{"report_id":"7d2c8b70-d669-4d59-9d2e-7ca2decf9b10","version":0,"status":"done","tags":[],"date":"2026-08-18T12:28:14Z","url":{"schema":"https","addr":"exoder.net/","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"exoder.net/","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"title":"Exoder Your Ultimate Cryptocurrency Trading and Investment Platform","dom":{"size":53976,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1807)","md5":"56a6833c2e780a9c311c5c6cb6ca00aa","sha1":"08530496760d8f6f66e381be0583beeadff4b73e","sha256":"73b91f9d97a948970a8181606f74379c46352717c2625a92e7361f019080bc5a","sha512":"9386209f42fd47af382842ff6ef6d0959fbe3a3b1390fb318c8ac12d9780c8854d6752de2405e2b3c613f9bebbdcf3598570686fb60de337ebf814729c67db92","ssdeep":"384:BK4we574iBPpYwRwbTwerwlHwpw3mgm3mCmzm4mDm+mkZUmSmG7KZsNtimtog03K:vvOVKHIFZwBNEmx03FZFJBmCHYz","tlshash":"24336131a3f0687a51c291c5fb21669b7e94e507a70b85a5b3fc4bc08f83e86cc5399d","dom_hash":"domhash04cdab90704ad8d9a987a896210e8ce0","first_seen":"2026-08-18T12:28:17.160934Z","last_seen":"2026-08-18T12:28:17.160934Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"exoder.net/","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-22T12:28:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"exoder.net","ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-20","domain_rank":0,"first_seen":"2026-08-18T12:09:47.888859Z","last_seen":"2026-08-18T12:09:47.888859Z","alert_count":63,"request_count":63,"received_data":2094435,"sent_data":31675,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-16T22:23:57.509837Z","alert_count":0,"request_count":1,"received_data":28516,"sent_data":538,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-16T22:20:46.906465Z","alert_count":0,"request_count":6,"received_data":185574,"sent_data":3264,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"exoder.net/landings/2/js/header.js","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6346713cce7e17259e64d496ba485768","sha1":"245f3809552985258772d5749a57198898707caa","sha256":"078e59fd4c57b2ecddabd2a0fb0a1157a3bfd7475957f0f67d3adb0dfd163020","sha512":"1ffc08826328cb2ae820caa60f29b684558cf851ee5f70d9c0f0e501cd714498ad7b5c352284d3e913ae0d0ca253fd3001bea86dc3f20965258a0b61233e224d","ssdeep":"","tlshash":"1901d22667047d7d40bb0bafe7e20e94fb2590d79461403730ad898f0fe25d1a6a6af0","size":764,"data":"","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.162952Z","times_seen":150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/js/cryptocurrencies.js","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"51b02e628699f5f855748fc9eedfeba2","sha1":"feea5b063498b5066330f88e14057833608af73e","sha256":"9ab7d478cfd3ff2c357642374e22e3d6ae9694dfb56111b14ee0a426cf8780c3","sha512":"36e10d16ba0e16c93b8c7f5dab77f57ff1a5d430a3c974e0fe9d67ce0ddea5fda3d8b3f57a1676175bfc97c86fbeff085a05be83f7a351364a3bd2eca75b1921","ssdeep":"","tlshash":"dde09285300225509e6f7bab5437864cb96b002e26374af4b92e44a85f32d52739bfe8","size":398,"data":"","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.180191Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/js/coins.js","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"21bea04bbd6e839aa4e3452becf1cd2d","sha1":"e5d414dbfc40798395d776c67121b0823b32dfbe","sha256":"5a8a42bf4a4a3d155ec9391fe224bd0ef1c200da06b9519ee92c7e9e2d8af968","sha512":"2f3e3d5771183c58bbed7b885d8816c68751708182eebe28ed845bfbd34037958eb4f8263be35acc5005d3b5aa7c87c91372c8f0a3396e7c2cf101a6e445b8d6","ssdeep":"","tlshash":"0ed05ea28220d45e5437597a6d684b0ae2a2a79b51a90993f1fc0aa59f360144086fd9","size":276,"data":"","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.170066Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/assets/js/jquery-3.4.1.min.js","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6b6350ee94a3ea74595c065cbf58af0","sha1":"b15f7cfa79519756dff1ad22553fd0ed09024343","sha256":"412b8ff9c5ab32b9019fcd84bcd4a54c0e265a14528474f4ee45b27a20abeaeb","sha512":"f5a9c6aee347c155e4dd796c51716b7447bc22ae44741fceb6bcfee02f955ad4063d38613f241108a3e1f3e1f540fcaed8d9848b9a0fb823c00955cf9a19efad","ssdeep":"1536:jTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmt:jgZm0H5HO5+gCKWZyPmHQ47GKR","tlshash":"a08319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88147,"data":"","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-08-19T20:12:36.775529Z","times_seen":5650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/assets/js/app.min.js","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d07fddad2dbb2e1b33663063df276af3","sha1":"ff05ef5d12cab598273743b8ecba860d5fe3eb19","sha256":"84c100eb29667fada78eac7c2ef3831d2dfa9d01827c00f9a8c07a8da28231ee","sha512":"497e5b7368287addb7d29b29b80a3f89ee35f8b1fb5156b0b02bf27fbc6b238fbe78d4554ec7f879b982da6ff9b1e4750f1daf058c5f921c5032eec06afd48c6","ssdeep":"","tlshash":"c57122791314b93c02a30ad7e6e6aad07a343886d5411070a8b9ccaf1fd98d39371ff6","size":3615,"data":"","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-08-18T17:57:33.588432Z","times_seen":466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/assets/js/toastr.js","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a02ccbbcf3073559037a62af82bfdd24","sha1":"4d5f7b3f3f280698aa26b10e1d7c6dd5708d64aa","sha256":"27f959b17ddfe77ca20a31b9950ebc3fbe8030c3ac376eec7355b2d7925e364c","sha512":"35acaadcc160935be74fb1492b1b0ca205aed6b61d8bd8edf4e26254c7772da02941ec53de59e3d66ce1695cc12de4ed9cf32b750e04659c7c0e2521b4697f22","ssdeep":"192:JJZWM9gzM3t3QrpJvxl6Xs8cZ9tID6CqQwPjOoOg6yS21tl3jWq5T14:JY45Kk7cZDItqLNO6S21tNA","tlshash":"deb20a08695263654cb7737c8aab800cfb769323458a96067dbc92d82f70714d6f6fec","size":24854,"data":"","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-08-18T17:57:33.599303Z","times_seen":977,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/npm/swiper%409/swiper-bundle.min.js","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6169ccf7a9d58ed680db82c97f26746","sha1":"4ab349710f1444e3cac40a1c17def4173ebcd9eb","sha256":"81242d1bdd179ae12bcee722a29eebf2f5b7884eb050e5dc1670fb4361c61370","sha512":"f02d5d5aef52ca3787669abed1e0a1cecf41dd73d463d675329772d7dc20bcbaf2f75c25951e678a18afa8658515bfe2ed43e869e8a16d62dc8d57ad127b5210","ssdeep":"1536:DIJQfGP7LP8NEuWGKF+IlzholxU/2Bkt+9SD8jv1nTHlU9ymp8Mj0HEOS5hAsVua:EJCN+TXD2BkQZFU9tp8Mj0k95h5cpnk","tlshash":"fbd3f8896221b57646e316db93e4c221a3b50544b80ac8f470bd4c9f597ec9813feffa","size":140575,"data":"","first_seen":"2023-07-20T03:42:03Z","last_seen":"2026-08-19T04:11:19.046273Z","times_seen":750,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"exoder.net/landings/2/js/header.js","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.730Z","timestamp":1787056066730,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/js/header.js HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rOI3GLYH76Tjyay7dOLCFmih%2Ff7FM%2BoJJC73ox0ogpDL%2FGBlsRnXuiW4XWfmwdnS9%2BcaoMXHOV5g6KWekRgJC1H7Lw139voJiUMWhSB6zhtF0W8yELHSb9ZiO1Rq\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea210b74b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":764,"size_decoded":1115,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"6346713cce7e17259e64d496ba485768","sha1":"245f3809552985258772d5749a57198898707caa","sha256":"078e59fd4c57b2ecddabd2a0fb0a1157a3bfd7475957f0f67d3adb0dfd163020","sha512":"1ffc08826328cb2ae820caa60f29b684558cf851ee5f70d9c0f0e501cd714498ad7b5c352284d3e913ae0d0ca253fd3001bea86dc3f20965258a0b61233e224d","ssdeep":"","tlshash":"1901d22667047d7d40bb0bafe7e20e94fb2590d79461403730ad898f0fe25d1a6a6af0","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.162952Z","times_seen":150,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/assets/img/cryptoicons/btc.svg","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.748Z","timestamp":1787056066748,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /assets/img/cryptoicons/btc.svg HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hOJeQakOTwGGjJkdau%2BZ1n1eoKjFFMTjvgxNOMSJDPZIm87xLVq7DTpZhJy9FJl%2FNf%2FJqQt2n4ydNvLN5owxNZ7uy66fnti4gXo%2FcORpbVXmHEuTDxguf4yS9P8D\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea212b7eb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3705,"size_decoded":2615,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"1e959a957e7815d3c97ffcfa927a6ac3","sha1":"be033b9cbd925aaab0b6244f715c5d3f34d1cd5e","sha256":"af4022bb60633db1a667a52e1746eeefe6384b81825b13155a93b47f88cdc3ed","sha512":"244d59641af74b45d0b9079ccf7a3f9c241e8888a6fb15373140a730cb21f7fddcb356ccac93eb91e1c854e848f7be1ae92987176e5924ac8bd90d456014b658","ssdeep":"","tlshash":"7671b799e3fd84d6e31c8564ede1250a875c609342040d08bead5ca4efa25d2f77bb98","first_seen":"2023-10-25T05:58:22Z","last_seen":"2026-08-18T17:57:33.600706Z","times_seen":400,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/images/freedom/perfomance.webp","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.761Z","timestamp":1787056066761,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/images/freedom/perfomance.webp HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/webp;charset=UTF-8\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dLXfNf%2FsQVyoqEg7sGDx73jQzQPxrOSA5zNTV2lH0nLVd2pgk0J5CWpZJTG3MjdTCu0cw3ca3GelTlER0qlEidF7T%2Felya3nIGkikcoo3dcAPHRafLGn0V%2FQol%2BT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2d0ea213b8cb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5122\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5122,"size_decoded":5964,"mime_type":"image/webp; charset=UTF-8","magic":"RIFF (little-endian) data, Web/P image","md5":"1465203161da79539e94c153dffdc879","sha1":"10fa444d67e2e0c3af3c0ecb1c22b87cfa9e3bbf","sha256":"4f77383d38b8ce3445f5e70fbc23c73968135d70292c76a05ef7d2c8de834e77","sha512":"792888bff9bf9fd7f50e7668af4e53b6f6ff3c3dd0dde6b0448014eaec9e7369dfe0a78051f2fd1f42bf4b961ede9f2701f61d2fa8178056870ac8864ecb505c","ssdeep":"96:S+eZgMQ/M6/CjWVl1b17Sqc9Lr/P/yRhcr94UFNYbc/uUJ0HdaG4eV:S+eZg//z6sQd7aR6rGwNQcml","tlshash":"57b18e1d877389749f6b59d4f56064444817e785b8f44e60484f36aadb8c3b333bf806","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.164065Z","times_seen":68,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/images/started/create-img.png","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.765Z","timestamp":1787056066765,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/images/started/create-img.png HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/png;charset=UTF-8\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yt7wEAKeNTVA3bYl%2BPmXsldVj0TX%2Ba%2F1M%2B9rr91xqYUIDvTlvf2B2mjZ34oWq1NqW0c7zXX%2BXTy5G6iLQPpKRAJoUOkiiToJi%2B4LaQ9j5hmwvUdGYI6S5uT7YdCL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2d0ea214b8fb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10001\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10001,"size_decoded":10847,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 