUfWy","tlshash":"58454ac5b1d1f06502d355e6a43b2009f23a2c5e3809b064f7bccddbea6659e6263f39","size":1204814,"data":"","first_seen":"2025-08-20T15:19:29.169219Z","last_seen":"2025-09-01T11:30:14.351016Z","times_seen":166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/c775408/locale-en-US-json.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c212727a7bacb453945e1ab7025234a","sha1":"5ff39073a6077374bb26f1f31b2428b7c0c8bb6f","sha256":"b8f45519424c6fcd31acb1d568c259fcb7297e38246ab98529e31d5d1490dde4","sha512":"8226cbb571eb34c684a6ae6b13056a7b968eb12371a25ea0a05861265b4019b0ec1170d0a2dd4a42495765a2b9e7e6a3c65aa8e86b93ba2920af050de25a058b","ssdeep":"192:2P7mk/7Obf14M6bOIpUTPqZ8Bi9FLeRJK:C7H7ObdFkOIphZ8w9FC7K","tlshash":"fd22d71ee7017f360fa613c3744f7b53b6a480e592646cb5d88c826953b9bca721778c","size":10507,"data":"","first_seen":"2025-08-07T16:51:42.115213Z","last_seen":"2025-10-09T00:19:26.491677Z","times_seen":878,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"246f04af399f4f985842ad1363eb880d","sha1":"68894a32401e5c57636d27f3a0c65472808a8fd6","sha256":"342a92561ed1f07142b557e83ab3cf1b3bcdcd7808eb588157b1d75a2a00d2f6","sha512":"91de21592ef65c29707a2d1d1bff713bab38da653d2fa87ad83e38908a16b9806fbb874a5040eb14cea802b6d2e6786aeb2d05e34aa8c68e4343eaae0e9a0b5f","ssdeep":"96:VcYahszBwNjScfMNWXabaXt6ufMNWqNq6f6P5HRRCafV46:VIhszBwNj5M0XabaXt1M0qNq2IxzC8L","tlshash":"1522f33435e3267281b371606bf794053a3bb6af1403ce88799c8de02fd9a54d8dae59","size":10329,"data":"","first_seen":"2025-08-29T08:02:00.862347Z","last_seen":"2025-08-29T08:02:00.862347Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/js/jquery-3.6.1.min.js","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f1950538c6051b90dae76087bc65424","sha1":"f88af5a8061ad3170d0a7155636e798797ef9656","sha256":"24c7030c50c1045cfefddac2d403f4bb2043b34183f6887f5c88a3e12e0236f9","sha512":"dc52b97ac0efccd9bce32718d84a8573153688329455405411d52fc0b5d3dbbaaf9e038b57921bad43115d151994123948739b329ab4713d0e60b26a67efcf85","ssdeep":"1536:RjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvv:RdeIygP3fulzcsz8jlvaDioQ47GKK","tlshash":"9593f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","size":89666,"data":"","first_seen":"2023-03-09T23:12:28Z","last_seen":"2026-08-09T09:06:05.682151Z","times_seen":850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/js/bootstrap.bundle.min.js","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc757df9e9699ab0a588ec67a711b75a","sha1":"bb4d5c07ede00143624addae0736aa3a55d879ec","sha256":"17f1006a38edde3e8b1d4444596e3b990ec9fc6f27f4362f8426de051443e07c","sha512":"9f1ada7d84ba2075ce202691e19bf1312380b64fa99ce58f2b3b2304e1ed5996ca89fdec7f2488b84b7d74c01b380dddbeeaad30026bd66fc10d83d028e45cee","ssdeep":"1536:azlMTGR2t4n+3ifBHJR9WbUHk3j8YY+PwRM3CjcI4BqQM6k+:Y4Fj8GPwRM3CAI4BtB","tlshash":"7f73c6593254b4770ade45b68037420bf2265d98b24b802cb5bcadde2a7dc863277f7c","size":80502,"data":"","first_seen":"2023-03-08T14:35:31Z","last_seen":"2026-08-05T14:54:51.228621Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/global/js/notiflix-aio-3.2.6.min.js","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f221d28a789bdfaa8759bffd65aefc75","sha1":"d066fbc8b969e6f3dad42818d6a330f72cac0872","sha256":"f951e926f9d31da66e7971cb72c61c657f42d641c62aaf77b0f3142fcdd5bac3","sha512":"6558b24857388109656d5341bdfc83e239b39b3b9d863535f18004f6bc2b3da03997fc9505385f3a70e97fff647368b58781acf607490a60eec831b6d3ee29c8","ssdeep":"768:hpax78NlFR8wFwmPUDkhath0W+9BfmDkRAl6faqEinATJDv5c4MZEwXmmaHz8pT6:HTL8eUDknRAl6fmRc4MQU74U2S8E7CJv","tlshash":"9693faeb6181011c82574be32bce5508763ab8d6a5120cde73b85c2a87d67cd67e372f","size":91016,"data":"","first_seen":"2025-05-05T11:12:30.391592Z","last_seen":"2026-08-09T21:38:00.018216Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/js/owl.carousel.min.js","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"47c357c05cb99cedbac2874840319818","sha1":"d8b05365de4b760618328fdeef7672e8374978e4","sha256":"4e0781bdd2cbb5db04da3b5e059eeca34e325fabb893bee7457b5babf5b7c029","sha512":"960b76113c78220acc1c87e437c6698fbf1066b8cf7b15a6d4d33f31ab69d8e16bd9823c07ce1897db4d0bdfe08b39e5c7085b79a7a8ef80760e87d9aa789e2e","ssdeep":"768:RCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSNc7UuHjRUQuFBt33:AITMFC4dbMVRSNcgRDV","tlshash":"39137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","size":44348,"data":"","first_seen":"2023-03-07T01:06:30Z","last_seen":"2026-08-10T23:37:47.726714Z","times_seen":13979,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"eddcdabe942e1f77248215c97ff76fe8","sha1":"958e9ad77dba58c104887329dd78cd83945a50ff","sha256":"07f643ac8d879f84a1ace46a009bea26ac344427727533d884a7aeb5df689799","sha512":"13eb2be8d60ecc2ecd5a42e551640cbe04acc37b34b00feb817dddf1854ce9165d4e59c8553765f61071da71945bbb6093dd939ab3829efd2f2b5747c2734992","ssdeep":"24576:Whc+CRaJl09dqNykgy00HpesgCHv+Ks67veGliRJD9zGCXzlS1w:scT9UNykgy00HpxgA06LeGcRJD9zGozV","tlshash":"f0455bd572d1f4a907e355e9943f2005f23a2c2a7409e064fabcccc66a6658e6277f3c","size":1176360,"data":"","first_seen":"2025-08-20T15:19:29.230159Z","last_seen":"2025-09-01T11:30:14.356681Z","times_seen":161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"code.jivosite.com/widget/feqGZTqMd4","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/feqGZTqMd4 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6197\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: br\r\netag: \"68a5820a-1835\"\r\nexpires: Fri, 29 Aug 2025 10:01:28 GMT\r\nlast-modified: Wed, 20 Aug 2025 08:06:34 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: MISS\r\nx-node: m9-up-gc98\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18073,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18073), with no line terminators","md5":"bb67ace13289d0a81d036d9fef5831a5","sha1":"899370b37be05ac62acc0eaea3be85094ac53de0","sha256":"f86b7ffc0af355910158533d9fbf988232bd7656e53450579a53ffffe6d029c8","sha512":"050d81dd86043d98d3974bd5ddb63c8aa6bab6464ea5ca7045d77b01fdbc383d0780736a98e86f87e4000012de4a406749c741ddfd0d29719e1c6a01ff6a42b7","ssdeep":"384:boUJJkQymrml40+rANbl0q09TmF0q6QlEeJBz8U08waxceb4:6lviAfJMKv8UDxceb4","tlshash":"04822b6e7959b93743b208b5a16f6209b33549ebd404c920a405e94c7db8edf813fef8","first_seen":"2025-08-20T12:20:50.31739Z","last_seen":"2026-01-03T17:18:00.984344Z","times_seen":187,"resource_available":true,"data":null}},"time_used":2519,"timings":{"blocked":1158,"dns":60,"connect":58,"send":0,"wait":130,"receive":1,"ssl":1109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/script/widget/config/feqGZTqMd4","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:28.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /script/widget/config/feqGZTqMd4 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://exoduswixe.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:28 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 1201\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: gzip\r\nexpires: Fri, 29 Aug 2025 10:01:28 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: MISS\r\nx-node: m9p-up-gc89\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3028,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JSON text data","md5":"ca829663dbc5493c2abb623b5b0dd812","sha1":"3d736a1707729f1f974b7dc9ab389e32ddb4b871","sha256":"0883b53e5354601a922e3c22668c95aecacb6e899b3824aec83281a684c0925b","sha512":"278d515d47759008d5d17e50e458d59452ddbd13ef362963d902d553cca3e65c921cea5c695a010378b49a1ce53931226c24d96466382114a5065b931d57210d","ssdeep":"","tlshash":"565162321c891cb7168bfb83b18bbd4350785757ab804e71da6dcd3c3a47690131ba5b","first_seen":"2025-08-29T08:02:00.74952Z","last_seen":"2025-08-29T08:02:00.74952Z","times_seen":1,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":141,"dns":1,"connect":67,"send":0,"wait":324,"receive":1,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/css/style.css","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/themes/light/css/style.css HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 20 Nov 2024 20:52:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"673e4bfc-1b8fc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":112892,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"7dd287806c40b0238fce0e4e6cb35b7c","sha1":"77d36a2b04de5064c10fc94cdb095ed522f44c43","sha256":"546418187862bc43bda81f3cd6ce76fc107ee52a7a857dd27f7ebce6741c36f6","sha512":"fbb12881b6f76eb4596d6d26234b5f1728ebbc4ba6414227f62c9574a03ed2a7b7fa9011be03940c98f49c6bd1c6cf443402906cfb5a6c590c318b35cf09adee","ssdeep":"768:1pyzIPHWM0KXI6DxKRFG/mVXfx/pW9W4OhDl:1pFP2M0KXI6DxKRFG/aXfx/ppDl","tlshash":"0ab37148ed1221672237eb786bf54659fb9450638f0206a97bed21494ff42bc026efcd","first_seen":"2025-05-05T11:12:30.356716Z","last_seen":"2026-01-27T11:29:18.301876Z","times_seen":4,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/upload/contents/CmIOR5kYAznCIVDqUrM4P6XCBJ1JOP.avif","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/upload/contents/CmIOR5kYAznCIVDqUrM4P6XCBJ1JOP.avif HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 16391\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\netag: \"673a1a6a-4007\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16391,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"71c9a154a5057f8ff549a65c92f31e22","sha1":"6edead103b2070d3eeba117a5859d1ac18e763e1","sha256":"3795f1e931cf91926548932945b9a63bf579d62ca966bdc2aaa2f81940b6dcb1","sha512":"0bea95d7dead8f5f3da1fda67f9cd835640769fdd1f051c5a28e5bfdca5dc1503604ee23d610671ec10b8b7d682ae1c96795b9fbfddf3173ff5f8d23be7c6762","ssdeep":"384:hAjSjrniJAdh18LY4yyCDtl18q3oBbEV2n6iO/:ujSjuuD4lCBr8q4BbEQ6iO/","tlshash":"8b72d0b81383a82cd86f97b45c0fbbb2478df7c69934298f2c14a5188c7ad06d891d97","first_seen":"2025-05-05T11:12:30.382706Z","last_seen":"2025-11-21T07:23:40.824112Z","times_seen":4,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/upload/contents/SaeGLG8UTrOJLPimXebt5psvGkTXhZ.avif","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/upload/contents/SaeGLG8UTrOJLPimXebt5psvGkTXhZ.avif HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 84463\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\netag: \"673a1a6a-149ef\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":84463,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"ce5ee01349020dd22e816808c1032a15","sha1":"faa5c8bca7b10ea0f7da9895d38c0a9d044f40f7","sha256":"055e970fddb652fe6bc745c1f309f9c36aeddd0372c91358b09b09adb9dc227a","sha512":"ac26b5706936d7b6e7631b4f5127d6c319768eead9e51e1685874019b56d13e2a97d8d1dcd9751d76de1167576fea18d6d9199cb40d91934c347fd837408813f","ssdeep":"1536:YQXdatocXju4QI/92b/GqSt6p1UJmxzAF1z1Qr/04WEqILQAGThw18S+04:YQ+ocXS4/4beKp10mxzAFHQ70RmLMhYi","tlshash":"6b83023f8add6f969c9c4ef60e21493392553a6649fb972d080b3c8d913a8ce45b12b4","first_seen":"2025-05-05T11:12:30.394098Z","last_seen":"2025-11-21T07:23:40.845268Z","times_seen":4,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":169,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/upload/logo/cmHn4TworTnUhircCoRd4UlXozdZGW.webp","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/upload/logo/cmHn4TworTnUhircCoRd4UlXozdZGW.webp HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5384\r\nlast-modified: Sat, 16 Aug 2025 16:50:36 GMT\r\netag: \"68a0b6dc-1508\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5384,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"67f0e7903434ddb08d5ce88fed648463","sha1":"4c14ab28f0634a7e899d52028c3db8599bc0b83a","sha256":"02a0e191a3c4aff7e76a0493bac4f8068d75f66cc66e34dccaa4313c6a60483b","sha512":"2a53676727b543bf2bcd53401947fba06c6630feb8b025dcccb7ec075f0e99272c63c7ae0580cee185af558eade7c314b39f35269609f0cdab46ba45ea935bc6","ssdeep":"96:FSP3AkN6AqzChM5kioa8ybNjIiESsh/2QBQvkRF7d0pQOfmzCjal5otBN+9:FSPAk8Aqz1ki7jINgA7d0pQCECWqC","tlshash":"04b19fe3bb45754d1aed57a2627acc2c915ec8b70297521cd5cddf13ceb80c195d088c","first_seen":"2025-08-29T08:02:00.755769Z","last_seen":"2025-08-29T08:02:00.755769Z","times_seen":1,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":142,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/images/emoji/1f44b.svg","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:41.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /images/emoji/1f44b.svg HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:41 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1618\r\ncache-control: max-age=864000\r\netag: \"68a58209-652\"\r\nexpires: Wed, 03 Sep 2025 01:22:33 GMT\r\nlast-modified: Wed, 20 Aug 2025 08:06:33 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-08-24T01:22:33+00:00\r\nx-node: m9-up-gc11\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1618,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"df7ba0f4020ca70048a0226d1dfa73f6","sha1":"416968aebe0a4a2405100efa809350ca000668ad","sha256":"1c8231e24838de4ad2d966d5cb48563a2a6e540a15848d337fa3c466d0730775","sha512":"e68d3d5ec28f34d1181758ead8c670d88377d2e53d0ab86a59771a98f3a06b89d84347db2a2ae44b987c6bb934b198a35a82fcb876b329c16dd5f4457aa651ed","ssdeep":"","tlshash":"0a3144c23fb4e17804eed3d18f1ad5396a2a906993730ae0843d5b495047987f057ba0","first_seen":"2023-04-06T20:35:31Z","last_seen":"2026-08-11T22:11:54.745136Z","times_seen":5106,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/css/bootstrap.min.css","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:26.