246 x 246, 8-bit colormap, non-interlaced","md5":"609b353141db60a282b2d4e6c37efb25","sha1":"de5c5ae32aca44778d16ba3d13cb6ee803d8f725","sha256":"82fdf6076d14bc51adcd40d44b8513799469b07bfbf6913279f4c32bb71d3702","sha512":"9db70bc2a8a15ef46d7fc5f333df05f73e4e0aa3413dc8248d138213f23bd82da2f885fc9a70bd36016f5cb9a68543909da7de79a9a490c32a1912accb27ff53","ssdeep":"192:ladHW88BhJCjghXrgomW45i6cVuIAkF0b38euAitZFPhTd7EVNQCJ59Lqwz:EHW2kgo45gAkF0D8euAi5pxsGSuI","tlshash":"3b22bfb7492022bca174d47a3f56cd494caa009b0527f2f8ba8dbbe1a1b86712c5c563","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.164589Z","times_seen":67,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/images/started/start-img.png","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.766Z","timestamp":1787056066766,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/images/started/start-img.png HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/png;charset=UTF-8\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RQoy4Rbn9FJbmt%2FD2NFwfN%2BnjsyqdRaZbSUmvsu2Lf9uaQkX%2BASrR7DwVu%2FIPU%2B03dDf0FmY3gNB07pg%2Bb317Abtey8LCNbr53H7YPdQtrU7v5lQdagNLmyxzxRz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2d0ea214b91b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8629\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8629,"size_decoded":9474,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 247 x 246, 8-bit colormap, non-interlaced","md5":"b6b7c1963695a05d15e2b7e5580df1ab","sha1":"e0448cc40b6bf71de3bf80a534cf1b5fbb0db0d2","sha256":"e62f1c56366384bfde5bab4b4d8e3808188a667d882b516fa4b20318ab534a8b","sha512":"56847e8b0ede5ae327be92a478d8b9d8362e8a1d6c65d3c020e238f996d6161ccc6c115f2fd9d08447868da3c5126b83cae9d739ff72ac3654f118d8230898b0","ssdeep":"192:Qbeai4BodqBGCemlWOiI9NkjZVi/LQZeR7gjztRLD8x2:Qi+BwLmkJmNaZALGsKzt58x2","tlshash":"30029ea2de86ae62f727c87f085302ef4003d3fc45f18692eb3827566cd190ac95bc61","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.165098Z","times_seen":67,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/images/partners/forbes.svg","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.769Z","timestamp":1787056066769,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/images/partners/forbes.svg HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UuAtjgtV%2BjWBcb8cf%2Ft5p4teqa2I3imKYLUsVwNjPvBVxzh7fG4GPtImkIMS0SPIuY%2FrIunyx7DuFump9bkkYP9WPEjzukDl117AKUsYJZf1qpQzdqKLzPEIJ7g%2F\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea214b94b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3945,"size_decoded":2499,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"43f5993a691f1fc6df4929c3e6ca86f5","sha1":"967ee4254ca6464a2153d1b8af08938f0bd40f4a","sha256":"c00116651de03c7bf644e1099e7318171df278fac53c2c5ea4ec1c6e35d814c0","sha512":"b3730c736bcba661832b740ab8fe6e09170edd1710ab65b41385c881d48e2d1d6ac5716d6aeae5291bdf856da1ed90b2cc9411534b4619659956823d1f42de3b","ssdeep":"","tlshash":"3681a8e5227889bcf80593bdd71970f0641264ff2d65caa5e3b43e9d794458e8c58cc3","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.165618Z","times_seen":67,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/images/home/iph.png","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.742Z","timestamp":1787056066742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/images/home/iph.png HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/png;charset=UTF-8\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lXV5kdMVuMMWhbpcsq132AJtxg00giYjIbFXYOq4RQdJHwmiR0rRr5%2FUo%2BqmmV9DlsMGdIzpxCiKH2qd%2BXZKTfVt3geqVEWDldK7lHd7aWBSUzoYRmFdGVDvI8wQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2d0ea211b78b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 50269\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50269,"size_decoded":51109,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 398 x 755, 8-bit colormap, non-interlaced","md5":"a4be776bab4c6d502da0b79b6a42f2f1","sha1":"a51c671ac1ed511c35d7f568b0693554d50b88f4","sha256":"f66771190d94703da5d3ffd94d1a8e6a38aa0d938b940f1b6f011b3c0952cfdf","sha512":"37af03adcb031fe2eee573b4b710908c0c85b9986b675e40cab813001b12a8760d452f344f982a538cc24b0dd04ad53a3d25ad12db967b36c08d08a3dedce13d","ssdeep":"768:4JnYl7M0/+SxI2IwK4OYAvw+StuD1QTax8oCCyzXTAMVlI3dFeKbnbycmpcPfU:91V+SxIvUUStY1Q7oZyzjAXNUI+cmpyU","tlshash":"223301778a00603ab436786a275318b53ce1fd7db714eed257d13016ac7aabd840da73","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.166233Z","times_seen":68,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/images/freedom/arrow-two.svg","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.941Z","timestamp":1787056066941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/images/freedom/arrow-two.svg HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/landings/2/style/freedom.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:47 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ORJh0xTm3%2BWQSTIimmLCdSfMY23vAPsQyOy2CqonH0b3Fkw%2BI%2FQZhC%2BrnRVtmVO%2FcET1uUczut7w4eW5kmHgG8mcsrsuKsF2S3BChn2kKQRhNrN01%2B4bHXfS%2FHS\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea225ba8b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":497,"size_decoded":1176,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"8668bc4b0b64c97b5d1db9099d11de6a","sha1":"efb17ecab33970b1b7c119414964671c921bf535","sha256":"7f5f8d446e9031a18731f07867b999b0046faeea5e117a47c83e86e8f70dc9b7","sha512":"77dee1d1a3c552c0229e6a91076b9f6fe567e2cc027afc2d25d05a0d9617ec2ec2a8a7f6e4eeb541e2264ed80a787a53e5f50f692fb29f054817c682c802f234","ssdeep":"","tlshash":"17f09529725dac27f11dc18ce588d864106611d25ed841d1c5c1bf3f691c8d738155e4","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.166793Z","times_seen":66,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/assets/img/cryptoicons/bch.svg","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.757Z","timestamp":1787056066757,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /assets/img/cryptoicons/bch.svg HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F3FpxgMKlD5Dkzri5xt%2FiyBAoFzK6KkG%2Fyg1zFDgxGKhaqNDyocoMqdoCvO%2FEQBdFotHp%2BTakXhFWqCNHOAkxZ88wBA87YiDYty%2Fx43IrYj6%2FPD5pqxUfFo8hZs9\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea213b88b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1216,"size_decoded":1502,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"08ba28bf3baad9e9d8b052b67491a857","sha1":"c9d7a01dd78d35dab7c9ef244df783459db22487","sha256":"0d3126a3953282479600ad2e7dfbf1ecace0456416bc25428894c5c7b7d1dc3b","sha512":"f0f78e36085c35ebcb92608ccf15397ed0531aada7d284ac09e992a29a6f61fc81b35245c1b320edd02496f774918dd2977eb18e7ad07bdeb1aebc45cda56a0f","ssdeep":"","tlshash":"8321cdac62c8cea84928c7f56d25d0b0d59c92df6458f30ed444d236759a0fd65e0f06","first_seen":"2023-11-19T01:14:23Z","last_seen":"2026-08-18T17:57:33.615297Z","times_seen":218,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/images/freedom/arrow-one.svg","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.940Z","timestamp":1787056066940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/images/freedom/arrow-one.svg HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/landings/2/style/freedom.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VSjzOmC5Lp2Q7u5EoMl%2BZrr0qMA8GSCM00k1Z1W7DpL6omBI2i5LxZ8x6KXNrHFBnm6WU4E%2FYP%2BlxH9lOGDx2SW6UXBu22RJkLG5E1El50mqZgQ7ED%2B0nk%2Bc3sGY\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea225ba7b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":500,"size_decoded":1170,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"1a9799be38e55f40c1eab2efc221cf15","sha1":"a2ca761a7d3b6a8291ed0f63d7e2020a540e509b","sha256":"5094327d21440a9c4e7e5d8a4ec51b73656cf6f55921fd4ad4d5f000a124b971","sha512":"6ccf0367501ff0f048d36929fe76382ace3c7774dee4b414111e8f47efb087c95dc9a255ec6b294aebef1cdac219996d8db3c78d0cf9b7e8cf52273491177954","ssdeep":"","tlshash":"97f09535530a6c2be059c1ccd944e454105b41d3b6e9c190d4c1ff1e361c4e7382d1d4","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.167824Z","times_seen":66,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/style/coins.css","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.700Z","timestamp":1787056066700,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/style/coins.css HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yHC3g6YSze%2BiqXk3iG5XIt5UDfDi%2BTV3uhZ3F5NKDZnFBvzrXSVsB7BZCKskvG8KdDz4Pmd4Fzr4IV6uOguevLzkMuTZR3m4MauaQb8Hv6S6McpTZFrv3sMQ6WJs\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea20db65b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2363,"size_decoded":1607,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"66055297d5bac4b84c66df9d8300ab16","sha1":"6154fcdc547bb55eced655bb78d420dbd976ded3","sha256":"8196c598a2b30fb2c9fdfc918fc52b673de1957e43ced37ca69859022efe0c12","sha512":"1186b9af541e834e9e9b527c562a943a948f96bd1975dd0f8612ea33209e0cb8bf18ff0be3330320288ebbb6479d3198488374715b54d847b5a55921036dac8c","ssdeep":"","tlshash":"7241cc28c742984bb03755f427b1560ee6c808a3870a82bbb7d472b1dfb90a84535fcc","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.169009Z","times_seen":60,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/style/footer.css","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.714Z","timestamp":1787056066714,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/style/footer.css HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FY6cCRHXix%2BV6hfbC2ZUoqa8fl9Amf4h3bv3X6SbzUgwJlfv%2FdkCP8ZKfLotaKWd6yrw%2Bipjmr9fewE04XIjxRISK87LSwbOKjSwxSre804%2BDqzixWt5tHTCQUvw\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea20fb6db4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2931,"size_decoded":1724,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"2847767e8e5ebb08ae0b7647bcd3b87d","sha1":"26f2d1260ece807de113383b858ad0c22ed5ae58","sha256":"7b1dc5720c180f2817197d8f15409de31b4e821b32f54d09e93fa192736cc26d","sha512":"bba885069265ce68f587555e974d7bd7ba6550d15aba8a995e763be0e155c87a6e7443dae2198d4583aaf314b3f44948ca0c971986db081edd0d2ab3046570ff","ssdeep":"","tlshash":"b5517b2dfa21601eb1776a78fbb30245e7689013530681b4fedc33449fb615a9961fcd","first_seen":"2024-08-20T12:48:50.774291Z","last_seen":"2026-08-18T12:28:17.169594Z","times_seen":55,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/js/coins.js","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.733Z","timestamp":1787056066733,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/js/coins.js HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LUZKddnGOFyOLPGMccyIoLD07oSb7SWm6%2B4oHGPVqZC8sAh8y4OqhUs7GxYWKv5KLJuM%2FruGt8VSD82cVLgPSYM7324VPDutQksm8ZFe7jKhQ9X00emKGKNXeOVG\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea211b76b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":276,"size_decoded":999,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"21bea04bbd6e839aa4e3452becf1cd2d","sha1":"e5d414dbfc40798395d776c67121b0823b32dfbe","sha256":"5a8a42bf4a4a3d155ec9391fe224bd0ef1c200da06b9519ee92c7e9e2d8af968","sha512":"2f3e3d5771183c58bbed7b885d8816c68751708182eebe28ed845bfbd34037958eb4f8263be35acc5005d3b5aa7c87c91372c8f0a3396e7c2cf101a6e445b8d6","ssdeep":"","tlshash":"0ed05ea28220d45e5437597a6d684b0ae2a2a79b51a90993f1fc0aa59f360144086fd9","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.170066Z","times_seen":61,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/assets/img/cryptoicons/doge.svg","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.756Z","timestamp":1787056066756,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /assets/img/cryptoicons/doge.svg HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eS%2B8yuK0ld6N3tqOXlSBxXywuj%2BuiqPWjLVlSqsJGsFN92b2mCApby2%2BHu2p%2FwPd2JVDqhyZYq8kvBeYJQDQqNN46AiMVMAAyrHCtF1HQXh7UxIqrjN8E2i463t2\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea213b87b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48154,"size_decoded":18944,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"67d2dfdb52eef2b80841495b78f1018f","sha1":"e6936e824ce5c278de5f8d7b501089499dabb680","sha256":"b6cb5aced522b0baafd4f2e9f965ec537a4d6af3e6abbbde71adaa3f502cf2ad","sha512":"5b6edd3c5cebbcd506cc31e647dfc89ad60072ab02213c7ae2a64a8bfa3401c8494068bd58ab44d98c0626567c80db60be19cb8c98bb8367a689af6f7084095c","ssdeep":"768:hf0GUz54Ieqz06WiyE7ujsxZHiU4BwGB6SoBj5I2Pns2v+TihJ:+pD1WirujsxZfeMIqqiL","tlshash":"3d23cc3dc358e3399c9387bcab2aa0e6f4ce55afc1e0d3985169c4b073911d8a38d9d5","first_seen":"2023-05-24T12:00:49Z","last_seen":"2026-08-18T17:57:33.591762Z","times_seen":448,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/images/freedom/security.webp","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.760Z","timestamp":1787056066760,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/images/freedom/security.webp HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/webp;charset=UTF-8\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EHrjZsnlB8OcW%2BlZQV0A9yTfF8YE3N6xriG%2Fzw9dqoeGfuNOGbOC4ZlF54jffJQ4CgQ7w0Ok7f5OPXHhfs36oOa%2FowWDZQlPPqOJapdD6J2G4M3F9lj2KZw4ERI3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2d0ea213b8bb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3728\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3728,"size_decoded":4568,"mime_type":"image/webp; charset=UTF-8","magic":"RIFF (little-endian) data, Web/P image","md5":"df23ddf266ed5ad79f34a44788452d39","sha1":"05ddf4c8f21bdaedf1cb4c26dfc160b6151ad835","sha256":"cbc1aa091a1b6cab2bc81cfd7f1ff51fdc4a3e89818edcdd4ca9b962a0b8ea05","sha512":"9f444b7efbcb0bce4f6548da41062b3c6fe5b126cae2717d32bf77441b0b0255a142af97f73f0f8e0d36583da84a19422010d2b352829160bff309c16ea1b09e","ssdeep":"","tlshash":"31715b1159d6c55ed693c0320d90fc2af611d38f89482b1835d1ae03327d88677babaa","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.171042Z","times_seen":68,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/images/partners/insider.svg","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.774Z","timestamp":1787056066774,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/images/partners/insider.svg HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M6jpMMzG0feODHRZ%2Br9%2BWC6FAVhSc5JYcqlt5M9bEVecj8in4K4Hp5sjxWe%2BQYJR9YPUrvwIwWjzCDlMdfmbOI0suALY%2FPjzIQ90MAh6cqxGNjWMVdCXqs7sGtyI\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea215b98b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14231,"size_decoded":5848,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"13d944a26cf366056994767f49f1ca0a","sha1":"3cfcde16c3d8691db03f996ffdc4806ecce858f0","sha256":"73c31e983f2f783f76667e930a287ae4302a81779b693ef302bddf817f54c11b","sha512":"bb400b4261e5cd215bc2751da4a79b13502808cf837e286a960cfa8c93f33c2a02234ef2c62cf6214b5a075471ca4b4ce0b7f705390cd5ed53d2b97151aaf52c","ssdeep":"384:HJW5uUh0GOFQMFKyO4Ewa6ywViob+0qDD:pWROF3FK/INbFqP","tlshash":"3452d6ed3ba499f5e44793f8d62740b43e9e38fe3942c994d3981e50ad11a6c8c49ce3","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.172053Z","times_seen":68,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/npm/swiper%409/swiper-bundle.min.js","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.724Z","timestamp":1787056066724,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /npm/swiper%409/swiper-bundle.min.js HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dyfJDJ8qBDw4Ok9IbCKpMYCjnxXM6%2BprX5Czh1zkcBe2As%2Be8Egj095MZY%2B4BSq7NIH7u7%2FmhjQlFAsZPqdSwHSTZyr6bB6mGf53DLMx7lmH4sB1jOm3SGd%2FvV8e\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea210b73b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140575,"size_decoded":42363,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65271), with CRLF line terminators","md5":"e6169ccf7a9d58ed680db82c97f26746","sha1":"4ab349710f1444e3cac40a1c17def4173ebcd9eb","sha256":"81242d1bdd179ae12bcee722a29eebf2f5b7884eb050e5dc1670fb4361c61370","sha512":"f02d5d5aef52ca3787669abed1e0a1cecf41dd73d463d675329772d7dc20bcbaf2f75c25951e678a18afa8658515bfe2ed43e869e8a16d62dc8d57ad127b5210","ssdeep":"1536:DIJQfGP7LP8NEuWGKF+IlzholxU/2Bkt+9SD8jv1nTHlU9ymp8Mj0HEOS5hAsVua:EJCN+TXD2BkQZFU9tp8Mj0k95h5cpnk","tlshash":"fbd3f8896221b57646e316db93e4c221a3b50544b80ac8f470bd4c9f597ec9813feffa","first_seen":"2023-07-20T03:42:03Z","last_seen":"2026-08-19T04:11:19.046273Z","times_seen":750,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/images/home/arrow-two-bg.svg","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.744Z","timestamp":1787056066744,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/images/home/arrow-two-bg.svg HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8PoY9%2B0JAtu7Ffih36fdZ%2Fzv7xgPvJocHAJn%2FvGAQ9VW7eMSondhLsFvWNULZLyG8EqiaxJgBvVPBpe%2BlRxdN46lB533gjQjP59Tsw8v9%2FGVzMhiYkB9uRfMiyRs\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea212b7ab4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":496,"size_decoded":1160,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"7e8ecfb48f8aa358b662c24a9cc23ab8","sha1":"395cd8fa109ba442e384134f75781a8932994f23","sha256":"a8d4522940cea6b55f4dea8ea7b33bfd0e706ec3e2c16d45de8d9969dd3d5206","sha512":"70a3e18f308d4180df52854a1a3ebd6850e5e91db8a1a8d3f13ea96414ea7fa0ff8b85406d56548fb3d2755fe51ae3204e34bfba220712f9a0fe1a24ea49562d","ssdeep":"","tlshash":"dcf09e3ea208ac27e11cc24ce949e468146651d6d9c840d0c5c1bf2f713a9e7292a2d8","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.174477Z","times_seen":66,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/assets/img/cryptoicons/bnb.svg","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.752Z","timestamp":1787056066752,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /assets/img/cryptoicons/bnb.svg HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=41ItfBC1nl5z6xw8Yas3N6JjUON2mfFQcD%2F3MFx9yVPB%2Fei9GNfmd2NhOGEHLwFyxTQR%2B2ruRbrfcQjK4pWXA7WTJYpnO3WWrJm3BJuw7NVWKFrjbZcHx%2BaTAZVj\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea212b82b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1871,"size_decoded":1683,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"faad1f8773e47415f372e48416f460e9","sha1":"9e1e10f8554a43fe3e9e870b7409636370af597b","sha256":"1e3f4850b5e106283bab874805118c2bc246923e52ac418009c0af133f5af545","sha512":"55966d0ca64f991e97ed14bcaced6a7ee4b7667e4cb33f308c7c92794e5116ab2a86be72528f880a111e593e6c01cc56b00e40cf786768de954a1184b7647154","ssdeep":"","tlshash":"863101ac41b6cc3de23583f409b052d816e6ac77f100347cb4e59b52bd24ad72a85ede","first_seen":"2023-11-19T01:14:24Z","last_seen":"2026-08-18T17:57:33.584069Z","times_seen":377,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/assets/img/cryptoicons/busd.svg","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.755Z","timestamp":1787056066755,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /assets/img/cryptoicons/busd.svg HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x10i5nX8QNYvTjPBA7%2FP%2B3%2FLYOySKEOU4s52KIpx%2BrcmeFpsGYdfYeNjPiJsGCBy7Ia3RpTRG0k9LZFdvv%2FZCwCaVW%2FzrvwfzN9nB0NnkoGw8cUI0k%2BY6wv0WVRJ\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea213b86b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":942,"size_decoded":1304,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"e18c9a55ae92ba734105e2ebdea06679","sha1":"0c5927bbf67033788a0829b817e8ba735da3b026","sha256":"23a5afc32f0a882ae287456596c37ef02183563af26c57619e91c66a90cfef21","sha512":"0aa09904c5489dd182148d429ba9497aacccb895b6c7e7f07b77e3dfcbc2af8bb3a02f7f5a3ddbaaa7eeff9b5659193fe3724b0003c20e78ab0e7b7b00529d16","ssdeep":"","tlshash":"6d119e24d204aceff50dcf4483f0aad12e626ca382544c7cdef81a79d755c570c5529d","first_seen":"2023-11-15T03:06:45Z","last_seen":"2026-08-18T17:57:33.614195Z","times_seen":379,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/images/started/deposit-img.png","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.765Z","timestamp":1787056066765,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/images/started/deposit-img.png HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/png;charset=UTF-8\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vZVU8LXyvFjxLsFRls2rlKCVCRVrAQDDPfIilHXEiRu0Akep88OcGLUc%2BBtWSIvd%2Fzi%2F8578tgneX2YSkmshlxlyOBcXdfZvEBcFfjB3jommGVEvpHAPYQZUFsWl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2d0ea214b90b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10671\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10671,"size_decoded":11511,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 237 x 237, 8-bit colormap, non-interlaced","md5":"1868dffc5f425d9ccf41ea05b4cf8c43","sha1":"4398302ffc8eb6235bbbee09314c6a067697363c","sha256":"89ecc660139e2b9b351cf9ad9ade527298b31be6e730718af9937729c8b7aef9","sha512":"fe4570431465dee328c86163aa83183cbbea8d845122192299383c18f9b86ba5759b1566d2697bf0a34eedac90d3c54233263e38a506a800d207a93b2bfa9fd9","ssdeep":"192:nTX3GPMRAt7rbHxzaUWNltHkxwKDtnRXPZtqEHI+R92w45y+vCiikhyn:nTX3GrpllWHtWDtRXPZtqEo+R92rhKn","tlshash":"3422c06cb1d1744da5fec25e0d9ac7e4cca068e8d9aa27ddfb48032e0530d70097d926","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.176405Z","times_seen":67,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-18T12:27:46.061Z","timestamp":1787056066061,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-language: en-US\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HVnEBBVh%2BGx5nEY2tsLANcG2a9NIK6QojIQ%2BNIXGTFEwzf9EadpfKPthzptIMZh3pacBdlMi0e%2F5k%2B8RhmxR3W4JFHbtYX1Ast4bLrlAg0QQxzYgAO4GuRUDECEc\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea1d2b39b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":54859,"size_decoded":10323,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1807), with CRLF