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/themes/light/css/bootstrap.min.css HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"673a1a6a-2f95b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":194907,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65300), with CRLF line terminators","md5":"7cccebd297829600c878f0c6b45ff7ec","sha1":"23b14ee7d38f64aac342f05edf0c0b06291b4070","sha256":"63b089b699b098830fef1e23c18e2413393d0715b5ce2a5f4823753ac2739e8d","sha512":"cef570cb050670abcc10b9407f7df28ac6333b57ffdbea79f8cfd84f83fc02b9f449f2bd2e88f085053a48e352fddfedede3961437058401f10ef263bca7c5ca","ssdeep":"1536:1tGg9JfWgeQK5wlP72qgOfI3N9LsqkVkpz600I4l8:1tGg9JfWD9kVkpz600I4l8","tlshash":"331482d6f190307d98a7c2499591fefd866fa585d7120aaaf0137b6807ca7c30963ecc","first_seen":"2023-05-22T18:47:47Z","last_seen":"2026-08-03T04:31:50.616656Z","times_seen":72,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/upload/coinAnnounce/KUWDtctzLCEsP9etbmK9pKJgPPEBUB.webp","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/upload/coinAnnounce/KUWDtctzLCEsP9etbmK9pKJgPPEBUB.webp HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6592\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\netag: \"673a1a6a-19c0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6592,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5441379251fe7354120d9d32cd520dde","sha1":"9fe4ce13177e704921ed8ac4c07f02554df0456b","sha256":"5c6abe1eb545f7a1ec249749510d812e44916230cb7d557097968e86cc68a727","sha512":"0bc662605a63900b17721b6e5c3feb707fb6c15d56f1a1a0dc4656a433458a9a2eef2f9b86ef900196872c99b83a1439f295564453f1c16218a290b791d34a20","ssdeep":"192:Euj/JyvTs6+rmuGZBIJ90uLk4QrPlz/SE:EuD8vY6smuG3ITMPJSE","tlshash":"12d18e2cb172433b1fcaedd5b78426735a8e0b08437907544e7265ca5997052f73673c","first_seen":"2025-05-05T11:12:30.418441Z","last_seen":"2026-04-22T09:22:36.112713Z","times_seen":7,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/upload/contents/faq-img.png","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/upload/contents/faq-img.png HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 2429762\r\nlast-modified: Wed, 20 Nov 2024 20:04:30 GMT\r\netag: \"673e40ce-251342\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2429762,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2262 x 2379, 8-bit/color RGBA, non-interlaced","md5":"f48a7526f2380c82d9f61fc1eabd3ce1","sha1":"25466f9a2761ed7d89a7b1d2d4f3a7e2fb37e7c8","sha256":"fa781eb9383eb859614f1ce2eec45d4a8673fd9cb32409609e99c6cd8102560a","sha512":"567a19c3c36093b90eec793f4a1851bfd90ab2e175ced327a55919dba7d0fc71d352138b52ecda16c3ed1e64c2cac5ee70e0e62179016ab2b6562e0831abdf60","ssdeep":"24576:01FKlsuBCzjVElqcgxRa+V8f+HmzyZ1MsLT:01bUWjzcgNMs","tlshash":"552523fce5fadc9b27c7d8344b600afb9e47e017e5e21818d8b6aa8df901d12515809f","first_seen":"2025-08-29T08:02:00.761924Z","last_seen":"2026-04-04T09:15:14.229252Z","times_seen":4,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":458,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/upload/cryptoCurrency/ABsfPZSwzeIFajExNrR5y20KjmFEMZ.webp","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:28.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/upload/cryptoCurrency/ABsfPZSwzeIFajExNrR5y20KjmFEMZ.webp HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6IktSZ3JibTJXa0pkZG0wRDdGQnBudnc9PSIsInZhbHVlIjoidjRsZ0ZXeE4yTmNBWkozUVNjd241OVN4K0pHVmliYkR3dFR0QWxFcHdjVFJpLy94MHh4T2IzWXc5YUdoVFhMQTYrYTlLQjAxd2dUNkh2NWQrWXd6VGJjWUFxalVQUWN0U0NCRTJkMVI1aW01akxvRU1oN0JwZSs2TDhha0FYaVciLCJtYWMiOiIxNjZiOTAwOWRlZGVhYjM1ZDhhZTdhYTIxOGIzYzRkYjgyZDAwZmRjYjBiYWFhYTkzYTUxYTY2MTA0Y2EzZWFkIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6IlF3ZG5tbDVmNTk4Szl6TEhqR3ZIRmc9PSIsInZhbHVlIjoiWTFVa2FHUHpnSUVpVnVTVVJ2SjJUNC9LU1NLcmRmUEVKSXdKUG4yQU9jeUI1YVhWRnF5ZnNQYnJyMHdvM2NOZHA4Q2p6bkRiMFpDaHRsODYyck15YlpwY0MzcVhCWk1DbDNwbUNKejkrLzBKLzVSZmFWemdNeWJ2U29HMndUemciLCJtYWMiOiI4YTA4ZmY4MzE3MTVmNTdhYzkxM2M0ZjhkZjVhMDJkNWMxMTdlYzI4OTEyZDI2ZDIzZjRjNmQzNjRiOWIxMWM5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1114\r\nlast-modified: Sat, 16 Aug 2025 21:07:28 GMT\r\netag: \"68a0f310-45a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1114,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9428eebc1cadd227c4ce7b4a9dfa7107","sha1":"c31b9c2020a3f65ea5c3602b669ce8d7f2cf22e2","sha256":"105179822e7b1ccc80e30194dff20db5894a1d21a0b127a19eaf5d2b75aa3cca","sha512":"e67b14036a39f6a264fd13cd1b6a380883b108d0eae6334a16fa333295129deb58db59c534caeaf1bf83debb236060b6a1cff00d65f7d4f0d9fd4f07f7267daa","ssdeep":"","tlshash":"d421961132b084b2ed859c39f1b79f8ae9c594a918556491c87d6dd1086930013ea93f","first_seen":"2025-08-29T08:02:00.763719Z","last_seen":"2025-08-29T08:02:00.763719Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/img/coin/coin-3.png","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/themes/light/img/coin/coin-3.png HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 47404\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\netag: \"673a1a6a-b92c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47404,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 236 x 244, 8-bit/color RGBA, non-interlaced","md5":"2e9ced6f0585bd4b0bb3859919771b2f","sha1":"38666ff8411b3ef9e76b0c0dd210293df85624a2","sha256":"0917aa16b8dc62d219c5840192abe64713bec68c101173d054d028adb09322cc","sha512":"f803e4feac82e5ca5b99d74550d165b0ea79ece3bbca40c778bd155d1491331412d0734f37f6802b5b02774a18dd5fd2b8dcdf16bef0c381a9f3ce0c3b6516d6","ssdeep":"768:5cqBCAhrT1P3NJVKOZICt3pgdgRghbUwVCewKZDhz6rijy88tpg2dERGVfAR2S:5fBjXJ3NHb5gegzQyhIie88sgm4IR/","tlshash":"d523f15965edc887b73df13a5ec5e136336ae3ca23e0c9092ca054c6a539c17c685792","first_seen":"2025-05-05T11:12:30.358099Z","last_seen":"2026-04-04T09:15:14.240867Z","times_seen":7,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/js/bootstrap.bundle.min.js","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/themes/light/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"673a1a6a-13a76\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80502,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65294), with CRLF line terminators","md5":"dc757df9e9699ab0a588ec67a711b75a","sha1":"bb4d5c07ede00143624addae0736aa3a55d879ec","sha256":"17f1006a38edde3e8b1d4444596e3b990ec9fc6f27f4362f8426de051443e07c","sha512":"9f1ada7d84ba2075ce202691e19bf1312380b64fa99ce58f2b3b2304e1ed5996ca89fdec7f2488b84b7d74c01b380dddbeeaad30026bd66fc10d83d028e45cee","ssdeep":"1536:azlMTGR2t4n+3ifBHJR9WbUHk3j8YY+PwRM3CjcI4BqQM6k+:Y4Fj8GPwRM3CAI4BtB","tlshash":"7f73c6593254b4770ade45b68037420bf2265d98b24b802cb5bcadde2a7dc863277f7c","first_seen":"2023-03-08T14:35:31Z","last_seen":"2026-08-05T14:54:51.228621Z","times_seen":124,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/img/accordion/minus.png","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/themes/light/img/accordion/minus.png HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/assets/themes/light/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 399\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\netag: \"673a1a6a-18f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":399,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 16-bit gray+alpha, non-interlaced","md5":"9b4f2cb9a7ff5f5c8521fb04454d7e8e","sha1":"d4603de7feb891cc09814df790df951a984d2be3","sha256":"21d3095547d3b6d0a874bc7880246d6fdae822c8ed89129818b0acdc368541a8","sha512":"801eb1e5b0f92889679ec456e3a79dbe360b508f6a4680df45853cdcb57e3346f8fd00a264b979be43bad85aa6c45b9ab5c3530bc95c776968fa9e8a9b7647b5","ssdeep":"","tlshash":"ede061c1d1f5da7dc60b3b46031a1981fca2060f0da30635f579d7198928fda2afdb81","first_seen":"2025-05-05T11:12:30.403964Z","last_seen":"2026-08-01T15:29:21.491565Z","times_seen":13,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/img/background/bg-dark.png","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/themes/light/img/background/bg-dark.png HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/assets/themes/light/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 286793\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\netag: \"673a1a6a-46049\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":286793,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1440 x 850, 8-bit/color RGBA, non-interlaced","md5":"5d2705f631cb6e41f4feeccfc04bcce0","sha1":"5eb8d8ba59c37d9f12286ddb6486d24993521b1c","sha256":"fdbc2cbbc3fcd00d4fcd44e3823e1dc72948010ccdc001b6a9962727b4488b27","sha512":"b0bfb5058a037803adab4b6f9b2c8e81ccf529f9e809508aa9a229e536ab612fb66b3567c59bbcce4a5365d4d4f80c7f2bf9daf524d3a7532e0ef15998108e82","ssdeep":"6144:Zy57AlUM+TNi0jh8ZpaOgGtJ8YK/qTPvdceDvQzo9BTHseT:Zy+mMOi0jEHJR5V8cZ","tlshash":"be542389182944efc7cea4b5a81dac2f132c5a68fd181e4b087381c71736f2e762df59","first_seen":"2025-05-05T11:12:30.38792Z","last_seen":"2026-04-22T09:22:36.12644Z","times_seen":7,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/c775408/chatcontainer.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:40.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /js/c775408/chatcontainer.js HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:40 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 71828\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"68a5820a-11894\"\r\nlast-modified: Wed, 20 Aug 2025 08:06:34 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-08-28T12:24:27+00:00\r\nx-node: m9-up-gc82\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":298448,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"121a81b58b2fe1381353fa74b29bf37f","sha1":"f2399f81e037e43870ebacaec05ea70ea24fcd25","sha256":"78b55aa83342da20d2ca142f652c4ea9022890e8380bc3b89293c4ecab701ac6","sha512":"d721284ab22598591d4619d222da3d8340aed2a41f977c273a0241e854ef2674d7a1ea9eb7930b89b5ea653b5351c81ba38ee6cee1dc3f9587ee9dda93ff9a22","ssdeep":"3072:ifHy9dHe/o7gMv/dDYfOLxIQ3i49XgXDeRoOw3Odayf81+9FP:4y9hHdDYfMxIQn9Dw3Odae8k9FP","tlshash":"6c542ac472d0f8a942e741da947f2101f2292c2df409b958f3f8dcd9ab5598e2266f3d","first_seen":"2025-08-20T19:14:17.38903Z","last_seen":"2025-09-01T11:30:14.326201Z","times_seen":83,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/upload/contents/dot-2.png","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/upload/contents/dot-2.png HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 435\r\nlast-modified: Wed, 20 Nov 2024 18:11:38 GMT\r\netag: \"673e265a-1b3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":435,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 122, 8-bit/color RGBA, non-interlaced","md5":"266aad2d5410145639da652f4c02c595","sha1":"b4a6761912d38be65c90b652c7730ea2df42d298","sha256":"acd3369965cbd51ceb11a5f0518d5c34a6ddd2b4abd4a5b2b6564208bccf59e7","sha512":"99d6fab96c127488250b8745165c3772e8ade3a6e338e54fbe5b339618d15223bdc4309cfa912a43161722976069af25c63bf3eab2753b3c4fe7d8a8e8e888f3","ssdeep":"","tlshash":"4de0a3c352950d6b461f4cfe815379143c86219a1d01353cdb3cc92e6d575b436d1a42","first_seen":"2025-05-05T11:12:30.411501Z","last_seen":"2026-04-04T09:15:14.175444Z","times_seen":5,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/upload/contents/question-mark.png","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/upload/contents/question-mark.png HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 5325\r\nlast-modified: Wed, 20 Nov 2024 20:12:38 GMT\r\netag: \"673e42b6-14cd\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5325,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"203a0328c604765d69974e836ee81134","sha1":"adcfbc3b159ea3a0bd4b749dc8cd19efb319abcd","sha256":"2e399df2981eac8c733c42f4e4e5edea259dbb9b403447455fe57f502d6162ae","sha512":"b88eac8d90e5196cf78bcc61588dce3975da521889d5962f750d39df7d490c233784219720ad67a0434a731f03344340261f06706bea8cf59097b8617aedea49","ssdeep":"96:YPWtNPzoOQaNc2EIIHXMqK88q9QM1L6BOU6etKFtZBbN0G0LyIcPZgivmkE2V/Yh:ky45X53MoqM1L8F6etKFtZBbuG0y3Rgf","tlshash":"fcb18dc35580650aadad72d13da41288dece40ab00ad26d7c1f0b2d52abb8ed569d62f","first_seen":"2025-05-05T11:12:30.432633Z","last_seen":"2026-04-22T09:22:36.068943Z","times_seen":7,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/css/slick-theme.css","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:26.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/themes/light/css/slick-theme.css HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"673a1a6a-cad\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3245,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"51c992e64595403c6ad516f6156cbe92","sha1":"6dd9865ffc347da5951a023b3111ef1d65198697","sha256":"1fcea7f5e592c32f02c762f55405537c0daef3de1185da2e068972c746bb430a","sha512":"2fd8182965f3a171eca2d69c7f8c767b72793957741968051b2b8eb17d86e10f7974d66878a86107c3e617e0b7f8284eba00956634aa6b5aef2cc82629e6a949","ssdeep":"","tlshash":"59618ed89256e1d2563398803f930758fbc770531a210eacfba553894fbe0a86bc5b9d","first_seen":"2025-05-05T11:12:30.40873Z","last_seen":"2026-06-21T23:07:42.121665Z","times_seen":17,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/upload/logo/W5P9925Zm1LEys6GVCLMn4cPJEOT4r.webp","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/upload/logo/W5P9925Zm1LEys6GVCLMn4cPJEOT4r.webp HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5384\r\nlast-modified: Sat, 16 Aug 2025 16:50:36 GMT\r\netag: \"68a0b6dc-1508\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5384,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"67f0e7903434ddb08d5ce88fed648463","sha1":"4c14ab28f0634a7e899d52028c3db8599bc0b83a","sha256":"02a0e191a3c4aff7e76a0493bac4f8068d75f66cc66e34dccaa4313c6a60483b","sha512":"2a53676727b543bf2bcd53401947fba06c6630feb8b025dcccb7ec075f0e99272c63c7ae0580cee185af558eade7c314b39f35269609f0cdab46ba45ea935bc6","ssdeep":"96:FSP3AkN6AqzChM5kioa8ybNjIiESsh/2QBQvkRF7d0pQOfmzCjal5otBN+9:FSPAk8Aqz1ki7jINgA7d0pQCECWqC","tlshash":"04b19fe3bb45754d1aed57a2627acc2c915ec8b70297521cd5cddf13ceb80c195d088c","first_seen":"2025-08-29T08:02:00.755769Z","last_seen":"2025-08-29T08:02:00.755769Z","times_seen":1,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/upload/contents/fRJ74BABUf4071SS3BXTFI3RZ0fHX5.avif","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/upload/contents/fRJ74BABUf4071SS3BXTFI3RZ0fHX5.avif HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 5278\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\netag: \"673a1a6a-149e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5278,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"9f06b805e27e4c0ec02f7832f33931aa","sha1":"87162b881f9df8dcabef2cc4deee9a36dff2a4bc","sha256":"32d71b40a7e5ba2d97e16574299ceaf03c3685e3bfe9f6e69ed88a8b396beb67","sha512":"53b30bb6df16371190a41dec0899d29843657143b88b2c8dea4de933fbc9d159ff45a9df0865746cfc05fce10fed01dbe9d8f4749297308412ae5fdeafee377f","ssdeep":"96:+cLjIdAl0XaWL59J2m1esM4jW595aJq6v1cNyuU0KsQjPdlYpYte2VA:+W8dAs7P7RMd5aJz1cNw07QjPdnhe","tlshash":"80b17c79b7473502d64d233684a101022a85fb0da792da2c9fa8b6535d623fc6bd2850","first_seen":"2025-05-05T11:12:30.371734Z","last_seen":"2025-11-21T07:23:40.833189Z","times_seen":4,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/outgoing_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:30.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/outgoing_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:30 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5014\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"6899c524-1396\"\r\nexpires: Thu, 11 Sep 2025 08:21:04 GMT\r\nlast-modified: Mon, 11 Aug 2025 10:25:40 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-08-12T08:21:04+00:00\r\nx-node: m9-up-gc81\r\ncontent-range: bytes 0-5013/5014\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5014,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"7bf3e4962a5ecf1f8cbcc2ff3428f531","sha1":"f75c694461a643d2e096ae8d0f6c1a9d19602eee","sha256":"d44244617bf21df7a137694fa762d5cab3b82cb9fae8f33de5917977b02b2a11","sha512":"53fb17ca3361636acb0b80107f66810150a8bbed9aa5f878c2b1fb5a23ddf7fd349b30eb082b05efb3c0d08dc5383d30ef15d0ca99ad98d62e0a9a335112ed6a","ssdeep":"96:nKEOyBuK+1D2sMVx9FX7+0YQQinefV/1gr/EaadKXdGdimO1:K2QhGvYinsLE/SUdUime","tlshash":"5da1399616202262f6090cbf124ec2f4e3996f6b39044726b67cd290f46ffa25366983","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-08-11T22:11:54.750542Z","times_seen":16741,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/global/js/axios.min.js","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/global/js/axios.min.js HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"673a1a6a-3815\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14357,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14271), with CRLF line terminators","md5":"30e194541bcdd371e8fadf5961d4bee5","sha1":"6238205fa0564bd8a25b90fb66233990e46c8d70","sha256":"ea52c2604519304144d7267cf90f912ee6b092b2c5505576948568fe653dcac0","sha512":"07d7a69d6ceff3c199874a2295be37e1c9c8593aad4c969929de6867b1f56b6528f51a7ad85d33e3617c5ed4bd3e00b211aaa3d3b8d3c8756d3c7a6068755520","ssdeep":"384:vtuDoBdyteApZXfgHH7MsMRrVkkaFW4Um6kxTF6T9eeiu:w0kvRrVwWQ6k5F6T9e5u","tlshash":"625295ceb4a1b09747e720f0809f4a0fb2ba552a644dc4a0fa60e8f66c7552d8733f5d","first_seen":"2023-03-07T01:10:40Z","last_seen":"2026-08-10T09:19:40.621289Z","times_seen":726,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexsans/v22/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/ibmplexsans/v22/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://exoduswixe.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 45428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 Aug 2025 03:50:46 GMT\r\nexpires: Sat, 29 Aug 2026 03:50:46 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 22:28:55 GMT\r\ncontent-type: font/woff2\r\nage: 15041\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45428,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45428, version 1.0","md5":"6b4b2adf4d0ee4301d394be6ecadeee3","sha1":"5facbf6ce85bb54b7478aed0ff40d7b67dfd60a4","sha256":"c5f70ddee640c270adabe47bdf8a589e237a5b5a10a5038fbc032f9f52225aae","sha512":"73f78a8a4448092fd0f477d8c4b849a7fd7babb512738874c352e8829f546443cbd7a3d431db865190a97911221fea74213822371adfca00dd2273d21a48dd58","ssdeep":"768:fympPv9IwdVTCobEyKKY1qlbGgjQhnX5sB4Gx4OVKKEoOMVN7/J2xh:fym9CXWY1qlqmOnJO4Gx4DKEo5VN1+","tlshash":"bb1301bf0376b9188250fa62aa6c3a9b765fbfb0b27608134a5b734d4c5047fde54318","first_seen":"2025-02-05T08:08:56.385262Z","last_seen":"2026-08-12T01:16:02.168642Z","times_seen":10162,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":154,"dns":1,"connect":7,"send":0,"wait":9,"receive":10,"ssl":141},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/upload/cryptoCurrency/YWfNJTdVCRBJoIIT8OOFQkWjd3HOh2.webp","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:28.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/upload/cryptoCurrency/YWfNJTdVCRBJoIIT8OOFQkWjd3HOh2.webp HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6IktSZ3JibTJXa0pkZG0wRDdGQnBudnc9PSIsInZhbHVlIjoidjRsZ0ZXeE4yTmNBWkozUVNjd241OVN4K0pHVmliYkR3dFR0QWxFcHdjVFJpLy94MHh4T2IzWXc5YUdoVFhMQTYrYTlLQjAxd2dUNkh2NWQrWXd6VGJjWUFxalVQUWN0U0NCRTJkMVI1aW01akxvRU1oN0JwZSs2TDhha0FYaVciLCJtYWMiOiIxNjZiOTAwOWRlZGVhYjM1ZDhhZTdhYTIxOGIzYzRkYjgyZDAwZmRjYjBiYWFhYTkzYTUxYTY2MTA0Y2EzZWFkIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6IlF3ZG5tbDVmNTk4Szl6TEhqR3ZIRmc9PSIsInZhbHVlIjoiWTFVa2FHUHpnSUVpVnVTVVJ2SjJUNC9LU1NLcmRmUEVKSXdKUG4yQU9jeUI1YVhWRnF5ZnNQYnJyMHdvM2NOZHA4Q2p6bkRiMFpDaHRsODYyck15YlpwY0MzcVhCWk1DbDNwbUNKejkrLzBKLzVSZmFWemdNeWJ2U29HMndUemciLCJtYWMiOiI4YTA4ZmY4MzE3MTVmNTdhYzkxM2M0ZjhkZjVhMDJkNWMxMTdlYzI4OTEyZDI2ZDIzZjRjNmQzNjRiOWIxMWM5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1000\r\nlast-modified: Sat, 16 Aug 2025 20:17:28 GMT\r\netag: \"68a0e758-3e8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1000,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"894627ac16f352b1a5a060327d9030af","sha1":"653751a43a3bb566826053e78cc8894ddb2fcf5c","sha256":"291d6193359c0a34b48d0e47c6f296a6f8f288bb445e10976baeb2759e5ad11d","sha512":"473396d64abb96d56162fa690bcc55fe8a49a14dd66979c9e6db0625818489dec7ab7e598f15cd8b163199c4cc87261cf3c835866a399a977a7f84c18e3aeb35","ssdeep":"","tlshash":"ae119832c17a7e66b9b57e8a1e432d80dc9775dde52118f3b22da35615189f12d0c207","first_seen":"2025-08-29T08:02:00.7899Z","last_seen":"2025-08-29T08:02:00.7899Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/css/owl.carousel.min.css","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:26.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/themes/light/css/owl.carousel.min.css HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"673a1a6a-d1c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3356,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3184), with CRLF line terminators","md5":"b9755c9c2613c455154caf065bd1a94d","sha1":"aa3c316b4e2ab55bcb3d8e3d186677739b0cfd64","sha256":"062368677bcefd9495e8b320e0cf22c4faca9f1bc04666efeb9cd5307cd591a4","sha512":"dc35560a766631f3b508d0e280fb95f746d9940b48565487932ea6c1ac97f5436d0ecf3b59ebc2ba2c4f21f7c5b963b4671a7f3e56745860cd1244d207fbcc6a","ssdeep":"","tlshash":"a361cbe5314a225f480f831219d81e86393dcc52d8660a8a92bbd71447dae6d213ffcf","first_seen":"2023-04-05T17:13:40Z","last_seen":"2026-08-11T19:24:24.378667Z","times_seen":7119,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/upload/contents/work-process-img.png","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/upload/contents/work-process-img.png HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 184704\r\nlast-modified: Wed, 20 Nov 2024 15:58:58 GMT\r\netag: \"673e0742-2d180\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":184704,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 623 x 505, 8-bit/color RGBA, non-interlaced","md5":"2836fde94c97ff4ddd4c060782c0ad03","sha1":"41651584cbf8b521c87283fe1af26a29d7399d14","sha256":"c6a34babeac8e37252793bc58f3ac5a5d8f0ba3e571f27d2f8ddb27c611a7401","sha512":"ca0a7f9d39af27a1ed1da8dc990f4fad4c0678e6b88cbecd59f98ed44143917185a4b64ed66fba35484533d0696ed5bf1a880d19e5b274c57c2592e8dbd12ad0","ssdeep":"3072:LDEWJXLCV5kILiWkGNBHdXYzUmwx1bgQkUvtfKFTetHt2ED4UUnfEKKZF2Ue1lOO:nNQ5kYdkGbGz/wDCUvtfKFCQLUUnfEKL","tlshash":"0d04120b12645c06f8c007a99541442ef96debf4bbd996f08f17a405e8e77e1fae0b4e","first_seen":"2025-05-05T11:12:30.410171Z","last_seen":"2026-04-22T09:22:36.134849Z","times_seen":8,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":177,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"node-ya-2.jivosite.com/widget/status/2651834/feqGZTqMd4?rnd=0.5594512186827406","fqdn":"node-ya-2.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"158.160.45.40","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:28.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/status/2651834/feqGZTqMd4?rnd=0.5594512186827406 HTTP/1.1\r\nHost: node-ya-2.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://exoduswixe.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-max-age: 1728000\r\naccess-control-allow-origin: https://exoduswixe.cfd\r\naccess-control-expose-headers: X-Geoip, X-Botmode\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: frame-ancestors 'none';\r\ncontent-type: application/json; charset=utf-8\r\npragma: no-cache\r\nserver: foxy/3.5\r\nx-botmode: no\r\nx-frame-options: DENY\r\nx-geoip: NO;03;Oslo (Alna District)\r\ncontent-length: 186\r\ndate: Fri, 29 Aug 2025 08:01:29 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":186,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"086a3dc589249cbd16401cefcfcf1655","sha1":"a96d58e147fd5e5c6a85f77e3a96e8bec6f2af80","sha256":"cfbfe8a47f3804c21a904e103bcd872c590832421d625488f645293b74e5f764","sha512":"6f896bf65b39715eca6a9ee0a0e137479c30264ca70fbac66a3a1d83d7e51f0c17265ef8cafa9eec42daff2b25521acaaceba8e206ee785ac88cfabeacef2cbd","ssdeep":"","tlshash":"0ac0c028443d8cf60be84720b4877f8e093802011dc3db2c734af50040ff9d1510a007","first_seen":"2025-08-29T08:02:00.793343Z","last_seen":"2025-08-29T08:02:00.793343Z","times_seen":1,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":152,"dns":48,"connect":47,"send":0,"wait":47,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle.js?rand=1755692275","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:29.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /js/bundle.js?rand=1755692275 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 284129\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"68a58209-455e1\"\r\nlast-modified: Wed, 20 Aug 2025 08:06:33 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-08-28T12:21:09+00:00\r\nx-node: m9-up-gc98\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1204814,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65508), with no line terminators","md5":"3060b2c726fb94106cafe785d8a12dec","sha1":"1f7d48a86a2ce9abf8746d0477926c906effb25b","sha256":"f52047d0e1a18dfdb8a2640d500e76010d117098522804e62573c9f8d8679d08","sha512":"145c84ec661fe812a0f2cf4c43e462438af719e41e433f77eb7fc29a5668bb5a2548437084bd1f4294bec0f917d161c648e5f805168bf3519747ee99704654aa","ssdeep":"24576:BVSwS96xbB0ljHeY8yuWoBm+QsVduhEyuD1eb4d5oVIUfWuAbP36IHg:zSG0lj+Y8yuWoB7QaQFu5eb4d5ouUfWG","tlshash":"8b254ac5b1c0f4a502d355e6643b2009f23a285e7809b064fbbccddbea5659e6273f39","first_seen":"2025-08-20T15:19:29.067858Z","last_seen":"2025-09-01T11:30:14.332835Z","times_seen":156,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":180,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/images/pattern/8.svg","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:41.