line terminators","md5":"9483c4bddbc062b695dcbb6eda976d0b","sha1":"6c0d2c5d77b362b12028f9f0f66456310b638cb2","sha256":"22d5ce7277ad890835b1dcdd248cbd963b0bb925efcb2c78fd86a029e5589ca7","sha512":"d34d2c3a569b2fa01f358ec98222cd60d448a914db193aea3b567cc59ddc642da05df436112b4ee419101e832a0079a8df4f82448e5a7929fe70272c124d619b","ssdeep":"384:T45uQoUbRo4wI/wOwdSw/wBmamlmSmpmSm5mSmLjdmamJaycqQjKsVStcAtbxPVZ:Wz1tmSySjQaycq4KsVSuAZ0I","tlshash":"ee333d31a2c0582a51b3d2d5eb21a79afe94c143970b8566b3fc5bc35fb3d08cc27999","first_seen":"2026-08-18T12:28:17.176984Z","last_seen":"2026-08-18T12:28:17.176984Z","times_seen":1,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":21,"connect":26,"send":0,"wait":171,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Heebo:wght@300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.690Z","timestamp":1787056066690,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"GET /css2?family=Heebo:wght@300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 18 Aug 2026 12:27:46 GMT\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27832,"size_decoded":2309,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"84a845ffcaa69d6a99ff99a71a782517","sha1":"e8e232d0a8bc6088736bfbf3b448c83a11779b61","sha256":"31a19970c67af915788641d912ed51f8d5e483c80243054d17942c87bd810e42","sha512":"34ad58f2ad8a85ec7107c8cf9ee08c9b430983e7cbe1e1ba756fcc9d275887120397fa3e0783991fb333bb80669d33d42eb7a83742aae72d8eb10656f3a084f5","ssdeep":"192:RyCyzqOyWbqGIwVIyMLyiyjyzqnyWbqGIwV1yMqyRycyzqAyWbqGIwVWyMZy4yFN:luqYFPqYDwqYNxqY3iqY1jqYTkqYt","tlshash":"21c240a1041714009b8728e212cdbf75ff0f9390b1589075a7fe8b97ee8edd592a836d","first_seen":"2025-09-11T16:42:45.120531Z","last_seen":"2026-08-18T17:57:33.602523Z","times_seen":180,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":33,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/style/cryptocurrencies.css","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.707Z","timestamp":1787056066707,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/style/cryptocurrencies.css HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z491asrQumtoyxZQlMXFBcXkRzcxlGw%2BrFo2SDZ8Fnm%2FjaludkAkm6zbcgQCvMskVSYYCDgGNBDHJ4wDfDPXKJ6DyTkJj7Atel58O2S7ZbEhuyOulVF3NSoQ%2BGsr\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea20eb69b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2274,"size_decoded":1582,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"e15ef8253996019ed58d7e694fe6d30f","sha1":"63e0eac86be75b629e6e1164925e21cb85c63478","sha256":"65cbb4d214cf678cd88d1e1d256bb4d46a42e960cda1edf598d835844ad68a46","sha512":"d7356354f6ebf3a910ce0b50ac51b2fefc4c09c9fedbfec7fa48f06da688658d9a05cf03b4012ab45923a2768b8e3a36a82b3fb90bbf4be3d50b6fa5d9b9d1e3","ssdeep":"","tlshash":"cb41ac55ad006146d273e72dabfa010be4ab6923a70252a57adcf045cfb8354cb70fde","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.178442Z","times_seen":59,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/heebo/v28/NGS6v5_NC0k9P9H2TbE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.924Z","timestamp":1787056066924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/heebo/v28/NGS6v5_NC0k9P9H2TbE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://exoder.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30116\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 16 Aug 2026 10:28:29 GMT\r\nexpires: Mon, 16 Aug 2027 10:28:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 179957\r\nlast-modified: Tue, 09 Sep 2025 18:57:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30116,"size_decoded":30929,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30116, version 1.0","md5":"480b1d24f2aa69252a57d434d50a5288","sha1":"6128ad01170e7ace7e1cfa1d7c3d3dbc93242d61","sha256":"50dae2e12dae22c920388023e35aaebcd1e1d27bbe915c83d64210377e083e60","sha512":"db3d713d158f992aaab42936324d64b3edae8d5afded25bf1f2ad4e9380466a5a3d2f061f0a60293a20070b357f693ac0a3b2ee8f159cbc04aa33145db1003c7","ssdeep":"768:dtra3jdzHzeBerSkbONWaWIomeJQ9A2x9qvg2J:72j1qw58W+eOe2x9+g2J","tlshash":"b0d2f1234292dcaae76490b0d8385253409de8e4265b9b49b434cd2ebf7547103ebffb","first_seen":"2025-09-10T17:46:19.009186Z","last_seen":"2026-08-19T20:58:27.618272Z","times_seen":6232,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":19,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/images/coins/arrow-prev.svg","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.937Z","timestamp":1787056066937,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/images/coins/arrow-prev.svg HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/landings/2/style/coins.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DSIEJm41%2FTtXzZY0odBZMc8fUPYMpFDcPls24ZjC7m4DsQxzRiGD0e9LQbW52HBDQmFX2Fkwne6op5ea1krSzwaLhLqH6pW1mpGcAEFfG4aS6%2F5wZNbOFm0Gx6zI\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea225ba5b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":489,"size_decoded":1119,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"7e0be7fff7a5641c5163764f92498ce3","sha1":"05f11f396338d56216771c1cb39bdf085d78c216","sha256":"be8ed8a4cf12da63b80a41cd96f9dd73534069b6ad45aed1cfdb58f9e659a23f","sha512":"ebbd954cde1852d29aae878353fbbcf77ea7cb490d12f1ea9d8ec61d5eb6e91bd64ffc71d40ca560d312707d0e7dad990b9dde852caac8d03a846709603c130b","ssdeep":"","tlshash":"17f097933b910785c8158330e21e99f32a067cade608408ca2e02d23f8d11ad0f79ca7","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.1795Z","times_seen":58,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/js/cryptocurrencies.js","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.731Z","timestamp":1787056066731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/js/cryptocurrencies.js HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kaT3VyXFElrOTNxZQQWZLNiQ7JzwmGPBSDQYLGT1myNfM4vNjpZBOk%2BXncvqanlpUve1YRp9%2FQT54WrGZMszMmhYlrVF1tXetMuinRK%2FjmNIU0sdUVQYutNHuEB1\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea211b75b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":398,"size_decoded":1074,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"51b02e628699f5f855748fc9eedfeba2","sha1":"feea5b063498b5066330f88e14057833608af73e","sha256":"9ab7d478cfd3ff2c357642374e22e3d6ae9694dfb56111b14ee0a426cf8780c3","sha512":"36e10d16ba0e16c93b8c7f5dab77f57ff1a5d430a3c974e0fe9d67ce0ddea5fda3d8b3f57a1676175bfc97c86fbeff085a05be83f7a351364a3bd2eca75b1921","ssdeep":"","tlshash":"dde09285300225509e6f7bab5437864cb96b002e26374af4b92e44a85f32d52739bfe8","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.180191Z","times_seen":61,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/images/home/arrow-one-bg.svg","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.743Z","timestamp":1787056066743,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/images/home/arrow-one-bg.svg HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b%2BI1g6FsD9NUGNdnPnIIt4GSbpVEGoZne%2FhqOFtMenRinh7eGZI0uqF0Nt%2F1FyiSv%2FiN%2FqhbNRsRO23cFDF%2B%2FkOPYsU7Xh%2BIxAlZ3qMjoNKrIfY6ZEz%2Fm0F%2FsdlE\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea212b79b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":495,"size_decoded":1171,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"2074be4078b9e1879765ed2f02bd3e61","sha1":"5d6dfc9d32e24126493fb457cf20b3cd64b8ff18","sha256":"505f676ca11de92c958e7ea38d94f0c08774555342ff5a36432d2c96c7d1eab0","sha512":"24f8edeb98c3f96b2bfb0f9aa37ebd266ab60fb31b561d0d67ee109c184e6ead4810527e2ab53f04a80ef3c46af8fe4284aaa5bf98081665a131a1ec300112d3","ssdeep":"","tlshash":"aff0597aa209dc2fe15cc28ce9a5e424145951a6d9d542a195c2bf2f603acd2282a5d8","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.181277Z","times_seen":66,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/images/home/arrow-three-bg.svg","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.745Z","timestamp":1787056066745,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/images/home/arrow-three-bg.svg HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mUAfWpPkinjenVnRp%2BA9aT1KdWKiTDpOh1aPhpxtsD%2FbZ3Im0vDDiXee5GmX4dVGLRfYDUElXPjbRfsnXgnOdG7lbU%2B8WtGOubexwelPSKf%2BjohJyMjGu31D%2FKyt\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea212b7bb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":493,"size_decoded":1160,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"80c2150b6bd50936f974673e91fb3cfb","sha1":"365dab1d32fcb83581271af7fa92027fa893d2c9","sha256":"93f0955b41e4532369cda24f682acde01a4f9063bbdd5c87bd04617edaa7b61a","sha512":"0af3b2360d1ab7106768d301a35729f37e05910288d1c02fbeac1ee4f1c54535556c0be9b88297eea79474a82fd99987a4d9f3ac5e8d0f277012254fc1a3e8a9","ssdeep":"","tlshash":"34f09e3db20afc39e11cc29cfd44e469502981d296c441a0c3c2bf2f71288e3682e3e8","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.182051Z","times_seen":65,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/images/freedom/bitcoin.webp","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.763Z","timestamp":1787056066763,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/images/freedom/bitcoin.webp HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/webp;charset=UTF-8\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3y4fcBQEkw23XGdhAzYDCbmNrtrBmPB4%2Fo5lcwWqPdPnBgoS6lZctiYu3pWSBqkE6VKFWmU%2FcLiYWBkwhlBvtyP1OCe5qi9T16GX%2Bx21PgEu%2BddC8yBPm4TneIbS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2d0ea214b8db4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5404\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5404,"size_decoded":6246,"mime_type":"image/webp; charset=UTF-8","magic":"RIFF (little-endian) data, Web/P image","md5":"433c8c9ac499d16864db171225ee5b20","sha1":"87c91a60cd2d1dbc4b3cc56d87cd4e7135c3ff25","sha256":"12ee0f4bf945ea0932972b8ee8325eef4bd93c3aa6a9c45f6d2d4c3f29e46a05","sha512":"7220c119f12396dfd89c30fa503a0ce1d4e574f36f306c9b2f6e2457f879f7444009bf18df23542b80b8523632716e262c5fb5964d7cd446ab49cc2d50b462c7","ssdeep":"96:q/33MTWQlvQxBIMhxuupa0BDAhQayX+uh1uLqFphprQ5/QIYrKBtg5WZdd+jqNMg:q/3MaQASMhxuuPEyX1fPhpU5IIYrKBtD","tlshash":"43b19d42527fcebbfb4c33f5af78b5a559a200dfb34a9ac24b9c706214c49a36584e44","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.182726Z","times_seen":68,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/images/home/bg.svg","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.934Z","timestamp":1787056066934,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/images/home/bg.svg HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/landings/2/style/home.