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /images/pattern/8.svg HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:41 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 21610\r\ncache-control: max-age=864000\r\ncontent-encoding: br\r\netag: \"68a58209-546a\"\r\nexpires: Fri, 05 Sep 2025 11:02:45 GMT\r\nlast-modified: Wed, 20 Aug 2025 08:06:33 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-08-26T11:02:45+00:00\r\nx-node: m9-up-gc5\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80592,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1993b235d19af6bbff52cad6fe23c24f","sha1":"ecb3ed1a8e1cea947400931f007c883e5725077a","sha256":"397ce0dcfc0b7160273d3c56e1a893127851f17700eacc653e80c7d4edff8df9","sha512":"0c8ac28429583383b2e638c186245c870ccf36782adc85640cb9c09c9c746ca07f6e4dd9c6445e572b20fe24e2544b0496510ef062b709b01f946d6ccea037a2","ssdeep":"768:byIS3G3O1DqkZyyQon5ionk5fcCGBlIHyhIoKpNOWBpaWwoiV+uqF0qpamh6KJ+N:bU34oDq8yyjGf6KoK/pa9OfV4Zl","tlshash":"3f730ff53b2cf2ec14876b6adf32c8641b5e70b57f13d698961d8ab48047d45ea8bc10","first_seen":"2023-11-15T10:16:26Z","last_seen":"2026-08-11T09:57:33.617786Z","times_seen":1211,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/agent_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:30.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/agent_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:30 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 3760\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"6899c524-eb0\"\r\nexpires: Sat, 13 Sep 2025 09:20:29 GMT\r\nlast-modified: Mon, 11 Aug 2025 10:25:40 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-08-14T09:20:29+00:00\r\nx-node: m9-up-gc91\r\ncontent-range: bytes 0-3759/3760\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3760,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"8e9a165c4cb185ffd0b2658fa088e43b","sha1":"195873e5e8bbb2f5ecc32d95f90d6fb75817a649","sha256":"ff81aad05612f90cf97c238f219765884e5cbf49351d8dc96a4a063c598c3f43","sha512":"6ef9fac16ac2835ecb95ab077270293a95a3597fd28fb053b32cfeb6b0a72b52c0ee51b0504a463ac9db1d8a3b2c6c41f113012d6364d16feb8e01821a3221ff","ssdeep":"","tlshash":"c771295c69348528f80b31b89f4b765ac1512c19a8f2ddd4a62818e7377b36a678820e","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-08-11T22:11:54.729195Z","times_seen":16740,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/css/c775408/chatcontainer.widget.css","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:40.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /css/c775408/chatcontainer.widget.css HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:40 GMT\r\ncontent-type: text/css\r\ncontent-length: 21164\r\ncache-control: max-age=864000\r\ncontent-encoding: br\r\netag: \"68a58209-52ac\"\r\nexpires: Sat, 30 Aug 2025 12:24:01 GMT\r\nlast-modified: Wed, 20 Aug 2025 08:06:33 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-08-20T12:24:01+00:00\r\nx-node: m9-up-gc33\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":98561,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"14653fcb6b98056fc2f1c0d0fa41c882","sha1":"873ce2441132fd1e5d39c4b29be3d5b7daf98d63","sha256":"3c3061a58a12ca9502e6780e0cf53eefaa4a63f118654561e641b30d8ba22f63","sha512":"04ae872ab59f6207ee30eb9d28dfcf8312244abda748aff6b25670812c9f42fa376d8f9678793b1fa74c9effc5d4006d78916eb304928e848b86c85fef087983","ssdeep":"768:ZGHrbqKsv6I7l6rKsv6IQbQm5LSwpOIwUwS45H9tuK7gfeuv93Uo+BoB5otexSt2:ZGHrbav6zv6T1SwG3bem1Bw5otexSt2","tlshash":"25a3e662b681652db01bc532eca2fbbd643dd012db231fbaea55b730c78b5d71722508","first_seen":"2025-08-20T19:14:17.396246Z","last_seen":"2025-09-01T11:30:14.29458Z","times_seen":79,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/upload/contents/dot.png","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/upload/contents/dot.png HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 1355\r\nlast-modified: Tue, 19 Nov 2024 22:26:38 GMT\r\netag: \"673d109e-54b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1355,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 69, 8-bit/color RGBA, non-interlaced","md5":"5f17b228884386081f1cc01b206d199b","sha1":"811cb6017881b4f3a7c2012c95791a66245233ce","sha256":"4cc027ed525caa534eb5704279e3f1aac86ad4e783e62bb99398449192dd5c6b","sha512":"b24c14ba31fff834050c3ed2ccff68f38937adcc53e2e19a31ed08617cc7199e38713131ff1d0909ee0d09a0616a55ac9bf46042c1cc2de3e94c0b3354271d69","ssdeep":"","tlshash":"b121d8eee9019e6e4d8f0274a49b5fd8453f057605922f14624029230acd72937a2b6b","first_seen":"2025-05-05T11:12:30.352261Z","last_seen":"2026-04-22T09:22:36.131919Z","times_seen":5,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/img/background/footer-bg-shape.png","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/themes/light/img/background/footer-bg-shape.png HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/assets/themes/light/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 8407\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\netag: \"673a1a6a-20d7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8407,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1604 x 414, 8-bit gray+alpha, non-interlaced","md5":"75864e05b4adabdc3000dd0093cfda26","sha1":"d8816dbd0510a447b61f22cbb1775e4d2117366b","sha256":"7a42b212b588f6e9b9579b337383e6debb3f20e51ddfba90c0ce583922d2de3c","sha512":"19c33be9d460b4f4a213f92ca3078c00690eb67c9a520c0f801759714a4f46c8d73fabeb775796092225d9ee56957d15f34d02ef57b488a7b0c090b3f7420b02","ssdeep":"192:aSseftgbOM2L9452DEsG1gbjDG6orp3iTgharfBqWYqpx48PVOk:avefER52DtbjNGiTOEYqpxLp","tlshash":"26028ec74467e258d1a27033c96c9ce9462ddeabab66b5306edbcc00c5cd0a13d4ea57","first_seen":"2023-10-28T04:10:54Z","last_seen":"2026-07-29T06:17:04.824716Z","times_seen":26,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/upload/cryptoCurrency/6gQ3KoPV00Cgqnm4yhRFlIWOYQAwtT.webp","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:28.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/upload/cryptoCurrency/6gQ3KoPV00Cgqnm4yhRFlIWOYQAwtT.webp HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6IktSZ3JibTJXa0pkZG0wRDdGQnBudnc9PSIsInZhbHVlIjoidjRsZ0ZXeE4yTmNBWkozUVNjd241OVN4K0pHVmliYkR3dFR0QWxFcHdjVFJpLy94MHh4T2IzWXc5YUdoVFhMQTYrYTlLQjAxd2dUNkh2NWQrWXd6VGJjWUFxalVQUWN0U0NCRTJkMVI1aW01akxvRU1oN0JwZSs2TDhha0FYaVciLCJtYWMiOiIxNjZiOTAwOWRlZGVhYjM1ZDhhZTdhYTIxOGIzYzRkYjgyZDAwZmRjYjBiYWFhYTkzYTUxYTY2MTA0Y2EzZWFkIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6IlF3ZG5tbDVmNTk4Szl6TEhqR3ZIRmc9PSIsInZhbHVlIjoiWTFVa2FHUHpnSUVpVnVTVVJ2SjJUNC9LU1NLcmRmUEVKSXdKUG4yQU9jeUI1YVhWRnF5ZnNQYnJyMHdvM2NOZHA4Q2p6bkRiMFpDaHRsODYyck15YlpwY0MzcVhCWk1DbDNwbUNKejkrLzBKLzVSZmFWemdNeWJ2U29HMndUemciLCJtYWMiOiI4YTA4ZmY4MzE3MTVmNTdhYzkxM2M0ZjhkZjVhMDJkNWMxMTdlYzI4OTEyZDI2ZDIzZjRjNmQzNjRiOWIxMWM5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1126\r\nlast-modified: Sat, 16 Aug 2025 20:08:13 GMT\r\netag: \"68a0e52d-466\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1126,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7c1a41c5532fb1d9a349bd95ead24f13","sha1":"91a91ae01fef08fd9d11c8b4c085e8ed216ca6c5","sha256":"f29efda7c21706af1f7e40f2fde657bafb7a278fd8365239649daa9c5c540cb8","sha512":"330a265553a73249cee6c42567544f1c9cd5aa7a9152c50985e98a80a10ac701040a23abbf95de9c5b1a161b3aa674f4edc39433bad99062dd5d4177ec9585c7","ssdeep":"","tlshash":"7f21966d596c81e9565a9f6bfd667e000dbd801fca668622bc94d51f32f88104d80ad2","first_seen":"2025-08-29T08:02:00.800393Z","last_seen":"2025-08-29T08:02:00.800393Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/css/owl.theme.default.min.css","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:26.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/themes/light/css/owl.theme.default.min.css HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: text/css\r\ncontent-length: 1018\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\netag: \"673a1a6a-3fa\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1018,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (846), with CRLF line terminators","md5":"884f2375d217bd05c67fcd80f393cb9e","sha1":"827e2d9574330c1c7eec6a5c093bb7fcc956ed27","sha256":"505fff817f37d43899275853aa6d6f4f3644b6abe2c420ad9cd6caab1ef147cb","sha512":"03ae3396a3363e9454f6a6ea099f9ecadc6b7e1e7881ce7bc3034e53994402e2f168af2b63c312361efd6f654bd9cfddbbecfade2873da8b2b7b7e16d20d8685","ssdeep":"","tlshash":"1511abc5b189221d3023c58046a842cb6b1e687e529d1af5f8ee9120c32dd053a6f7f9","first_seen":"2023-04-06T17:34:28Z","last_seen":"2026-08-10T21:42:44.470988Z","times_seen":4822,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/upload/contents/why-choose-us-img-2.png","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/upload/contents/why-choose-us-img-2.png HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 113221\r\nlast-modified: Wed, 20 Nov 2024 20:46:28 GMT\r\netag: \"673e4aa4-1ba45\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":113221,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 340 x 281, 8-bit/color RGBA, non-interlaced","md5":"2f6ddf135b81b349e9098399d944da2a","sha1":"5dbd0bde2f72f10bbc7dbf3e0b475a133cc761bf","sha256":"43b0d557b9c361fe5641ce18688154b2348ce468c69e2e466fadaeba8e3bec76","sha512":"ec6d153d4fe66fb5550516f24aa8b8f1217f7edc4daff023a08dc69b7f5129275764b3751eb59b57695493820534bcd25331d0ef2ad75cbe6e525dec5daf6451","ssdeep":"3072:FNFIpV4eCYezDZg7kkpbti8v/YlLBnpCv6s1ppcG6d2Q51dm:FgpjTWDKwkpbB6Y1ppQt1dm","tlshash":"fdb3124d9b0d2b4e1853b5b4fc5a618f1139e2baf59f5afc639471ce0da2c186c04be4","first_seen":"2025-05-05T11:12:30.385298Z","last_seen":"2026-04-04T09:15:14.239921Z","times_seen":5,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=IBM+Plex+Sans:wght@200;300;400;500;600;700\u0026family=Inter:wght@300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css2?family=IBM+Plex+Sans:wght@200;300;400;500;600;700\u0026family=Inter:wght@300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 29 Aug 2025 08:01:27 GMT\r\ndate: Fri, 29 Aug 2025 08:01:27 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32923,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"bda74d1f3a8df34a826b30b8b39ab039","sha1":"dbfd7262108f6b46f4569e30f323df81ae1d3b2a","sha256":"593389569ff7f382abc1fb990683f2f8b65fc0997e47e7894c51512e2ae729a0","sha512":"dd67a40d0d9d73da90ed5d93382771415b9051fbb1d2834769c24e4fae9532b4b11c3fe87d9976deb76848689f7286bd2165bf857de5acb86d0f4bfea4256b5f","ssdeep":"192:XonOa3aNgdqoI1a3xmg2voZ8a3gDgTwoira3fUgkloT6a3uJgZ+okRa3VSgi2xAt:437hVfXlFnTh9e0bGo4VuCM/WMC","tlshash":"a9e2daa1802ba440ab471cc233cf7f36ae8e64846485d2bd6ffd1da49ceed26536471d","first_seen":"2025-07-09T03:25:20.7219Z","last_seen":"2025-08-29T08:02:00.803334Z","times_seen":2,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":103,"dns":1,"connect":15,"send":0,"wait":21,"receive":0,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/upload/contents/img-2.png","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/upload/contents/img-2.png HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 1718\r\nlast-modified: Tue, 19 Nov 2024 22:26:16 GMT\r\netag: \"673d1088-6b6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1718,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 359 x 433, 8-bit/color RGBA, non-interlaced","md5":"f242e653eeed65b2369e60429906b21a","sha1":"060365f82da5c73746143a41e4afe0e2d021af10","sha256":"0aacedbca2b3190daecbb7fc1039b6708196950813442ce47f60ff0d964659cb","sha512":"eef46a5f9563627b3bb691fa3eb6304ee0995f9eb4b29591ce3802f0b2e475b5b03bc619c2e859356cc58f3d07a7b26d0b60cb0d1957fa5671169ef85d67954a","ssdeep":"","tlshash":"cd31dfc46fb356f5c50e0f4dac1672005c3aaa5a20070328a6a4130126c7d030b2e671","first_seen":"2025-05-05T11:12:30.41982Z","last_seen":"2026-04-22T09:22:36.115503Z","times_seen":5,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/global/js/notiflix-aio-3.2.6.min.js","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/global/js/notiflix-aio-3.2.6.min.js HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"673a1a6a-16388\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91016,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65339), with CRLF line terminators","md5":"f221d28a789bdfaa8759bffd65aefc75","sha1":"d066fbc8b969e6f3dad42818d6a330f72cac0872","sha256":"f951e926f9d31da66e7971cb72c61c657f42d641c62aaf77b0f3142fcdd5bac3","sha512":"6558b24857388109656d5341bdfc83e239b39b3b9d863535f18004f6bc2b3da03997fc9505385f3a70e97fff647368b58781acf607490a60eec831b6d3ee29c8","ssdeep":"768:hpax78NlFR8wFwmPUDkhath0W+9BfmDkRAl6faqEinATJDv5c4MZEwXmmaHz8pT6:HTL8eUDknRAl6fmRc4MQU74U2S8E7CJv","tlshash":"9693faeb6181011c82574be32bce5508763ab8d6a5120cde73b85c2a87d67cd67e372f","first_seen":"2025-05-05T11:12:30.391592Z","last_seen":"2026-08-09T21:38:00.018216Z","times_seen":44,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/js/nouislider.min.js","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/themes/light/js/nouislider.min.js HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"673a1a6a-69ee\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27118,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (27118), with no line terminators","md5":"1c81c26999ceb485d4f9204b6ac2e83b","sha1":"472923517f13c3037e48935ef87e000920d78aee","sha256":"995d5e01bd25ecc38eab3aa72df6ebcabdc6959b693ea1a4901c2a18ca6e36a6","sha512":"50e25ee29695ea16160674b473d1a72111fc3cb9b69c52b6dae85f02fb1322a777bb09d6b15ae2d4e3e7e5f25874bb46637c01d752c61c9e323d4d5614978161","ssdeep":"768:iE4Zj4wv5Uyweawt2LBtke6swBxT0tN8bUHKKO0qSLeZW7jgSz63k0qm1GVfUPJD:Hrwv5wzjg/U622","tlshash":"08c20880b25438360a633071902fe60ea1337750b94a89b5e675d5d23c78e6c5affe7d","first_seen":"2023-04-05T01:40:37Z","last_seen":"2026-08-11T18:33:35.097998Z","times_seen":2007,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"vi-ya-2.jivosite.com/feqGZTqMd4?84749b6fed8fc817","fqdn":"vi-ya-2.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"130.193.38.59","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:30.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /feqGZTqMd4?84749b6fed8fc817 HTTP/1.1\r\nHost: vi-ya-2.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://exoduswixe.cfd\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Y3MBJMzhhh9559b5ah9pRA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nConnection: Upgrade\r\nUpgrade: websocket\r\nAccess-Control-Allow-Origin: https://exoduswixe.cfd\r\nSec-WebSocket-Accept: OwFEBIswQRwrJqkT79jilN4Rm2g=\r\nServer: hand/3.7\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T02:57:34.133949Z","times_seen":17847946,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":0,"connect":48,"send":0,"wait":48,"receive":1,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/js/owl.carousel.min.js","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/themes/light/js/owl.carousel.min.js HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"673a1a6a-ad3c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44348,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (31997), with CRLF line terminators","md5":"47c357c05cb99cedbac2874840319818","sha1":"d8b05365de4b760618328fdeef7672e8374978e4","sha256":"4e0781bdd2cbb5db04da3b5e059eeca34e325fabb893bee7457b5babf5b7c029","sha512":"960b76113c78220acc1c87e437c6698fbf1066b8cf7b15a6d4d33f31ab69d8e16bd9823c07ce1897db4d0bdfe08b39e5c7085b79a7a8ef80760e87d9aa789e2e","ssdeep":"768:RCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSNc7UuHjRUQuFBt33:AITMFC4dbMVRSNcgRDV","tlshash":"39137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","first_seen":"2023-03-07T01:06:30Z","last_seen":"2026-08-10T23:37:47.726714Z","times_seen":13979,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/js/slick.min.js","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/themes/light/js/slick.min.js HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"673a1a6a-a770\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42864,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42862), with CRLF line terminators","md5":"777da4aaf5b960636dec0fd4e50ba489","sha1":"9a94038ccae90e6d2a0f9cb61f79ae7c70320287","sha256":"e1a52c0a06fa9f65e015b02e7ec463fd621211a9d2ae44b6660597900e927fbb","sha512":"9b810776ff98b94fe765b192187064d2ce4921fb60baf4c797c3302d332f7e55556e54eb070cc8917f61aa74191539a294457aa18d54f5e85527652695c6f848","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYK:EPrYdlNixEePiYK","tlshash":"6213a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","first_seen":"2023-03-07T01:06:24Z","last_seen":"2026-08-11T23:26:53.541646Z","times_seen":14889,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/js/main.js","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/themes/light/js/main.js HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 19 Nov 2024 23:51:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"673d246c-2bc6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11206,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"817da95d9f09f3433244d7f0b09f5b0c","sha1":"fb004990b4d174c13cc614c8e6721dd91447f0e5","sha256":"c4948256b85dbdebde01e5ba1ef4f20463e3ad0cda670a532943b0b074746891","sha512":"2c81d1e231970b6952fa1f452e0a97ca8176aa070d62a10c4b14a3af9fbf37baa097c5d78779ffd179dc60c7edac999024845f47420334a99c2e4b79b20921f7","ssdeep":"192:+JgsCExW/+eLS9R4RnQimivZhiJimnHiWip5+iJiyroP2P1yfUQJZYiridLYiril:+GsCE3eLK4RnQimivZhiJimnHiWip5+x","tlshash":"3b323e1f701606314d7b73b7aae6a348fb71102f6842c6027c6c4ad4af74996a3b1fd9","first_seen":"2025-05-05T11:12:30.437216Z","last_seen":"2026-01-27T11:29:18.331461Z","times_seen":4,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/notification.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:30.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/notification.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:30 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5808\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"68a5820a-16b0\"\r\nexpires: Sat, 20 Sep 2025 10:24:29 GMT\r\nlast-modified: Wed, 20 Aug 2025 08:06:34 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-08-21T10:24:29+00:00\r\nx-node: m9-up-gc69\r\ncontent-range: bytes 0-5807/5808\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5808,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural","md5":"9aa341af370c4e59155717260ba0f282","sha1":"0c1216ecead8d1409557c843d96202c063f3f252","sha256":"1112436abea08c851302bba4d4e37a27e25e5ec26b20474667a3369d41154bab","sha512":"e6663f8406d859a7ae65e6eb9512ed1e79244b8f5b2119823f80fed99c17dd4a086cc17083f3cd70b6dd990c39b3be80142f303a7c2a9fbb9302147e700fa5cb","ssdeep":"96:XYLRSqytFnbfWnHBaSvgEyZMZuiusJ0jQDrrQNw:IMTnbfGhaSvg/inqc0m","tlshash":"cac1297acc3c146fd81e88b53f3bb0c9421c61803a00d8e61c99bb5bd6b2ba975468d2","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-08-11T22:11:54.690188Z","times_seen":16742,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telemetry.jivosite.com/w","fqdn":"telemetry.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"94.139.253.159","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:40.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"POST /w HTTP/1.1\r\nHost: telemetry.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 297\r\nOrigin: https://exoduswixe.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: JivoTelemetry/0.9.6\r\ndate: Fri, 29 Aug 2025 08:01:41 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T02:57:34.133949Z","times_seen":17847946,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":148,"dns":47,"connect":46,"send":0,"wait":46,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/js/select2.min.js","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/themes/light/js/select2.min.js HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"673a1a6a-1456d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83309,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64126), with CRLF line terminators","md5":"6261aaed8d3c438b7cd60241462bb6b2","sha1":"c61d3ddf3aca8c24d0cbc10458d5a2177d2e62a7","sha256":"6bb9759501fa8c53c40288058344ca38b1e8aec830575aa543b63bd0afcd61f8","sha512":"d3f2a632763d292ee4ef426bc4b9f85484023a936f52d59381c8396eb077efe9d317f7097c2b696d1dc1db14502b8a48c805b17a0c4c6357c6d656a0c355c235","ssdeep":"1536:0ZoMrztEsa7loyQYTdqQ3RdOpbCo73pcdOIRb8EMc5g3PywNaQec5AY7:0mWEh2yQYTdXnOpbf73pcUIRb8EMcq3x","tlshash":"28838515f3e33b37825f70e26c9f9c4c7234593c51865948661cc9e8987c828a7beead","first_seen":"2024-10-04T10:44:16.250189Z","last_seen":"2026-08-09T21:38:00.087942Z","times_seen":57,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/js/parallax-scroll.js","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/themes/light/js/parallax-scroll.js HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 29 May 2024 14:36:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66573d6a-3bfb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15355,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (859), with CRLF line terminators","md5":"bb5ac2eaf845ad54acf8a04b4e2365fe","sha1":"6efe644b858c2f6fca10425fa736ab7cde2a965a","sha256":"8177305204a6ee458688396a7bd4855fa54cc20808a8bb09311398a72e946565","sha512":"00d9ca18b6074dc0a68a85b55fc4014cafc72d991571f4bf23141bc07b3fad60d43a0e6f0a090a94d35c8e0b28f8055cc305f5fe42e92b8d7bdc49ece03d0567","ssdeep":"384:k/wxTUBDVOkiVNyHg2mPX+xvx2R8m3Yftxm5ih:k/wQDVOkiVNyHg2S+xvc33OxN","tlshash":"3b627348e502152a91b77339cfae079ef77a662741128026be5c868a1fb093453e4ffd","first_seen":"2025-05-05T11:12:30.415756Z","last_seen":"2026-08-09T21:38:00.022947Z","times_seen":40,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexsans/v22/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/ibmplexsans/v22/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://exoduswixe.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 45428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 Aug 2025 03:50:46 GMT\r\nexpires: Sat, 29 Aug 2026 03:50:46 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 22:28:55 GMT\r\ncontent-type: font/woff2\r\nage: 15041\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45428,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45428, version 1.0","md5":"6b4b2adf4d0ee4301d394be6ecadeee3","sha1":"5facbf6ce85bb54b7478aed0ff40d7b67dfd60a4","sha256":"c5f70ddee640c270adabe47bdf8a589e237a5b5a10a5038fbc032f9f52225aae","sha512":"73f78a8a4448092fd0f477d8c4b849a7fd7babb512738874c352e8829f546443cbd7a3d431db865190a97911221fea74213822371adfca00dd2273d21a48dd58","ssdeep":"768:fympPv9IwdVTCobEyKKY1qlbGgjQhnX5sB4Gx4OVKKEoOMVN7/J2xh:fym9CXWY1qlqmOnJO4Gx4DKEo5VN1+","tlshash":"bb1301bf0376b9188250fa62aa6c3a9b765fbfb0b27608134a5b734d4c5047fde54318","first_seen":"2025-02-05T08:08:56.385262Z","last_seen":"2026-08-12T01:16:02.168642Z","times_seen":10162,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":215,"dns":1,"connect":12,"send":0,"wait":8,"receive":4,"ssl":198},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/upload/logo/Vv77AWvK6IoPFshknrl6Fbtr1Nkbny.webp","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:28.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/upload/logo/Vv77AWvK6IoPFshknrl6Fbtr1Nkbny.webp HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6IktSZ3JibTJXa0pkZG0wRDdGQnBudnc9PSIsInZhbHVlIjoidjRsZ0ZXeE4yTmNBWkozUVNjd241OVN4K0pHVmliYkR3dFR0QWxFcHdjVFJpLy94MHh4T2IzWXc5YUdoVFhMQTYrYTlLQjAxd2dUNkh2NWQrWXd6VGJjWUFxalVQUWN0U0NCRTJkMVI1aW01akxvRU1oN0JwZSs2TDhha0FYaVciLCJtYWMiOiIxNjZiOTAwOWRlZGVhYjM1ZDhhZTdhYTIxOGIzYzRkYjgyZDAwZmRjYjBiYWFhYTkzYTUxYTY2MTA0Y2EzZWFkIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6IlF3ZG5tbDVmNTk4Szl6TEhqR3ZIRmc9PSIsInZhbHVlIjoiWTFVa2FHUHpnSUVpVnVTVVJ2SjJUNC9LU1NLcmRmUEVKSXdKUG4yQU9jeUI1YVhWRnF5ZnNQYnJyMHdvM2NOZHA4Q2p6bkRiMFpDaHRsODYyck15YlpwY0MzcVhCWk1DbDNwbUNKejkrLzBKLzVSZmFWemdNeWJ2U29HMndUemciLCJtYWMiOiI4YTA4ZmY4MzE3MTVmNTdhYzkxM2M0ZjhkZjVhMDJkNWMxMTdlYzI4OTEyZDI2ZDIzZjRjNmQzNjRiOWIxMWM5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1872\r\nlast-modified: Sat, 16 Aug 2025 16:50:36 GMT\r\netag: \"68a0b6dc-750\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1872,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"26fa17d77d01589292187ce8f7863638","sha1":"15198612bc3ac1072d71ff427e85187d94401d99","sha256":"c2ca79f9273656a23cb8e4d392794cd1282b9fae4c1a5af48b6d90831ff0c1c2","sha512":"f95eef4bb540aed66ca7706320659fd2235d919721c294a0dee79c938f862ab5b0c461bfcc0dce87153a60d87c9b4426714970db40eeee8516d81c5d8b8517f9","ssdeep":"","tlshash":"13311b6d0a6ab462eff974e2f3387ca868b05d70450a96114b9586d36c0c3fb9598682","first_seen":"2025-08-29T08:02:00.815322Z","last_seen":"2025-08-29T08:02:00.815322Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/upload/contents/border-round.png","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/upload/contents/border-round.png HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 16461\r\nlast-modified: Wed, 20 Nov 2024 17:26:40 GMT\r\netag: \"673e1bd0-404d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16461,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced","md5":"756a1b712c324af09960e539e2a0c0ab","sha1":"ba2729d6555ad05ac764e6fada6ba7ac181ac24b","sha256":"ac4295d17b1fa41b866d38be84275ab3f78bc4994dccbba4798bed803be614ee","sha512":"a3d736e350f46557e84ded91c34007181f8f00b9c11049aae0692df3e3635a50dbed22f28b51009a611080749e441562fc707e778b3793889304edafeccc92e1","ssdeep":"192:JS31Ja6ycq8DM4NZz6WxUMsXPibp8fRjaDWR86G5wHCdgLnAS4wP//V8QYowK3N6:w3HywI4NZzUw0y6tgx1wP38NK3AJj","tlshash":"5372d0616711908e2e8d39b8161f74c49e721fe81657cb16a4bc4d26fa5080f8bf857e","first_seen":"2025-05-05T11:12:30.360065Z","last_seen":"2026-04-22T09:22:36.177556Z","times_seen":8,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/upload/contents/TGKh7rXt5aBxLPPwaJjjMfbxHsUFJ9.avif","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/upload/contents/TGKh7rXt5aBxLPPwaJjjMfbxHsUFJ9.avif HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 10714\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\netag: \"673a1a6a-29da\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10714,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"392ac773f02f031c4a3e119a57ae3f19","sha1":"d6a2a15ba0c05015efbb1fc108291a7765c324f5","sha256":"311954c94ef218efa842fc6c8e1762d80fc949f3b9c277f7c88540aea6d94fd8","sha512":"69fe56d631f08777ab94e835459ab365fee7cfb39e04042ca9700e2e061a9fdefb0066a0461c88925ae0d866c11c59c9de8a61776a801528eff796e2dd0e6e8c","ssdeep":"192:+aV8Afpxj26APYk3r6ptloW5TsaVhCYCZiUL32ZOxkBoytZbfgvQDWb3bVzWh0G8:Pffp46AQk3mZoMhCJD2ZXBFTIIWbLgh8","tlshash":"2722b062534ba840dce546f8e26f53af09b1a3c564c3f8c7a00d6031e6b5d914f16f5c","first_seen":"2025-05-05T11:12:30.390441Z","last_seen":"2025-11-21T07:23:40.854017Z","times_seen":4,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/js/swiper-bundle.min.js","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/themes/light/js/swiper-bundle.min.js HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"673a1a6a-21321\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":135969,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65267), with CRLF line terminators","md5":"31f6d85f687bd563b365886fdd14c6d7","sha1":"3d10fb34a02205d6fa427ddfab5895e34853855c","sha256":"fc88096bfcd4a0f5764157ff6a9b447ad3555f130d61ca62b4268796ba7adc6b","sha512":"5d1fd43c089433aa05c8ac12de4d7be4d5aa8d664cb5e388516f23a27dcdf046ef5689ba0d3cb64cafa78b3752e5d083bb2d6b31b3a33114683e27356261dd2b","ssdeep":"1536:1IJmfG2cF8NkHfG/9+OzdolxU8GBkizrACWi6vtnV4U9ampFIzba7r5J7ifuANqi:CJiNeiMGBk90U9FpFIzO/5JeWABh","tlshash":"4cd308896220b57646e356db93e4c261a3b50540b80ac8f470bd4c9f597ec9813feffa","first_seen":"2025-05-05T11:12:30.402452Z","last_seen":"2026-06-12T13:03:21.590039Z","times_seen":25,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/webfonts/fa-brands-400.woff2","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/themes/light/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/assets/themes/light/css/all.