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:47 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cf99bPF5%2BqEdKvSm3%2FWBUOe8rHuWMCovsea5B%2BxgLNkJK%2B0UWuMjAUr%2ByYit5Dg5%2BV9QfVfBtzwEFQB%2Fsiifly4u3oQ2ioYt7l4y9ndKJ8dOGQ3LchcjzuWrQUgz\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea225ba1b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":163,"size_decoded":974,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"c33cef9cd0af2a4dbcdcbd0077b40219","sha1":"5bf6bcb35c3e6b33ce475b53d7fb5fb01f871a1c","sha256":"c82d4fb3cd7f7f652ce902e075ced913d4e0ebb4e80ee35d9a7e8ba69ac5bad2","sha512":"9f8112b1464e4dc3cf3abcfbfa41d40001095763b157b5a4c1d5264f0b22f5fbd00b16453bf1c90aff94259e632b07ede80408f521340d34b413b6227d9e8c8e","ssdeep":"","tlshash":"68c08cb9a35ccd049440c2a47bacb92b2173c0cb068801b8e8a13e207087ad76c10aac","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.183291Z","times_seen":66,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/assets/img/cryptoicons/eth.svg","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.749Z","timestamp":1787056066749,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /assets/img/cryptoicons/eth.svg HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4RYFiV5dKzrwH7%2FgWQxeLltKmZyb8txG4QhkH%2FmSXAzhL6FWbD7oMt%2BvRXOX7ztB2SK10ADvv1yLe7XmfyeQJtTdIJhO8FEXBwiI4dZPfedAzsbILxwcrBBzHxCs\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea212b7fb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1025,"size_decoded":1276,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"b4140b368702c1a2a0c62215f61aefee","sha1":"c14afee9821f4091f0754d0a186c2454d3ac9a4c","sha256":"0e2d8f6f3c63c07ea6381033872e9ba6e2175efb951149e99ce68e51ba530a4e","sha512":"0b0a88d61f0e1aea18121b610eabb0ed6e2464bb4a03646eb4e6be406b3c39f0b67f7c27a7e3968ffe8d6a755d31c8f6e648a51679f2602ff4475e0dfb03c07d","ssdeep":"","tlshash":"09117fcd3908e8414694c339a78c21b5d6f385e7de4c8194c5447a3b35651d17d9fbd8","first_seen":"2023-11-19T01:14:24Z","last_seen":"2026-08-18T17:57:33.591004Z","times_seen":249,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/assets/img/cryptoicons/ltc.svg","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.750Z","timestamp":1787056066750,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /assets/img/cryptoicons/ltc.svg HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qgND6uypOPTdFMZum74XATfWtohtBKnJmQfusFdCEaktsR7cBL9YhzBltoVKF7oHxn0NWMTOf4Z751FIpiReg5aS8W6CV%2BCU5I6aVsoxK0AiysUqtlwIhUOItQFF\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea212b80b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":753,"size_decoded":1344,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"1357667ba2495b5b9b624e477f83c544","sha1":"841592b39e45a36429a8d5a054c08e5c7c934a6c","sha256":"19a2412000c4b36f27b784a6f0ae5d074945770bcb9d3433aa8e9cf26a4cb39c","sha512":"67f23837d53730f260685d63066c729ba7cc5433133643d58f5d6af5420fdf8622a5a6d77d2e57e429914848a8ec3d906c5dbd35ca78e327afb134e9f920d8f4","ssdeep":"","tlshash":"fc01d05d4780dc7d6591866443b461d16376b047c78149f4dceb267bf6058d05254bac","first_seen":"2023-11-19T01:14:24Z","last_seen":"2026-08-18T17:57:33.610399Z","times_seen":378,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/heebo/v28/NGS6v5_NC0k9P9H2TbE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.931Z","timestamp":1787056066931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/heebo/v28/NGS6v5_NC0k9P9H2TbE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://exoder.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30116\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 16 Aug 2026 10:28:29 GMT\r\nexpires: Mon, 16 Aug 2027 10:28:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 179957\r\nlast-modified: Tue, 09 Sep 2025 18:57:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30116,"size_decoded":30929,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30116, version 1.0","md5":"480b1d24f2aa69252a57d434d50a5288","sha1":"6128ad01170e7ace7e1cfa1d7c3d3dbc93242d61","sha256":"50dae2e12dae22c920388023e35aaebcd1e1d27bbe915c83d64210377e083e60","sha512":"db3d713d158f992aaab42936324d64b3edae8d5afded25bf1f2ad4e9380466a5a3d2f061f0a60293a20070b357f693ac0a3b2ee8f159cbc04aa33145db1003c7","ssdeep":"768:dtra3jdzHzeBerSkbONWaWIomeJQ9A2x9qvg2J:72j1qw58W+eOe2x9+g2J","tlshash":"b0d2f1234292dcaae76490b0d8385253409de8e4265b9b49b434cd2ebf7547103ebffb","first_seen":"2025-09-10T17:46:19.009186Z","last_seen":"2026-08-19T20:58:27.618272Z","times_seen":6232,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":43,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/images/home/Arrow-one.svg","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.935Z","timestamp":1787056066935,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/images/home/Arrow-one.svg HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/landings/2/style/home.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:47 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XgsgDZOIzXjoCBI30oXH15%2BnUA8v%2FmOEdUrRM7aWcqL%2Fnn0jm00e5XB%2BnmQpCm1ad19LM1jPaYq6xTf4XqDlcJhhoEVnSbq3I6d7G0mWCLjSQNqCnL3pZMJyjfwx\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea225ba3b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":531,"size_decoded":1172,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"0ef75d224648cccee814442fe2ea94c3","sha1":"1da79d02f8009caece768e06b92a91b26d859624","sha256":"2f67fbcf52b7e500b3ec1052314d296f76f66cc0372ac9c148c7249b210464df","sha512":"80e8fdf9de8e0ed482ad0a882a5bea2124aaf9eca3bce6635e8f64af8f41502656a6b6f1efd0404fb25660095f791a5cc03b7197fe87e149d23a7dda346a8b17","ssdeep":"","tlshash":"eff0c9e1a0ddc4867306ca248d39656545eef4e0ab8e94acc1811361e1415c3b6ffe98","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.185127Z","times_seen":59,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/images/benefits/arrow-bg-1.svg","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.942Z","timestamp":1787056066942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/images/benefits/arrow-bg-1.svg HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/landings/2/style/benefits.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EufA39%2FZGEeHsPo7xhuZ%2BHOw%2Fts1sBV7fObAzqUoxVUC%2BGwE8zy9izAkeHtrtJoG2vbdPSWeArRkjbx3K4QyNg%2BZBFu5Y73GPGVBChYB4cTbv1u8trVOoUE0Z9M%2F\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea225ba9b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":506,"size_decoded":1174,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"8659d1f0ff9287c34bf86272e19ed731","sha1":"4da825a8d04f45ae161fba9e55fb311c6b7f2233","sha256":"276fff943a73df88b43f07de11362d73ad827103846077d2f0b7aea85fec44d4","sha512":"d37c9ebe274596a2e239066df6333ad0c958399c7359b8cd812add44539b3cebc3eeb2500a50225b8a017bb8e23f86f2974e80858b4731a9d339751cb80b425e","ssdeep":"","tlshash":"92f0597dd20ede6ee139d27ce408a855106f52e2abd30192c482bb2f65145d6183f19c","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.185821Z","times_seen":59,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/style/freedom.css","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.706Z","timestamp":1787056066706,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/style/freedom.css HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gG5ddVSzHDev2prjF%2BTBHPP6B27ZJlxU2qOS0YegyTJ5mk1Lvf6BamH4Bl6UNHNOjHr9cjdBmlcorHWXp9CreYzYh6wN0sLYd%2F8ISTrdWiKVDT2c7MJlFP198hv2\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea20eb68b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3746,"size_decoded":1764,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"e8255336fc3161fc2c089b9271eb5485","sha1":"86917ec84ccb1355111c6f47a411c3a5e993e9ad","sha256":"1870f0283e73a5f6be70235da34044095fab4f897688f9d8e04f0f0ba9dd7d73","sha512":"6286d1e81a64c4a1ae3bff5a2aab19341eaa0a2c0244a751c237630d8ac2f0bb518f92394438345c5cb94ae809964566c1bd9f6c3981dcbd5fdc0322227dec4c","ssdeep":"","tlshash":"08715c599a915585f033ee7a6fa2120ce745c033d3268d70baec79649fbe1258322fcd","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.186316Z","times_seen":60,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/assets/js/jquery-3.4.1.min.js","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.720Z","timestamp":1787056066720,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /assets/js/jquery-3.4.1.min.js HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DDswTXt1dbkVizzM4zeSfsxs8hNZw1tHkezuVWcmV1dtFlDWJsqsW8l0T26QHGbdGnrZZQnS%2FgRLCaHHw0MxVKgCbWS8cgnJe%2F5fR3a6l0%2BcAK9NGQrZ63O18F4A\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea20fb6fb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88147,"size_decoded":33522,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators","md5":"a6b6350ee94a3ea74595c065cbf58af0","sha1":"b15f7cfa79519756dff1ad22553fd0ed09024343","sha256":"412b8ff9c5ab32b9019fcd84bcd4a54c0e265a14528474f4ee45b27a20abeaeb","sha512":"f5a9c6aee347c155e4dd796c51716b7447bc22ae44741fceb6bcfee02f955ad4063d38613f241108a3e1f3e1f540fcaed8d9848b9a0fb823c00955cf9a19efad","ssdeep":"1536:jTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmt:jgZm0H5HO5+gCKWZyPmHQ47GKR","tlshash":"a08319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-08-19T20:12:36.775529Z","times_seen":5650,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/images/home/arrow-four-bg.svg","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.747Z","timestamp":1787056066747,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/images/home/arrow-four-bg.svg HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d7XQxDfoIRLRfHLFU5DVqi2MxfxGPIrs5BchfadM2LZKyQJJNEyzO%2FO7V36DvVuOHzV5GRwPc1DAQRFTFJCCng87vL6H8pJDEzvxJElRCBJzhgkitTaXohIj0ZBw\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea212b7db4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":492,"size_decoded":1152,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"959d10d268996cc8cf23e49226623422","sha1":"046d252f477ea672763aa056cbdceb01d4ead764","sha256":"b825a0bc9c780acf6f4d08beaf43f49ffc20cc5c794095536b879fd125b7bdfa","sha512":"18199f1813e5da02a3be8d821beaf5bdf8be2a5f11e0a85bf8e818e92cb253ef2516d1c863210ac2dc0224c6728e1df4068b46900050eef92d04691986f52a99","ssdeep":"","tlshash":"8cf09e79b32adc36e12ec198ed599418501941e6dac480f1d5c27f1f612ccd3283a3d8","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.187449Z","times_seen":67,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/assets/img/cryptoicons/trx.svg","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.751Z","timestamp":1787056066751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /assets/img/cryptoicons/trx.svg HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BAAPePB9X79Y%2FS%2FDKqzW062%2FWM0HrHLCNLKKI%2FdyqBvcumhuulr%2FtekoJGSCH2gnNljjzCND4crwdzG3EEVE4gkRDh6ia8UAEC5zz8fQD3r4JXUoEVxKYrrmWoAj\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea212b81b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1451,"size_decoded":1589,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"76f81a124b273e6a86325e711ebaa6d2","sha1":"cafe93010ab183240a167866a0c882ea625496b8","sha256":"83c9e68359f6cc95b6b5f366ab2212baa55c9cf14e2bb1f5fa9e25e8e96a566c","sha512":"4751802877c27a83bf68ff75cf0b1ddbae0239c60018697621850d7681e908f25774783e1adb1ed01e65cbfbab91ccaf91c510c8b923a90829b61db5f8ab2c0a","ssdeep":"","tlshash":"3d3165c62f68ded9c7a893f2a6602465a825f2aa755c4d5dc04c3f1739c94783c03dca","first_seen":"2023-11-19T01:14:23Z","last_seen":"2026-08-18T17:57:33.582962Z","times_seen":245,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/assets/img/cryptoicons/usdc.svg","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.754Z","timestamp":1787056066754,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /assets/img/cryptoicons/usdc.svg HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BMXSiNJfAnvrkWutlHbRE9ZDYcjEwFQqu4rZXeoN5ju4Pqm6wI4d9G0KyjPcdF00PArivTJ6lmSKguHtHIfu9ydOuYvWGd5E9Kk%2Ba2ABK%2Boz2gVGJZt1AOiHEImr\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea213b85b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1626,"size_decoded":1784,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"94ec50bf272c2ca70d2741d9794652b9","sha1":"984e715c5968afbe271b777a11cbbf1434933215","sha256":"a59ffcad23c4de45b0389620bf9bf14811e606e22bbf2f674b00baaabeed6500","sha512":"c922eef8d1002995de7e76e08adbd7245c23bf2eb411ae7df1776423503b442a9838cd471eeb00753ad79b80742eaf65d7fd8f3232682f2956a58c6846ee3b79","ssdeep":"","tlshash":"483110068204dabdfed6062cb27038c476f1a99ff271d0e8aa6f1057d08cde0759c6e9","first_seen":"2023-11-19T01:14:23Z","last_seen":"2026-08-18T17:57:33.601794Z","times_seen":352,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/images/benefits/benefits_2.webp","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.768Z","timestamp":1787056066768,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/images/benefits/benefits_2.webp HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/webp;charset=UTF-8\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aFSFMrrShH0PJVj7x13Vutze9kXjjIFucyhhclpq%2F2Q2bmduR28xKe951FjMBBsJ3P8kG9EZH2a8b2kmTg8GPpKkJVbAfh1eqPH2%2Fab4RofQPeuXByGsDs63RY3f\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2d0ea214b93b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 547536\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":547536,"size_decoded":548376,"mime_type":"image/webp; charset=UTF-8","magic":"RIFF (little-endian) data, Web/P image","md5":"27203c5402a68708aad814bbfd422ce3","sha1":"a333d55563c8275d0c5877da11ba661f0bf4347a","sha256":"1a236da1b61906a1b3ac800dd77e9e2aecebc7a7860b0428130101dba21699fa","sha512":"ff588c9c7836587659291739ec82621c31248efcdbebf6998f6190b31a59acd7b4d47fbe408449ef11d0f7b96d498216f00a55aeffc1d5e59bfe48edbe69c015","ssdeep":"12288:PPNU45ipr21TITa3s5wwCJJktA4u99W9htB:HRgpr21TIesOrJGt9u3Whr","tlshash":"fac423cb80adf507d4033159e5f987598d28c729f1c2f3d9391e664990fe2212bfb2a5","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.189221Z","times_seen":69,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/images/partners/gizmodo.svg","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.770Z","timestamp":1787056066770,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/images/partners/gizmodo.svg HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r0V4%2Bmx%2ByyQ7TzgSlyfPyQxnyrPndTsBP%2BluVBon5mwo0wJAUhfO7ZpFHo48Iq65sMJuF%2F749GcJpny7%2FpNbVYswBGedMdmHtw5aIt5aYaFbXNZPolBdoVbN6h0f\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea214b95b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5564,"size_decoded":2925,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"a7c0074fa7b60cf51bcdf15b4e9bfb48","sha1":"a51f99c821341e7b22a463ba80108b473f8fccd4","sha256":"fe3a63e3a504bda4ea830bc42b03602163f25e462e03bdba12117bf62f375528","sha512":"caddcdebc59adfeb0b59d11044f07f1242193d0c1c58855de1e6ddec1852cec1fd5069049a9397d428fffc1c2626e0d5799350c8a0e0e869fcce336e29627e86","ssdeep":"96:LjhpbuLCxKEomqrIIT9RpmZXbtDDOpXEWX4X7d10rQ542rifPijUHmx2g5YwLw:3h9u3mqkInuJDDOdzIrH0rQ7doHvIYyw","tlshash":"01b181c8239053fcee85ebf3c94ba4351e4f54f62856d6ac83a48e0e799849d1d41ec3","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.189914Z","times_seen":67,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/style/gateway.css","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.702Z","timestamp":1787056066702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/style/gateway.css HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EXf6BT2xjQ8w0%2B7a0BMbXOk%2FA6%2F7MQncfsqSjYiYbK0OJWWQotibWjWtRNVV1ubd5iV7w8b0v9sLOTJptcO4sNuK6HchwyrTehnVlno6vhbzF1C14nBXlM19gFID\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea20eb66b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3497,"size_decoded":1694,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"c7d3ae5094f1be75721947b08ebaa3fc","sha1":"5de8fa9107758a1de8dfb5a3c9e992a6fbba59bb","sha256":"063a9a55b23c67c633b629362331c24892272c894ce6de96774228b24f2e2c86","sha512":"c3e64f6890e4fb79fc23c053bc225b245b0fc5347db03337c7ff15a0ed254e4e04ef0813709fec241318e608d9359fee531ec6d6677aa98763a0c4e2b3c39528","ssdeep":"","tlshash":"7071055dd701a18171fbba2deb630246e649e2138f01d1227fd86144cfb4d2fa52af8d","first_seen":"2024-08-20T12:48:50.769672Z","last_seen":"2026-08-18T12:28:17.190922Z","times_seen":55,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/style/partners.css","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.712Z","timestamp":1787056066712,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/style/partners.css HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GvfOJVQmxTZWRzRTZOrxZC6BhJ5DvftvZD8HN5fmC6H0fJAw0XnVITzWK4h%2FCPBi6s5VHRPca8ZHUfSH0uUrZPWeUAj9bXRqVj4v9DwTE3B3i%2BsKJb1x8WCCEmBc\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea20fb6cb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":813,"size_decoded":1159,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"2b3480f1dfe499e79594c8480ae17258","sha1":"90762a013df51b20c8c9d8f9c021cbc6d99d4703","sha256":"9a5db96103ed8bab276c7c22d2ec22c7a62f9a98a3146b43eec3d98e7f346ae6","sha512":"4fb2844de41aebd02003e9da51fabdb10cfa8c533f21e83bf7fe425f0a4297d39197b9602b843e010e114465a0afa6137aca41010351072da863802805153a04","ssdeep":"","tlshash":"aa01f21d980100099bbbf66847fb4104e1c3a527931a41ee7e9c7184cfbe378d5a2dcc","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.191438Z","times_seen":59,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/images/benefits/benefits_1.webp","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.767Z","timestamp":1787056066767,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/images/benefits/benefits_1.webp HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/webp;charset=UTF-8\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kOyQJxCyyvleJ1IzjezKI7%2Fl5pkI%2FZ1IObCNZLjoc7taXdRjG5MKdDXhV5V7SW79ipxqZO2Pk%2B8bP6s8SqdZ0R6Csf8Ez6tO8R7HgvfE4Cs1kAjpB4%2Bu4gHJqAib\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2d0ea214b92b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 365576\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":365576,"size_decoded":366420,"mime_type":"image/webp; charset=UTF-8","magic":"RIFF (little-endian) data, Web/P image","md5":"6eb31c2b84a8ecb215a3dd51389c99ae","sha1":"c3ebde6804437a8a1a024f653e1ab14512a5da90","sha256":"ce4c3e9bc03241186fa2f90048efd8277dd7505f8707bb3f062829325f5012d3","sha512":"eb1e48593de5fe5c9dc50e8cf28a1e744e43a2b182749304d2e5a6948c5474c19c7885e78be1bac4677a8eccd9dc3aab3c6ae95d3dda8c357c0646f5ba559ddc","ssdeep":"6144:NC0scH3k7RGBrM7jCp5cxVR7j+mogdJ8ytMb3/8anBfRvJHlgHLqXn6428q5uDYT:gcXObxV9voS8ytMb302RUqXn5250L","tlshash":"9d742320f4ea211ceb1a36f53fb9a4b06f28a13d411c95714d6df776680e4f2e64f624","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.191982Z","times_seen":68,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/style/normalize.css","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.694Z","timestamp":1787056066694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/style/normalize.css HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a1VhdysSUFcvJcbNIaczIyeWtBGjujl20JcSm7AOahewEn0Kdt7zziPdcNnTyFvPSE1GMnrQLXAbpFaVQiXath5oU5fyg0Kv68HrY%2BQjIL3%2BscEUMy4tyCrR2Ifh\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea20db5fb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6599,"size_decoded":2716,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"8a1230675cc14f82e14af8c0d0bc3993","sha1":"9d355b9a68424b466b9fc5c03e6dfa85874de9bb","sha256":"9319b857e89db58b4b44a6ef7bf644d93429e74aa140cea93dfa5a26c0b43760","sha512":"a88e4dd3237ed3fd20a3d8fbc419cf9c63be731b0e32fc95e3da89c575a6c2ec8ec15045db1623e9de1ea1e1a4853ea3ee3a0e9680d5b806c076e6eb6ec5ca2e","ssdeep":"96:FCeGD84G0k7M0ZUn3PocEoSX4Z75PBm8xtnU6Z76azbz6Cz2ns:FiD8KnAcEoh7RBmgU6V6aaCis","tlshash":"80d10c921b423b22a2b20e34776b6689f36011778e4434dc7ce112b49f65be8d664fcf","first_seen":"2023-07-05T03:12:07Z","last_seen":"2026-08-18T17:57:33.619116Z","times_seen":184,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/style/global.css","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.695Z","timestamp":1787056066695,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/style/global.css HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LRFZ3j4UblpJVk9TQNCcCqjtGEfuPlmY0cf9zZmCydZ5CbbcosrWJB0Zb60RFzUcqLkMYBtNaCdUA%2BdEqJDm7WE5Ek3NQ%2BIOjpqdyBHJyWVw3gpTf2R%2B7me%2Bm6YQ\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea20db60b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1417,"size_decoded":1403,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"922bbe8e0f8049fd004bb431d50d5291","sha1":"a3732a66f419d4da6ec08841c53bcdf4e66c8e88","sha256":"67ad411527ef17c195573fd2d7cf2daa97e52680d47348b5948522bbb3fc3b8a","sha512":"df23248b8865237fd8b58df219791b5b27acfe9341eb2a3661dd07cd041fd78ad56a05b9b38287f583d5e4484bdcaa059e434cc23f5235435d2feaad315cccb1","ssdeep":"","tlshash":"2421be6dd9431186a37b4d1917e5870afb9504731a0005fdb7d6aba0cfb2d7a41f0e9c","first_seen":"2024-08-20T12:48:50.76315Z","last_seen":"2026-08-18T12:28:17.197054Z","times_seen":55,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/images/partners/guardian.svg","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.772Z","timestamp":1787056066772,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/images/partners/guardian.svg HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FKb33HlHbMjIHcwOlaNf%2F49jCrwWzSnoGIexNsunSHKnq9gX3ySTKUzAthhgAdE2izg9TiOfFkUVdYdCTrlVC6pijJY1AWivsnkAAAaFGDekfIWwLpGurdCmrqQv\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea215b96b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5305,"size_decoded":2989,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"510a900db763372c916c9cd248cb6df2","sha1":"e681919d4b48d9d35f5d5dc2aca14911f7583f9f","sha256":"96c334aee84dc99e194177f336b49335803faa5ad36a5aaa37d411ebaf0e88cc","sha512":"0b0b3796adfc61d4c57ab3ebdbfa656031ae7e0aa63c0b9c396fad206f061612d9d715497be0ad515be45ecf9d64f58665319c822a67f5b3238e92fc980f8867","ssdeep":"96:rjzVVL+mj+Fhmg0xyi3jL+2/Olibp0oj9drEyl4D78yN6rUWjXh:/hhLj+Fhmgxi3XdUibXRdrEw4UMJKXh","tlshash":"84b1d8d452b02aedb444f2bee933ecf424569c73b6c51928c3e82d97e45606c8f068d7","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.197716Z","times_seen":67,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/images/partners/ft.svg","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.773Z","timestamp":1787056066773,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/images/partners/ft.svg HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Ahqf7LGbpr5N0Zu3I9hOHtLd4PO%2FvX2dMYb6GUVDbVr2FmXEYAH12Z2bwds8YR15Vn7geRr15KHc8FcpehMBn%2F8YTwOa35y12mt0WjKdNGajzzJtlG8Vl1qnqre\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea215b97b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":911,"size_decoded":1314,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"d12e16a95970154a33f9448062809672","sha1":"d559893a879c522fa96d141942933ff58666c23a","sha256":"540280b05ab06a0a846aa5b3cb2264892832311ffc84cc336f3ff940eaf85df2","sha512":"f6efc0b2509e0ffe238e9692d85b3da2029299d7721532e0f8d58920afdac905edfa9b31429a248f2d5ce92f8a21bc1519381d2c41211e7b8aff2c57aceaffe3","ssdeep":"","tlshash":"461114c73640eec0708d5a5fa6e8b474651e4452c7e580d6cbe16e00d1789c58d64c9a","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.198244Z","times_seen":67,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/heebo/v28/NGS6v5_NC0k9P9H2TbE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.929Z","timestamp":1787056066929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/heebo/v28/NGS6v5_NC0k9P9H2TbE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://exoder.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30116\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 16 Aug 2026 10:28:29 GMT\r\nexpires: Mon, 16 Aug 2027 10:28:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 179957\r\nlast-modified: Tue, 09 Sep 2025 18:57:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30116,"size_decoded":30929,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30116, version 1.0","md5":"480b1d24f2aa69252a57d434d50a5288","sha1":"6128ad01170e7ace7e1cfa1d7c3d3dbc93242d61","sha256":"50dae2e12dae22c920388023e35aaebcd1e1d27bbe915c83d64210377e083e60","sha512":"db3d713d158f992aaab42936324d64b3edae8d5afded25bf1f2ad4e9380466a5a3d2f061f0a60293a20070b357f693ac0a3b2ee8f159cbc04aa33145db1003c7","ssdeep":"768:dtra3jdzHzeBerSkbONWaWIomeJQ9A2x9qvg2J:72j1qw58W+eOe2x9+g2J","tlshash":"b0d2f1234292dcaae76490b0d8385253409de8e4265b9b49b434cd2ebf7547103ebffb","first_seen":"2025-09-10T17:46:19.009186Z","last_seen":"2026-08-19T20:58:27.618272Z","times_seen":6232,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":38,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/assets/js/toastr.js","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.723Z","timestamp":1787056066723,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /assets/js/toastr.js HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=drT7MYouwmb8VrmKUmXoCR%2B48oj7IxjF5vw91CXlNm5LaXUI1mUD0UvYMvJ%2BLEgX%2FK%2F0RPHPnO7120fxizRTQdwSh28bvT%2FLhLupcRlU%2FeHr1Jay8g%2Frt3Klv9MU\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea210b72b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24855,"size_decoded":6377,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (327), with CRLF line terminators","md5":"a02ccbbcf3073559037a62af82bfdd24","sha1":"4d5f7b3f3f280698aa26b10e1d7c6dd5708d64aa","sha256":"27f959b17ddfe77ca20a31b9950ebc3fbe8030c3ac376eec7355b2d7925e364c","sha512":"35acaadcc160935be74fb1492b1b0ca205aed6b61d8bd8edf4e26254c7772da02941ec53de59e3d66ce1695cc12de4ed9cf32b750e04659c7c0e2521b4697f22","ssdeep":"192:JJZWM9gzM3t3QrpJvxl6Xs8cZ9tID6CqQwPjOoOg6yS21tl3jWq5T14:JY45Kk7cZDItqLNO6S21tNA","tlshash":"deb20a08695263654cb7737c8aab800cfb769323458a96067dbc92d82f70714d6f6fec","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-08-18T17:57:33.599303Z","times_seen":977,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/style/header.css","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.697Z","timestamp":1787056066697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/style/header.css HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QDNhevuVoNNyBj5AmvIbO72vGT2%2FURg%2BgqXv1uL3BNgYIf1U0jzJqGEuoHKl18DHgBDMQQ7VkJLEfeKojtPUdRZHu5vFDotfGNSs7mdEoG7xsiGqlkxB62M8n2ne\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea20db61b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4833,"size_decoded":2065,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"c00ed061cc7292d1d46828e9a57eaae7","sha1":"6f35a5368e76b1c2d5b4d0eeef04320f1530e586","sha256":"06d8cf9cf991df897acd2e7d03b7a8d6607e65967be2157227bffa6d47f6634c","sha512":"fe36cd216e482c12c98df0737f981fbc835a66e7359536540e6e2e7dd071008b62e87333d03d05af56c55979e865b4c914b4446621fed490a5ba7b54d7c8d844","ssdeep":"96:uX/pQZqUp/2S1onm3K9iwhnpmAskATGITtOrDzbmGyv/0:M/p2qUoS1om3K9iwhnpmAskATftOrDzN","tlshash":"dda1ee09db06301a553bb7aaebe20e09f26570135b0211797b8e514f8ff611dc7a6edc","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.199488Z","times_seen":60,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/style/started.css","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.709Z","timestamp":1787056066709,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/style/started.css HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8gBgv7L4fXiTvxLADLezL29Ot8AdcVOxIADshztOh1Ak1%2BwH7Y0IwnwDQfGVpEGkiaA5LEUDwgrUBM3SeQ1Z2n%2BNNyXk6H9IbgSctytigOtpDDhJFZviQZZAbCvR\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea20eb6ab4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3495,"size_decoded":1863,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"f67cf1263e3d18fd7f4597264c97f75d","sha1":"8db725b47a210753067dcf9adbfafe59227f79e6","sha256":"877a7ba0781d0968bda3b326a834911a7e7feff2e2d1a02aae46a9e3374bde97","sha512":"89beff2c3a07168d7d28774fc5bf8638e30a2b1716383b59eda8231703ab799fc07a4957d92db1be05afdc9667df79686c708f43137a9fd9874ab21eaf2ce62d","ssdeep":"","tlshash":"e271f12ac6059054b637abfb9ba30306e69101178707439876fd7244cffc5acc626ecd","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.200445Z","times_seen":60,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/assets/js/app.min.js","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.721Z","timestamp":1787056066721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /assets/js/app.min.js HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LUOWfZPUa8y5vwUIz6xCw0nJkETONvkw2wPRn%2BrvIyugErhSLqPgdWpTmXLsJjIimgerM2arSzm2BpSGCv9speWXL%2F9aGQMxfr6LgYkCzJFHvbXg%2BSKaKgdbIxsX\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea20fb70b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3615,"size_decoded":2231,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3615), with no line terminators","md5":"d07fddad2dbb2e1b33663063df276af3","sha1":"ff05ef5d12cab598273743b8ecba860d5fe3eb19","sha256":"84c100eb29667fada78eac7c2ef3831d2dfa9d01827c00f9a8c07a8da28231ee","sha512":"497e5b7368287addb7d29b29b80a3f89ee35f8b1fb5156b0b02bf27fbc6b238fbe78d4554ec7f879b982da6ff9b1e4750f1daf058c5f921c5032eec06afd48c6","ssdeep":"","tlshash":"c57122791314b93c02a30ad7e6e6aad07a343886d5411070a8b9ccaf1fd98d39371ff6","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-08-18T17:57:33.588432Z","times_seen":466,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/domain_icons/755_1763680459313.png","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.741Z","timestamp":1787056066741,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /domain_icons/755_1763680459313.png HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/png;charset=UTF-8\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 20 Nov 2025 23:14:19 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BPoUPKiVzIZ2sjDnnEtVnid8rKuIfLIGzIglj7tnNARO5PYCke5euENe%2B9lXZ3YgOjH8ClLDGd34wJxZpWjjX5npb0WWWzapWgnEi3DaZixmv7x4p5Ltira0NKDS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2d0ea211b77b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 63821\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63821,"size_decoded":64657,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 244 x 293, 8-bit/color RGBA, non-interlaced","md5":"34639cc864df7cb0d067cc777b643c74","sha1":"e27cda84dbf17413f79beeb8fae2aa9e7f0a5e82","sha256":"8215705badc4b1dbc27b8242af6914d2aee31ba70b6aa483482714b3670a6520","sha512":"f07ab5eb30a9747856bd8cc79fe574db46eda2fd3fb53c07235610bce3f9704e07c64365c766360096dc900cdab48615e0a942551bde810374921c1d919bc78d","ssdeep":"1536:JIGGy39EeDTqCXLXk74kM2g2/AHIrLR1YNNIrfH:Jr13TDTTXgskMHZonxP","tlshash":"945312029ecc7d689879db7f8502e0acc3df2353235f3845a79057d82f296828c65a77","first_seen":"2026-08-18T12:09:54.878138Z","last_seen":"2026-08-18T12:28:17.201679Z","times_seen":2,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/assets/img/cryptoicons/usdt.svg","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.753Z","timestamp":1787056066753,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /assets/img/cryptoicons/usdt.svg HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZEOzoKjgTVomxw9No2A6ZF3a9IL5LstGwlfIC%2FCtXt1a%2BbeVou8mRBjMXVzZw%2B1VmMfd%2F7efzUvFbgzjQZ%2BHwpKQmQZVHX1nj51CQzE6HK7XDE5QWph%2Fu0%2BUALHI\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea213b84b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":704,"size_decoded":1256,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"eac1f7bb15967c89034b440b095ad74c","sha1":"5da1c6617fab973a2501cf6c01e083bf45aa29fb","sha256":"e0636ccbdd55d437a62c09b1355f2f018614418dc9b28d223bb2820fcfd88765","sha512":"d1aa4e69ae573e30c08d4337a91e4602eadadc28f3ef2b08e0776c156329a0eb3dcc7abe9384c4718b5c12a9d0c32c6b3455178d724b36ece1b716f0cb3130c4","ssdeep":"","tlshash":"1d019c794145c95cf51085a9db99310425b871fad2f258b8f9da12127c41cf60834fb6","first_seen":"2023-06-29T23:08:25Z","last_seen":"2026-08-18T17:57:33.61838Z","times_seen":437,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/images/freedom/phone.webp","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.758Z","timestamp":1787056066758,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/images/freedom/phone.webp HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/webp;charset=UTF-8\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WdxPeE0hgsHiJMx32D8iWram%2Bse9T8nfl6oe4xAUKA8Aoe%2BP9oP%2F7QIJYC2CICalJsX3sHI4IkQNRVjFVNv2EZyH1aRzGhhWhDRRNpZR6noYo9uuE2iLQw%2BxNHsL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2d0ea213b89b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 351220\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":351220,"size_decoded":352064,"mime_type":"image/webp; charset=UTF-8","magic":"RIFF (little-endian) data, Web/P