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:27 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 78672\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\netag: \"673a1a6a-13350\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78672,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78672, version 393.14155","md5":"c2ba39152480e762b43452159e39825f","sha1":"a905c50433f81cbce12390278b74a8f363363b45","sha256":"288f3bb867779e4bab9fa464be0ef1e67527e7d6aee37c659cb8a7a3cf3e70e5","sha512":"d1b59ba170f0f0678b9675c4a5eb56bf35626ea4306dfcc2cfc924a5ec90f20c7f6706701d03ac9c03e18d86a2b9c3b8563030f5227817b977af594342d26be7","ssdeep":"1536:gm+QyL5ILE6/WEL52ISvHnXxGfi5rNRxt9+x4/EBmS6BemCqujsG98cTOGC:gVRUruMtSvhGwpR1+3jLpVC","tlshash":"d973029c9de987e0a5a5bd8c2b9130b3bfa0f8c24c546a7b502d7f5d80597d83e25b80","first_seen":"2023-05-01T15:42:20Z","last_seen":"2026-08-01T15:29:21.509387Z","times_seen":197,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":74,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/upload/cryptoCurrency/USFj1cdYU4FNG9yn8mtg5mpyGh28bD.webp","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:28.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/upload/cryptoCurrency/USFj1cdYU4FNG9yn8mtg5mpyGh28bD.webp HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6IktSZ3JibTJXa0pkZG0wRDdGQnBudnc9PSIsInZhbHVlIjoidjRsZ0ZXeE4yTmNBWkozUVNjd241OVN4K0pHVmliYkR3dFR0QWxFcHdjVFJpLy94MHh4T2IzWXc5YUdoVFhMQTYrYTlLQjAxd2dUNkh2NWQrWXd6VGJjWUFxalVQUWN0U0NCRTJkMVI1aW01akxvRU1oN0JwZSs2TDhha0FYaVciLCJtYWMiOiIxNjZiOTAwOWRlZGVhYjM1ZDhhZTdhYTIxOGIzYzRkYjgyZDAwZmRjYjBiYWFhYTkzYTUxYTY2MTA0Y2EzZWFkIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6IlF3ZG5tbDVmNTk4Szl6TEhqR3ZIRmc9PSIsInZhbHVlIjoiWTFVa2FHUHpnSUVpVnVTVVJ2SjJUNC9LU1NLcmRmUEVKSXdKUG4yQU9jeUI1YVhWRnF5ZnNQYnJyMHdvM2NOZHA4Q2p6bkRiMFpDaHRsODYyck15YlpwY0MzcVhCWk1DbDNwbUNKejkrLzBKLzVSZmFWemdNeWJ2U29HMndUemciLCJtYWMiOiI4YTA4ZmY4MzE3MTVmNTdhYzkxM2M0ZjhkZjVhMDJkNWMxMTdlYzI4OTEyZDI2ZDIzZjRjNmQzNjRiOWIxMWM5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1458\r\nlast-modified: Sat, 16 Aug 2025 20:28:57 GMT\r\netag: \"68a0ea09-5b2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1458,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a6ec9297a5da68c4df6e9168f65c51a2","sha1":"f2d982027ce821d999c2bc6a63e721ef7918b13e","sha256":"481ca24a9ce19d41b3f9660e947244c9ee66cd2abccd35a135e61e174c8fdc6d","sha512":"55e61b3c3542e2aac79b69587a7032f8bbf1df36e85c50062ea509ef4293be323dc99dff86f7878b848d252fb112f937cad55c7bd3a4f9a5f35ae38bf53a5881","ssdeep":"","tlshash":"7b31194e89bffe50477a1ea8d4e07a18bac2d37934bbe735017802754382040272a416","first_seen":"2025-08-29T08:02:00.823924Z","last_seen":"2025-08-29T08:02:00.823924Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files.jivosite.com/avatars/2651834/68a119c22e85b.jpg","fqdn":"files.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:41.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /avatars/2651834/68a119c22e85b.jpg HTTP/1.1\r\nHost: files.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12008\r\nx-obs-request-id: 00000198F4D8BB81A8C81FE62AC7F0DD\r\netag: \"40e2d435f1e66de44ba13c6afaad0ed7\"\r\nlast-modified: Sat, 16 Aug 2025 23:52:35 GMT\r\nx-obs-tagging-count: 0\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Disposition\r\ncache: MISS\r\nx-node: m9-up-gc70\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12008,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=5, height=200, orientation=[*0*], datetime=2025:06:20 16:22:47, width=200], baseline, precision 8, 200x200, components 3","md5":"40e2d435f1e66de44ba13c6afaad0ed7","sha1":"3b5b71b69927306aa9efc73569b41f341fc4e6da","sha256":"a4c259884f90d486ecc05647d82a47782d9ad58025833bf8d615f6f021af0c45","sha512":"2dedeb1cc44fa1543340a6013ac43ae523ca8c5a0e80b83264a41a7692ba3b0ec1880e957e3e24c57cf701f4b5b00b016be3382542560a924965588e26ab92b9","ssdeep":"192:Jw1JPl6SbAfJ5VMYOgVDwipbbU8NHOG+oeLf9uNgO+JXHD+2SG9u5SNLHF0r8fZv:Jw1dgSbAfJPM+VDwM8MuGLeDMNl+1J0w","tlshash":"ec42bf494b5885c9f864a9309da29f127be0975d1fa1ded7f0c0b70882418ee38bc9e4","first_seen":"2025-08-29T08:02:00.825242Z","last_seen":"2025-08-29T08:02:00.825242Z","times_seen":1,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":77,"dns":0,"connect":0,"send":0,"wait":87,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/upload/coinAnnounce/NTphKPkY1d2OUnpL4wHi2UWc0K8sDg.webp","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/upload/coinAnnounce/NTphKPkY1d2OUnpL4wHi2UWc0K8sDg.webp HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4300\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\netag: \"673a1a6a-10cc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4300,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"663af2a93dbc99bbc4c6c767aaf20efc","sha1":"95044439f5f4300200915e1f89b48e6e11b0c215","sha256":"e0390873ded76ba1821075d1cadb6c59dfdebbf1b6a3f15c0858442d7d314bbc","sha512":"ec3ef4c98c44c18268dde880c484b94099920b57d81fd4c8b7a1956f04b3490cda005a1c192fdda38710ab3db6f29abfbb23c8765f570e4e7a559e4fc6ed029d","ssdeep":"96:jWnF9gv+qXGnLwCORD4DiGXqiSkhDS54ISx3SghT6zfs:SaH2LpORD4DRqiSkhDN5x3nTcs","tlshash":"af915d554a18d9c6047f76e9cb281bc63c8cdeb58b4196ff06f187151b807ea2911ac3","first_seen":"2025-05-05T11:12:30.373819Z","last_seen":"2026-04-22T09:22:36.127503Z","times_seen":7,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/webfonts/fa-light-300.woff2","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/themes/light/webfonts/fa-light-300.woff2 HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/assets/themes/light/css/all.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:27 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 220348\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\netag: \"673a1a6a-35cbc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":220348,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 220348, version 393.14155","md5":"d79342b5483eb38d3718e25df7cd884a","sha1":"baab6aaf68dac80219759f3b7f55756cbb9f855a","sha256":"81e356b47df51def787f321df9fd122fbf4e4ae52930f3e0568220b0690c9736","sha512":"0cd98aa4cfa5fe6ec6b8541bf20bf6bb51365220ba7430d638afabbee1d31e52d6316ea30499f9b174820b1f67ea26c87c06e8b9c7a62c8da00de51bdddf7f21","ssdeep":"6144:tUv7R0l6AhdnFr8CRvaWcCjSIRZwgVo4h5QaAg:WR0l6AbnN8CRLJnJ55b","tlshash":"4624236d82a035e6095e3afd76a866fe4cd870d4dc202546a81c5b60cf28f15a9fec0f","first_seen":"2023-06-01T18:53:30Z","last_seen":"2026-08-01T15:29:21.48215Z","times_seen":114,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/upload/contents/orbit.png","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/upload/contents/orbit.png HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 72623\r\nlast-modified: Wed, 20 Nov 2024 18:45:46 GMT\r\netag: \"673e2e5a-11baf\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72623,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1148 x 1148, 8-bit/color RGBA, non-interlaced","md5":"a656b2d87ae6a002e2404d4a7036fff7","sha1":"5cfb81cec30589afcda4b18e75f8d65c5d54b710","sha256":"155360c0f446a42d97e2be6765ed10f819bdbbe4eed12676c0c9f48bf1f68c74","sha512":"629e87f15cbb654f15d80b67a5cc9ac88f739a5945b6cfe24c2c27580e6323885d16f9ff1679dc3048a826c9277f56989de96e31bd47a28745390af2fde66b2c","ssdeep":"1536:AWx2SmU8zVONRkrlgkZO870AatsNWqTRpPq:AvPVOzk9ZO870Aa4WqTRVq","tlshash":"d9630263098d51adfcc750f9d89e022337f635958f510a3792adb81547bed8be41a8b0","first_seen":"2025-05-05T11:12:30.364157Z","last_seen":"2026-04-04T09:15:14.137492Z","times_seen":5,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexsans/v22/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/ibmplexsans/v22/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://exoduswixe.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 45428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 Aug 2025 03:50:46 GMT\r\nexpires: Sat, 29 Aug 2026 03:50:46 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 22:28:55 GMT\r\ncontent-type: font/woff2\r\nage: 15041\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45428,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45428, version 1.0","md5":"6b4b2adf4d0ee4301d394be6ecadeee3","sha1":"5facbf6ce85bb54b7478aed0ff40d7b67dfd60a4","sha256":"c5f70ddee640c270adabe47bdf8a589e237a5b5a10a5038fbc032f9f52225aae","sha512":"73f78a8a4448092fd0f477d8c4b849a7fd7babb512738874c352e8829f546443cbd7a3d431db865190a97911221fea74213822371adfca00dd2273d21a48dd58","ssdeep":"768:fympPv9IwdVTCobEyKKY1qlbGgjQhnX5sB4Gx4OVKKEoOMVN7/J2xh:fym9CXWY1qlqmOnJO4Gx4DKEo5VN1+","tlshash":"bb1301bf0376b9188250fa62aa6c3a9b765fbfb0b27608134a5b734d4c5047fde54318","first_seen":"2025-02-05T08:08:56.385262Z","last_seen":"2026-08-12T01:16:02.168642Z","times_seen":10162,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":93,"dns":12,"connect":21,"send":0,"wait":11,"receive":6,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/upload/contents/bitcoin.png","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/upload/contents/bitcoin.png HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 69477\r\nlast-modified: Wed, 20 Nov 2024 18:46:12 GMT\r\netag: \"673e2e74-10f65\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69477,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 692 x 692, 8-bit/color RGBA, non-interlaced","md5":"0a3cba4204c36cf3c2fd27cfb528dcff","sha1":"3d520dd44a3538b8a8dd0219cae67281fcf99100","sha256":"577cb3df4f6a5bf0266872f155fcf740513c44dce46249997d8112fc7b294d7c","sha512":"6c44c3d9221563d441c83a5e0661da9d8ee6f3732313fb9061e604eeafe3c0049616b550ff8af8fb8e0ee6009eb264cbac427632536e71d73c193521e70ae8d8","ssdeep":"1536:mwcgSYXcwIOhLzEKHEMOuaZ2pxoRw1Jx/clMn0SvdYa0RTPDBMh:mwchkVh4KHjuZ2Mwpk2n0S+5TVq","tlshash":"9d630263f65e6e2cc6fb46f2410b564a16c905cedc819a48fc796ef03215c488d4abbb","first_seen":"2025-05-05T11:12:30.38405Z","last_seen":"2026-04-04T09:15:14.151897Z","times_seen":5,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexsans/v22/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/ibmplexsans/v22/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://exoduswixe.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 45428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 Aug 2025 03:50:46 GMT\r\nexpires: Sat, 29 Aug 2026 03:50:46 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 22:28:55 GMT\r\ncontent-type: font/woff2\r\nage: 15041\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45428,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45428, version 1.0","md5":"6b4b2adf4d0ee4301d394be6ecadeee3","sha1":"5facbf6ce85bb54b7478aed0ff40d7b67dfd60a4","sha256":"c5f70ddee640c270adabe47bdf8a589e237a5b5a10a5038fbc032f9f52225aae","sha512":"73f78a8a4448092fd0f477d8c4b849a7fd7babb512738874c352e8829f546443cbd7a3d431db865190a97911221fea74213822371adfca00dd2273d21a48dd58","ssdeep":"768:fympPv9IwdVTCobEyKKY1qlbGgjQhnX5sB4Gx4OVKKEoOMVN7/J2xh:fym9CXWY1qlqmOnJO4Gx4DKEo5VN1+","tlshash":"bb1301bf0376b9188250fa62aa6c3a9b765fbfb0b27608134a5b734d4c5047fde54318","first_seen":"2025-02-05T08:08:56.385262Z","last_seen":"2026-08-12T01:16:02.168642Z","times_seen":10162,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":167,"dns":1,"connect":26,"send":0,"wait":8,"receive":3,"ssl":138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-29T08:01:26.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 12432\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nset-cookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; expires=Fri, 29 Aug 2025 10:01:26 GMT; Max-Age=7200; path=/; secure; samesite=lax\nexoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D; expires=Fri, 29 Aug 2025 10:01:26 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"jQuery:3.6.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83189,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (561), with CRLF, LF line terminators","md5":"1acbdc3d62ac6ad9ea1236182cc106cb","sha1":"191e9bf87bc7e5e2516940d2ae2869b08a170931","sha256":"402c1552d40c1e088df81bbed781053c7e1fa3ac4c519ce1466f741e8a164b2c","sha512":"8cbdc89f4690fdde76620f5988792afc4a7a7ba8748a8ed5df159d50aa017e684f45af18d779d15771a17b5cb0c4586f1551b8fa675903ae5231dce234d7a990","ssdeep":"768:sWmnPXEUEAb67ZNer57DgPTMYxDkQiHVpDx1hZuqtz:8nTEpNeakQkZuqR","tlshash":"25832b3128d5243342b381d56a62ab4aff968247ca0b4248b6fc9bd71ff3e11dc57d29","first_seen":"2025-08-29T08:02:00.829667Z","last_seen":"2025-08-29T08:02:00.829667Z","times_seen":1,"resource_available":false,"data":null}},"time_used":670,"timings":{"blocked":146,"dns":77,"connect":25,"send":0,"wait":377,"receive":1,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/img/background/bg.png","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/themes/light/img/background/bg.png HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/assets/themes/light/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 783980\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\netag: \"673a1a6a-bf66c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":783980,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1440 x 850, 8-bit/color RGBA, non-interlaced","md5":"eb1757976c189fb08b6e3f557105df25","sha1":"a867d55c7e86b0f44d9cc30800ce4f56ba5e8398","sha256":"2a47400c3f3420945dc473ca66fd38c9eb5dea5fa436f03189961cc6e4799403","sha512":"c20eba744d1512b3ff1ebb8ab07fc7e175f9fa206946ec9c72a1f5f59b0388f9cf464d1c14943055e172be7258e1b7dd678874aad99198353e9a14e3d6d737cd","ssdeep":"12288:ISmI3EDYqgS+95jDTf48anzjwgp5M9LZsxQsA1az+xrV+XtwNqk:ISV3EDYqgS+9dX48IjrQsxQsA1mk+XtS","tlshash":"aef423d63aaa4d28d1fbfd31fa4e993d40f7384305b36e9d86ea810863d25d356d9c02","first_seen":"2025-05-05T11:12:30.386656Z","last_seen":"2026-04-22T09:22:36.104008Z","times_seen":7,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":26,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/css/c775408/widget.css","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:29.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /css/c775408/widget.css HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:29 GMT\r\ncontent-type: text/css\r\ncontent-length: 18447\r\ncache-control: max-age=864000\r\ncontent-encoding: br\r\netag: \"68a58209-480f\"\r\nexpires: Sat, 30 Aug 2025 12:21:02 GMT\r\nlast-modified: Wed, 20 Aug 2025 08:06:33 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-08-20T12:21:02+00:00\r\nx-node: m9-up-gc10\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":113923,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9d3703823f1b24818d48934739c248b8","sha1":"50d5ef6e339a699688994b3ce4bcd2cafae682b8","sha256":"b41f916c2cbbcbc05ce9eca4e34863fbb74f3f278e77f7da73f43af1f6df7f6a","sha512":"da28d5cf3fd5a34c0a09d2742ac50894d14968f033e154e9ed24937d2c6c35bca2614e8c9aa0e3220fcf6f079e71a6007992fcd5524f2d0780b6bd0356b0583f","ssdeep":"1536:SL5vTKGyO6G6PrhmDuzyP2I2CjSQpaye6A69+KlI47UE6RFkPQeiLOcO3DX6jck6:MS8UdM2XDMOshR","tlshash":"11b3d866ead2953ce91e541ac8c5aa3ca53de502cf330daff344f3e147c66e21276909","first_seen":"2025-08-20T15:19:29.028965Z","last_seen":"2025-09-01T11:30:14.294092Z","times_seen":178,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/upload/contents/star.png","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/upload/contents/star.png HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 2264\r\nlast-modified: Tue, 19 Nov 2024 22:26:18 GMT\r\netag: \"673d108a-8d8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2264,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 82 x 82, 8-bit/color RGBA, non-interlaced","md5":"98f88095a803f6f9b1cb416762fa48d6","sha1":"69a09489fc301a0a341ba46c959366eeae97715a","sha256":"4706ec9133ebd286e321330ee9615cb4198aaf32d77362ad5a0021498294bbc8","sha512":"4fbd3cd1b5f104cd543f3b1ff7620034f7135bcec93bb228dbbc1352e81a58778f768f96cb68104e5ac83900c7f8ad57ed2b11cc3b9ed032e3d49066962f4876","ssdeep":"","tlshash":"e74117eb1094b99a5b8928adb3db9ea97afdb8fd50853d0010e094589c73c148a3d3c9","first_seen":"2025-05-05T11:12:30.421418Z","last_seen":"2026-04-22T09:22:36.099666Z","times_seen":5,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/upload/contents/why-choose-us-img-1.png","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/upload/contents/why-choose-us-img-1.png HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 339523\r\nlast-modified: Wed, 20 Nov 2024 20:43:34 GMT\r\netag: \"673e49f6-52e43\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":339523,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 540 x 396, 8-bit/color RGBA, non-interlaced","md5":"24efc54833ee25686e2717c39c9e5111","sha1":"e6bdc16696aa6c246185aa5996138cd1ed83be33","sha256":"e1405861101eddd9f5aec826aa743ea7ba6599495ccd1277df8552081e93311d","sha512":"0b77fb17e44907a46f02910998a3ee238b79bd288682f4b6b3a8a9e55110a82e52c70c74c7636a3b25fd067f3f637b0959b577a189a1ed5a121dd9607224f11a","ssdeep":"6144:mPRgyrlT+3A9utnaUREilNgDcPWk/GKIAlfMqXH8u7TMKOgF+75p:/GAAeVjjYoTIChXr7IKO5D","tlshash":"bf74238f96585e8b011c67a51e5ca6847e4f749f2d2fbb6dddc831c2782e67c3094470","first_seen":"2025-05-05T11:12:30.367108Z","last_seen":"2026-04-04T09:15:14.170907Z","times_seen":5,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":332,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/img/accordion/plus.png","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/themes/light/img/accordion/plus.png HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/assets/themes/light/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 483\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\netag: \"673a1a6a-1e3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":483,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 16-bit gray+alpha, non-interlaced","md5":"19f9de04854df326bff1140e8e8aada7","sha1":"b062171ebe43391fa92e6e1247b0286f84f44755","sha256":"661cbc940503f1add3cc310f77c83c786872260d70c2cfb969a4f046c066e548","sha512":"071ed9d857037aa8975f5a0dd6efdbe935b98ec284720257d94301cb0104469c3ed1c4f8502746a586c59b1fd5ab347558525365ff6ede9a1b0c330cfba6f2cb","ssdeep":"","tlshash":"fbf09ec5f530c5f5ca432b86013b168ae862048a6a521919f460d60c9835f8665b4650","first_seen":"2025-05-05T11:12:30.397215Z","last_seen":"2026-08-01T15:29:21.487292Z","times_seen":15,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/css/all.min.css","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:26.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/themes/light/css/all.min.css HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"673a1a6a-5e334\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":385844,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65383), with CRLF line terminators","md5":"4c99f74bd5f39f8aaf380c17075ce9f4","sha1":"9d68f26e8509e63f674796c7678426765d7c09d4","sha256":"be037a5e7a704c7dad870a9e7606566e72fbed7a90fc0544476b7ffa44645c34","sha512":"d86ca2121d7b3cbac2b20bf3176f5f7adcde48138c676235bf0cd708a6e42c83fdca2a9edb8c7f59917675647f712d3ce8d4871c854bd7863c4fe1cf26a2910f","ssdeep":"3072:fWd/pGlqoxqFAk2CkUSHICE6PJq0+YHz/RjyQU:Od/pnoxqFAarx6PJRHz/s","tlshash":"d98475a0a01d11dd7397e60f5b02b639e4b3f33ed9814a4fd1c6494e0dd3aa871867ea","first_seen":"2024-08-31T08:27:27.860596Z","last_seen":"2026-06-25T10:55:26.478581Z","times_seen":25,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/css/nouislider.min.css","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/themes/light/css/nouislider.min.css HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"673a1a6a-107c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4220,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4220), with no line terminators","md5":"9c515dc535774a0419afaab68e10afe9","sha1":"33aad322ddcf94d0ea07b56b18db27a8ef25ffff","sha256":"9dc9155cfd6331d1f5629881ac0bc63928243fa4c1d83b17ce4921b5200be0ae","sha512":"aaf78a9c6aef38285b4b301db52b3ca7af5ea0b7a0ca1fb587038c6e6a425622308fbae7e2826376632f58ebb24254ce6604e5640d0dd8f5c0ee203cff64d460","ssdeep":"48:NSpK7cvHCjzgog6H2o3VG/WOCef9/e6/vdcq+ieHFVvrMklrLo9u9lS:N5cPo3QuEF/e6/lcp/HvvrVw9wc","tlshash":"b591fd3208322f399226811c87e00ff97248c21f83733adeb714b623ba57d9d159e689","first_seen":"2023-04-11T03:18:12Z","last_seen":"2026-08-11T19:38:16.568755Z","times_seen":5538,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"node-ya-2.jivosite.com/widget/status/2651834/feqGZTqMd4/84749b6fed8fc817?","fqdn":"node-ya-2.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"158.160.45.40","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:40.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/status/2651834/feqGZTqMd4/84749b6fed8fc817? HTTP/1.1\r\nHost: node-ya-2.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://exoduswixe.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-max-age: 1728000\r\naccess-control-allow-origin: https://exoduswixe.cfd\r\naccess-control-expose-headers: X-Geoip, X-Botmode\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: frame-ancestors 'none';\r\ncontent-type: application/json; charset=utf-8\r\npragma: no-cache\r\nserver: foxy/3.5\r\nx-botmode: no\r\nx-frame-options: DENY\r\nx-geoip: NO;03;Oslo (Alna District)\r\ncontent-length: 186\r\ndate: Fri, 29 Aug 2025 08:01:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":186,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"086a3dc589249cbd16401cefcfcf1655","sha1":"a96d58e147fd5e5c6a85f77e3a96e8bec6f2af80","sha256":"cfbfe8a47f3804c21a904e103bcd872c590832421d625488f645293b74e5f764","sha512":"6f896bf65b39715eca6a9ee0a0e137479c30264ca70fbac66a3a1d83d7e51f0c17265ef8cafa9eec42daff2b25521acaaceba8e206ee785ac88cfabeacef2cbd","ssdeep":"","tlshash":"0ac0c028443d8cf60be84720b4877f8e093802011dc3db2c734af50040ff9d1510a007","first_seen":"2025-08-29T08:02:00.793343Z","last_seen":"2025-08-29T08:02:00.793343Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/c775408/locale-en-US-json.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:29.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /js/c775408/locale-en-US-json.js HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3383\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"68a5820a-d37\"\r\nlast-modified: Wed, 20 Aug 2025 08:06:34 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-08-28T12:22:32+00:00\r\nx-node: m9-up-gc229\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10509,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10482), with no line terminators","md5":"2c212727a7bacb453945e1ab7025234a","sha1":"5ff39073a6077374bb26f1f31b2428b7c0c8bb6f","sha256":"b8f45519424c6fcd31acb1d568c259fcb7297e38246ab98529e31d5d1490dde4","sha512":"8226cbb571eb34c684a6ae6b13056a7b968eb12371a25ea0a05861265b4019b0ec1170d0a2dd4a42495765a2b9e7e6a3c65aa8e86b93ba2920af050de25a058b","ssdeep":"192:2P7mk/7Obf14M6bOIpUTPqZ8Bi9FLeRJK:C7H7ObdFkOIphZ8w9FC7K","tlshash":"fd22d71ee7017f360fa613c3744f7b53b6a480e592646cb5d88c826953b9bca721778c","first_seen":"2025-08-07T16:51:42.115213Z","last_seen":"2025-10-09T00:19:26.491677Z","times_seen":878,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/upload/contents/fortnite-battle-royale-game2.png","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/upload/contents/fortnite-battle-royale-game2.png HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 271232\r\nlast-modified: Wed, 20 Nov 2024 20:48:34 GMT\r\netag: \"673e4b22-42380\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":271232,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 351 x 433, 8-bit/color RGBA, non-interlaced","md5":"87a68e38c5feb3858785000549ee6448","sha1":"5052aa387bf7610f792f237c3c1e096fd9b3170f","sha256":"654ecffff2e640d1c758c99be3044980479122d02e3c75e3bdb178de660bd75b","sha512":"14f733c297257e413f7e7aa5cd279af72af8b6bc008a2b4e643cd8898b994e8af963fc93a6c7268412fe6e530135d65dfb1b228d6fca1778aa50c1429815a31e","ssdeep":"6144:EkN95fFCI1+bffc8nR/v1Tcq6M1dt5Fhz4PXCZvDW:7Xd1+bs8nR/v14qZ7Fhz4as","tlshash":"6d4423c7210d5af05a6ca6467c4c471958ac2ed3ff9a4907e9fa5737f2029b742dce01","first_seen":"2025-05-05T11:12:30.431097Z","last_seen":"2025-11-21T07:23:40.819118Z","times_seen":4,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":277,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/img/coin/5.png","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/themes/light/img/coin/5.png HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 7514\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\netag: \"673a1a6a-1d5a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7514,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 101 x 98, 8-bit/color RGBA, non-interlaced","md5":"44580e49ac5f3d456bb26559388c60ab","sha1":"fefac9475bcffe62ef868a23d07b608ffc1b2fb8","sha256":"b5d5aaba90ab7ac10876e91ccbb3686122741389057ce9c1c192bcb412e35d57","sha512":"6f53183fa8b9d379475ef6698faa6639e5440c2344b45962662b2aab2b0ca869c00d1c7c46fd98aa68e68716f16c331b4253fce220bd0d483441284a812238cf","ssdeep":"192:OS6JS84HGSkmfp+IbBBXhn+WjNG5uMpUM9dCZm/+:xU4HGSkI+KBF+r5zBqa+","tlshash":"21f1afd358965c91d5664ca01270bbf4a2fa8d4edb3c24981210eab4ee586c764cbbc3","first_seen":"2024-06-30T06:52:28Z","last_seen":"2026-08-01T16:35:40.231558Z","times_seen":65,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/js/jquery-3.6.1.min.js","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/themes/light/js/jquery-3.6.1.min.js HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"673a1a6a-15e42\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89666,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"8f1950538c6051b90dae76087bc65424","sha1":"f88af5a8061ad3170d0a7155636e798797ef9656","sha256":"24c7030c50c1045cfefddac2d403f4bb2043b34183f6887f5c88a3e12e0236f9","sha512":"dc52b97ac0efccd9bce32718d84a8573153688329455405411d52fc0b5d3dbbaaf9e038b57921bad43115d151994123948739b329ab4713d0e60b26a67efcf85","ssdeep":"1536:RjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvv:RdeIygP3fulzcsz8jlvaDioQ47GKK","tlshash":"9593f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-03-09T23:12:28Z","last_seen":"2026-08-09T09:06:05.682151Z","times_seen":850,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexsans/v22/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/ibmplexsans/v22/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://exoduswixe.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 45428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 Aug 2025 03:50:46 GMT\r\nexpires: Sat, 29 Aug 2026 03:50:46 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 22:28:55 GMT\r\ncontent-type: font/woff2\r\nage: 15041\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45428,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45428, version 1.0","md5":"6b4b2adf4d0ee4301d394be6ecadeee3","sha1":"5facbf6ce85bb54b7478aed0ff40d7b67dfd60a4","sha256":"c5f70ddee640c270adabe47bdf8a589e237a5b5a10a5038fbc032f9f52225aae","sha512":"73f78a8a4448092fd0f477d8c4b849a7fd7babb512738874c352e8829f546443cbd7a3d431db865190a97911221fea74213822371adfca00dd2273d21a48dd58","ssdeep":"768:fympPv9IwdVTCobEyKKY1qlbGgjQhnX5sB4Gx4OVKKEoOMVN7/J2xh:fym9CXWY1qlqmOnJO4Gx4DKEo5VN1+","tlshash":"bb1301bf0376b9188250fa62aa6c3a9b765fbfb0b27608134a5b734d4c5047fde54318","first_seen":"2025-02-05T08:08:56.385262Z","last_seen":"2026-08-12T01:16:02.168642Z","times_seen":10162,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":280,"dns":0,"connect":26,"send":0,"wait":8,"receive":3,"ssl":250},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/webfonts/fa-solid-900.woff2","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/themes/light/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/assets/themes/light/css/all.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:27 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 173208\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\netag: \"673a1a6a-2a498\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":173208,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 173208, version 393.14155","md5":"c3bbb1cbf69d25aba9edc32427e6127a","sha1":"c8ef3c3be9723cf1ad975578bc65ddd04ed2fcaa","sha256":"5950d2f39fd635e5c97054053cc92e0f79c233353989f49454a03c32f897ba5a","sha512":"7178d84a72a10f3bd99efbbb270d3f2be9845447e44575bf926370ce10e99be2e840549d090e2f89e562cd7ee37267d169b33707a9d4f0dc44f982143859fa37","ssdeep":"3072:S6rqJfbvuAEjNPcnTgJsvsXh/MXb1DKLZdFeYbT6WeeR9OIkIbl:S6rqJbufRcnTUXh/Y1ebFeYbT6AcAl","tlshash":"d804235eb5062015b88607c37b37dee7c57b21de4da626b343e9c5c8b323d9042b98a7","first_seen":"2023-05-21T23:20:59Z","last_seen":"2026-08-08T21:32:01.979981Z","times_seen":491,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/get-exchange/currency","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /get-exchange/currency HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-XSRF-TOKEN: eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0=\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:28 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IktSZ3JibTJXa0pkZG0wRDdGQnBudnc9PSIsInZhbHVlIjoidjRsZ0ZXeE4yTmNBWkozUVNjd241OVN4K0pHVmliYkR3dFR0QWxFcHdjVFJpLy94MHh4T2IzWXc5YUdoVFhMQTYrYTlLQjAxd2dUNkh2NWQrWXd6VGJjWUFxalVQUWN0U0NCRTJkMVI1aW01akxvRU1oN0JwZSs2TDhha0FYaVciLCJtYWMiOiIxNjZiOTAwOWRlZGVhYjM1ZDhhZTdhYTIxOGIzYzRkYjgyZDAwZmRjYjBiYWFhYTkzYTUxYTY2MTA0Y2EzZWFkIiwidGFnIjoiIn0%3D; expires=Fri, 29 Aug 2025 10:01:27 GMT; Max-Age=7199; path=/; secure; samesite=lax\nexoduswixe_session=eyJpdiI6IlF3ZG5tbDVmNTk4Szl6TEhqR3ZIRmc9PSIsInZhbHVlIjoiWTFVa2FHUHpnSUVpVnVTVVJ2SjJUNC9LU1NLcmRmUEVKSXdKUG4yQU9jeUI1YVhWRnF5ZnNQYnJyMHdvM2NOZHA4Q2p6bkRiMFpDaHRsODYyck15YlpwY0MzcVhCWk1DbDNwbUNKejkrLzBKLzVSZmFWemdNeWJ2U29HMndUemciLCJtYWMiOiI4YTA4ZmY4MzE3MTVmNTdhYzkxM2M0ZjhkZjVhMDJkNWMxMTdlYzI4OTEyZDI2ZDIzZjRjNmQzNjRiOWIxMWM5IiwidGFnIjoiIn0%3D; expires=Fri, 29 Aug 2025 10:01:27 GMT; Max-Age=7199; path=/; httponly; samesite=lax\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5530,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fb6274c24723d2ecd352aa0a795c3071","sha1":"ff10889b92fe41219b482366ce90bd7e557bae95","sha256":"f5fbf76f50653464980da0d6987aafb2e36676b65cd6685267336cdd13282818","sha512":"5506ecbaac474a372ee34abf85aab3a4949aecfb4c50e4042de438d464ed8507572e0b42b5c1db986d33735ca466f1ad367d8cbaa707044463b0ab11c1d8dfb5","ssdeep":"96:cCQ/FgBCIfv/vcfwngq4/objJ/+gyCQ/FgBCIfv/vcfwngq4/obMCQ/FgBCGJ/+8:c3FgBjPvceWobjt+gy3FgBjPvceWobMI","tlshash":"0ab18aab3e65fc79c67805d21e6f7564612a320b74cfdde4bbfc884880dd670441ae22","first_seen":"2025-08-29T08:02:00.844397Z","last_seen":"2025-08-29T08:02:00.844397Z","times_seen":1,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/css/select2.min.css","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/themes/light/css/select2.min.css HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"673a1a6a-3f89\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16265,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16263), with CRLF line terminators","md5":"bb4f601b18b642bda193fb02d8845d94","sha1":"dd955de114f23a39b7ce95f62c56b77aed15f7ed","sha256":"4a7641c6c583062a068c15438922a6ab5087da847d51d18b36929b013f106671","sha512":"e9be22785e1fe87e33b3fc557656c0c0985687ddcd080c303c8935464f65be56c77ec211d6e792a57c6f4653b5e6a510d06ee6f075a16e34497f645062066e09","ssdeep":"192:1EaNSrenTfc3aq6J5wV1Q9CPxWqAUJKk3BcH9t3E:1keTfXnS1Q9sWqbxRcdpE","tlshash":"ef72d935bacc2239b0bf8e7f6cf2b4946629dd5fc4111b9ab8e9e154c8e04540a4b60f","first_seen":"2023-04-27T00:33:01Z","last_seen":"2026-08-11T16:33:19.368659Z","times_seen":1880,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/img/coin/coin-2.png","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/themes/light/img/coin/coin-2.png HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 34661\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\netag: \"673a1a6a-8765\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34661,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 174 x 278, 8-bit/color RGBA, non-interlaced","md5":"b6a10731d3f1e5001282512927998784","sha1":"6795f4a91880ac24158ff30c6f4bccb758042e29","sha256":"19318e54ea23b7356ac9796d2f79d31c75d17c817939656a84996fed44e6b731","sha512":"e87e53a65a390310fa25d893bdbcf48e1c6ca71be683163e6a47815a52f65a116b93188bde03c9a91e21d536c30fdc947296fca345824ad026ef8766e653264f","ssdeep":"768:KZF7C//2CJ5n1xSp7KuyIrBNFINLMtMVjYixmJksuEp53Kvj+UALKelYB:MC//2u5UJyoBYpMtyjYeCubvxAGMYB","tlshash":"a8f2f18c524fb704a6dbd0ca1c409479b2605eea76884337d1ef35daddf13498a79f28","first_seen":"2025-05-05T11:12:30.43596Z","last_seen":"2026-04-22T09:22:36.121688Z","times_seen":10,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/upload/contents/corner-half.png","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/upload/contents/corner-half.png HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 800\r\nlast-modified: Wed, 20 Nov 2024 18:24:40 GMT\r\netag: \"673e2968-320\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":800,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 157 x 156, 8-bit/color RGBA, non-interlaced","md5":"fa51ba8fe68387d3f3c89747ddb40f12","sha1":"fbf3a4526f064781234f818e6c6de1e01949d1a7","sha256":"fdee62e548aaa1659b374bfdc16bfaccc2449b9c0b042b69ee6a9914d6622f07","sha512":"b77dfe743ac0e8dfdcd722c32adf87de763f7ab2287778e38a775aa9e2a963b270e909051fb9cf7e890196c4d7c8adb35e5e8dacc73e7d0c283a4496b049419e","ssdeep":"","tlshash":"c9010aefe605eb6e958c4182027e01307c6b1fed0e15f6661c586f00062accc0c87ebb","first_seen":"2025-05-05T11:12:30.380168Z","last_seen":"2026-04-04T09:15:14.158151Z","times_seen":5,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/webfonts/fa-regular-400.woff2","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/themes/light/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/assets/themes/light/css/all.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:27 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 203900\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\netag: \"673a1a6a-31c7c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":203900,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 203900, version 393.14155","md5":"e81b9be2e169ee5a1c4e55d0e8df1038","sha1":"e50fd62b111e7ed9d15c24d5bd360c58f71f40b5","sha256":"5a220cca1dd85aed4ca1ba81e1daedd4f4d5364d47ce852c4718d9da9aef9df7","sha512":"a806ae266ccd4ac35f00e5f612bdae7dcec937e3a02d20d6b60235744ba709182470688c4f3932e7fe79dff7a60c3bdc07955ee3422c5a8f0f694876201d2be7","ssdeep":"6144:hULA6j0FlOhQJPXaJQ8MG8jwS+C6NhGqNhcNHOwSwB:x6j0FlLJPq+8b8jwpPzNC9","tlshash":"ba1412546c833bca9da3504551bdb2c1ee27a08964acc6842005e7cfd7fd931bba3a77","first_seen":"2023-05-21T23:20:59Z","last_seen":"2026-08-01T15:29:21.424469Z","times_seen":224,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":117,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/themes/light/css/slick.css","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:26.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/themes/light/css/slick.css HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"673a1a6a-77b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1915,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"63ff27bb7abb9841e71b2a4da4c1e8f7","sha1":"6aa5fedfb15186b5dca0c63e23431dce39b73ba8","sha256":"47c9f845268187ce39ae6a98b76cf4a2302c18d31a1825c283288aa55f9b7b0e","sha512":"54219624bd73c8713094e925d62df39fef38723413d19f55c3f10acb0f14f782eb8a35a0714d8aedc8f3a5fb57b8dcc5dac6164b07dd0262808a651638bebc89","ssdeep":"","tlshash":"f9412b9c0552c1d68733c5544fd38649edefa0930c251698bacc47098fbf6e8a9c5e77","first_seen":"2025-05-05T11:12:30.401068Z","last_seen":"2026-05-04T17:15:41.848509Z","times_seen":11,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoduswixe.cfd/assets/upload/contents/vAf4LgvZmVaZRSdexq1QARoa1yAoNe.avif","fqdn":"exoduswixe.cfd","domain":"exoduswixe.cfd","tld":"cfd"},"ip":{"addr":"91.121.44.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoduswixe.cfd/","date":"2025-08-29T08:01:27.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoduswixe.cfd","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 15:27:13 GMT","end":"Fri, 14 Nov 2025 15:27:12 GMT"},"fingerprint":{"sha1":"28:2E:78:35:47:72:22:8F:C8:0C:CB:10:39:25:9D:4F:DC:2A:98:D6","sha256":"EE:BE:00:DF:B1:D5:87:BD:32:D7:3E:11:C3:F5:15:BA:E1:95:F1:37:5E:41:0C:82:01:46:0F:25:C1:BC:DF:36"}}},"request":{"raw":"GET /assets/upload/contents/vAf4LgvZmVaZRSdexq1QARoa1yAoNe.avif HTTP/1.1\r\nHost: exoduswixe.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exoduswixe.cfd/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJ6bm9sWTFvdDNmOUxyVWIycCsvdEE9PSIsInZhbHVlIjoiOVcxdUlQVSs3amFRNVBKMks4d0NGZkNvVFprY0RSVXZQczNGTjhId0FMMktpUmd3b1RmSnE1dHBRc3NEVFFTcjRhaU1pZmtxSkhvTVYvcUxMblRpdU1ja0xZMDBsVGZlTEd5cnZzVXNBbGVhRCtDbEVMdmVNTE5IR3ZhMnE4ZkkiLCJtYWMiOiJhNGI1NWUzNmRmOGQwOGU0ZGI4NTI5YmE3Njk2YTQ1MmMyOTM2NWExMzc0MjgyODFiYzNhYjI4YWFjNWY3MWZiIiwidGFnIjoiIn0%3D; exoduswixe_session=eyJpdiI6ImRURXZxY2NkbWI2b2J5enFXQzM3dUE9PSIsInZhbHVlIjoiVmJtNmM5ZS9PcE9sNU5UdE9lWlVBaTdTU0lRcnlDb1JUWWlXSWxoOEtGSHBNWUdaTzQxa1BTUFhPVWs4cXM0UkNJQXd2T29qZ1k1d2Y5Tkk1K1lTVGk5MkpyTUdtZlZjd29wTW16czl0L0U0dElIWTZUUmZCWGNNcDh2NDVhM3oiLCJtYWMiOiI2M2EzN2EwNzQ2MjZiNTJlZjIzOTcxOGNjMzRlMGE3MDkzMWFlNWFkYzcwMDI3YTBjYzdhNDM2YjhmYmJiY2JkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 08:01:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 5240\r\nlast-modified: Sun, 17 Nov 2024 16:31:38 GMT\r\netag: \"673a1a6a-1478\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5240,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"e2a98b4d3162cb4dc3877c0059f97c53","sha1":"9f90fc6dc8e9a1c237e7a53348155bdcb322027e","sha256":"5397f80793fdcef0e5556bde522cb5bce5ce0be4dbb7b36a5200c9b125c45b00","sha512":"d12af7507ea85fbea9573877d24b8d44b575b9a5a648970ea62f311b1a8e7b2b27a323a985d151f3778adb696548f31429512bfce774d853c4f7af5f9042da46","ssdeep":"96:+cLjWRXeg7kmf2PJ+kLNf026YIM3DmIArzSVvrxs9ki:+WiFegQQUNf7IeKpS5r/i","tlshash":"28b1af26b7c96c9fe3074abe848ba3e9001449405584f32e85e5d8765d32fb385fc68f","first_seen":"2025-05-05T11:12:30.395343Z","last_seen":"2025-11-21T07:23:40.841275Z","times_seen":4,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}