image","md5":"c244f5c9ae005fe878f05cf263d15184","sha1":"937b207c50196bc0dcf5516abe458c994fb93d6e","sha256":"5fcc7c8c4b42d7bf153867e4b3e0090fa3c3afc1ff95f3df3fdbd81013eb97b0","sha512":"c765cdf303ebc793270aeda0af6113bd3f6c280d32f00afc253f83f6f667bc72057a266595178ed7c626f3ac8fc17bf43b68f0338e80edf417ac238e5c1a70c3","ssdeep":"6144:HQTkl7Wten+pBMwrFF0ZQDVTHkEvy4MSxLBa5sTkL/Pa/NSFc:wTklCteyawP2QDVTHkEq4M8BadL/qSF","tlshash":"287423a47c010fe9fa039a318d428caa461d1ccf74e3acc5fd696d82696fc261d746f2","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.203109Z","times_seen":69,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/images/freedom/Chart-up.webp","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.759Z","timestamp":1787056066759,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/images/freedom/Chart-up.webp HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/webp;charset=UTF-8\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mfx95qIqHTMlcxlZNAs1p3MznX9%2F67iXAG1Ww390jJ5%2FPpQYDWT4i4B05XguE5%2FHpQwqN5ZnNFxfQCT1fsNe8n4q%2FzyweFUaqzqUKTuqzcOzqNi2oIxGUeDwWr25\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2d0ea213b8ab4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3536\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3536,"size_decoded":4378,"mime_type":"image/webp; charset=UTF-8","magic":"RIFF (little-endian) data, Web/P image","md5":"dba8955e383189acaf901e6131539a70","sha1":"a2d4d721ffc769a9459c41851abc2c346c370439","sha256":"60db8ac46d367db79399f096c58e6c710347c0be8ee8f29ecd5871a78eab3abd","sha512":"b2651901133d7e220d1680313cd0f4c623054dac77b7265b8df89b58776803ab7976563f692abf14949e7ea7a124105b65d0916494ecb1a5dc728ad39640f60f","ssdeep":"","tlshash":"93716c45984e4ea7db37425914908a2cfcea920080493f69cad0c13cc1294f6a6bbeb6","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.2037Z","times_seen":68,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/images/cryptocurrencies/coins.webp","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.764Z","timestamp":1787056066764,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/images/cryptocurrencies/coins.webp HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/webp;charset=UTF-8\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vMPCkSrmF4sf4llanNIzg5Tyj8FzotXOrTtgrdY2xgENQz1eVeS7I5GtE19CxMqktUVi2nPY2x7HasSYjyJOhqmkqLHy0DuPTq5ckX8g3Ap0btJQdJ4WYPbJa%2BwN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2d0ea214b8eb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 78588\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78588,"size_decoded":79425,"mime_type":"image/webp; charset=UTF-8","magic":"RIFF (little-endian) data, Web/P image","md5":"0fe93bed1d045b7595f759306a83c703","sha1":"abae914047e371b41cf87b102d46d8241edf79d3","sha256":"b4dbdc01aa78e5af5d8dbf5f6457ce53b7b87f04a3bd5247547f442e6958e811","sha512":"680e599da6cb7e0fc650bb14439d211d2aba671c8950c5ead5d9c1f7adaa42584ebfa7a7575abdaee29c022502085b566141e3d2f3fffbcb2b79ef16dc96bfe7","ssdeep":"1536:eFIk/gGR6rPoqr3lGzZHXyf6EqRdlJhTA9efEDkQFz7cVSUEl:e34xjLr3s9HCCEqPlHA9nfFcVSUq","tlshash":"6a73120f33a14d736796e5df2a9abb31f7983c425b8ed51e300818bc1448266f78d99a","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.204323Z","times_seen":68,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/heebo/v28/NGS6v5_NC0k9P9H2TbE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.933Z","timestamp":1787056066933,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/heebo/v28/NGS6v5_NC0k9P9H2TbE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://exoder.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30116\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 16 Aug 2026 10:28:29 GMT\r\nexpires: Mon, 16 Aug 2027 10:28:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 179957\r\nlast-modified: Tue, 09 Sep 2025 18:57:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30116,"size_decoded":30929,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30116, version 1.0","md5":"480b1d24f2aa69252a57d434d50a5288","sha1":"6128ad01170e7ace7e1cfa1d7c3d3dbc93242d61","sha256":"50dae2e12dae22c920388023e35aaebcd1e1d27bbe915c83d64210377e083e60","sha512":"db3d713d158f992aaab42936324d64b3edae8d5afded25bf1f2ad4e9380466a5a3d2f061f0a60293a20070b357f693ac0a3b2ee8f159cbc04aa33145db1003c7","ssdeep":"768:dtra3jdzHzeBerSkbONWaWIomeJQ9A2x9qvg2J:72j1qw58W+eOe2x9+g2J","tlshash":"b0d2f1234292dcaae76490b0d8385253409de8e4265b9b49b434cd2ebf7547103ebffb","first_seen":"2025-09-10T17:46:19.009186Z","last_seen":"2026-08-19T20:58:27.618272Z","times_seen":6232,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":49,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/images/coins/arrow-next.svg","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.938Z","timestamp":1787056066938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/images/coins/arrow-next.svg HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/landings/2/style/coins.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:47 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AYXMumlVSI341%2BUJfiQqbYkE0UUlyrAuynbTF42%2BZx1KWDgLKRz3srbRb57%2BUhFW1O8dLhXhn%2BIngR4tP%2B6lE%2B4o47FtujqOygswl2JfZxe0xcFmPUbuxt7RjI8S\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea225ba6b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":489,"size_decoded":1130,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"6a4062899dd9384ec7cd773436ab4336","sha1":"657fb651a67b31b69a637fcbb30755f3d0463657","sha256":"5daa65e2dad79f815e4163f57bca46c20f615992da9a4d8551bd6a27ca208f9e","sha512":"872194b932b5db4ed078b52fa8e15261c9b34a2a1c3e3821301cd4542f8100fdf5413eace8dde29a142a1627af20086abcc66cef6d842fdbef3f04d168687a05","ssdeep":"","tlshash":"bef0979716b4abe0c10b8730f25ca9a3255a18dbf218048d7292bb12ad8101d0f10cb3","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.204785Z","times_seen":59,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/domain_icons/755_1763680459313.png","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:47.054Z","timestamp":1787056067054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /domain_icons/755_1763680459313.png HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:47 GMT\r\ncontent-type: image/png;charset=UTF-8\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 20 Nov 2025 23:14:19 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KxTUmOiNxOB2YgYJB10gPaCEudOO1OHkCANGUESgiKUd%2FLmy56tx17WVm6xV4AB1mgAlIWb%2FT5QrL7WFCt8TE61DZeZ8T8eXVuZDbxI0lZL%2Bp5GIL8a1744gmSmX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2d0ea231baeb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 63821\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63821,"size_decoded":64664,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 244 x 293, 8-bit/color RGBA, non-interlaced","md5":"34639cc864df7cb0d067cc777b643c74","sha1":"e27cda84dbf17413f79beeb8fae2aa9e7f0a5e82","sha256":"8215705badc4b1dbc27b8242af6914d2aee31ba70b6aa483482714b3670a6520","sha512":"f07ab5eb30a9747856bd8cc79fe574db46eda2fd3fb53c07235610bce3f9704e07c64365c766360096dc900cdab48615e0a942551bde810374921c1d919bc78d","ssdeep":"1536:JIGGy39EeDTqCXLXk74kM2g2/AHIrLR1YNNIrfH:Jr13TDTTXgskMHZonxP","tlshash":"945312029ecc7d689879db7f8502e0acc3df2353235f3845a79057d82f296828c65a77","first_seen":"2026-08-18T12:09:54.878138Z","last_seen":"2026-08-18T12:28:17.201679Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/npm/swiper%409/swiper-bundle.min.css","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.692Z","timestamp":1787056066692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /npm/swiper%409/swiper-bundle.min.css HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1sL4AyIFY9GBhUPmn%2BZ3V6FAKahTyeMSL9tkfScghPtKAGb%2FLKM4Una3QgsnBjiZoWrpcXshsXlZ6%2FXr3WPgie9%2BqbVy8rSTHEuIqaiUzCjf%2BkFt8vcka2XQz%2BAN\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea20db5eb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18077,"size_decoded":6040,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (17812), with CRLF line terminators","md5":"8aa3f98e02499b9046bd9d4ed02c6fca","sha1":"08d56a14d5a20887413a32d360cf16b491d1a4c4","sha256":"910c8b82fbdf93e2bbf25cec82c501e8f0f7bd0403b08789db126479d3f96538","sha512":"171d50dccad4330ca115c5b78a6d1e878f0102297489169d8a4d97d94cede5bf99ac0ca4b68bdf89253b2c9b0be7a894b2af239b3601523b685a1f1250f0cf75","ssdeep":"192:rGkmUJbiKne0JlXZHZ+Sme+jexS4nxep/a2GZb0Q5nfufKlAYfg5fyeesedOJ9Aa:ryUbe0JdZHZ+W+SFnZ24tlWfF4XYz","tlshash":"a08244a86340282753274f364b71cbb9dd7444d20f9389ae91c0ee48d7f6db9136f2a9","first_seen":"2023-10-27T07:31:00Z","last_seen":"2026-08-19T04:11:19.055372Z","times_seen":642,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/style/home.css","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.699Z","timestamp":1787056066699,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/style/home.css HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FkkLMEsP%2BVWXXVKPC3G%2BmW%2BWxAL8ngEsvqOofuklYDno8lnyLbD%2FYSgsk0vV56YrC%2F8NKjKnM96wxWSK7vVxOBJMbyao2gMbX741k9frbtf51l8kUZd0L%2B1cApni\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea20db62b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6340,"size_decoded":2315,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"c3657fde18a4e627ce65e296c7ca6dbb","sha1":"8e759e35cebbfa9247c13fd62cada17085276ddd","sha256":"27c5c4b9b679816a84361a0a4798a0d07eee1310bdec6a3e10d237a6ad89ea46","sha512":"59a8c9d599da5c32034327e9dcdc8cf7f506495eb28ed8cbd6240fd89a9940da83f379843100a0a0fb7496a89482a71b9070cd944a336654203be95760eb2881","ssdeep":"96:Hc+vr1SGgCyhaM2znfjCpjTurVSm/i70GQXwFXvv3D:Nr1SGzm12znfjCpjTurVSp70V0vvz","tlshash":"32d1cf169612600d323ba735fbf3035deb284023970a4ab8bbdd3a955fb41a86315fcd","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.205804Z","times_seen":60,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/style/benefits.css","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.711Z","timestamp":1787056066711,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/style/benefits.css HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rfx9%2BEPAao1r14fV6cJpVOLnOmfZNoj55%2FK8M58OYCeFzz%2Fol5jqLx2McQ6EssOENZEc9V%2BPhqJfJXLG0yg8pC8a4zgtZb4Xu%2FJsjuVN%2FbcOsYQuV6NOVDIw%2BhiO\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea20eb6bb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5876,"size_decoded":2217,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"0a9ad88e2b1aa7f9dacf863468354302","sha1":"9f195edc53fc485c71311b376ee05c6820079109","sha256":"2971ada894491af5c5c57761be8bc7be5a00f93383cbda2eaff5620532918fd1","sha512":"69d6619313ec5d80f14a9c2ae09ae4068f15768ef75253fa925dd400f4313762ea956284440b8d962734997208d91e2e040ff2872159ec7fdc307b92e76bc986","ssdeep":"48:7w/Pw205U8NBTeB3jMK3je3M8/Nq8Aeki7nP/QnOFAB28tnBL+xEU8DX8kJvNvHY:YKU8gJSLkNaQnOFwQOhhHfV6+6grK","tlshash":"01c1487bc9013846123abe65bfa12d14c211f8435b46e1b0be8d715c8fb79684273ede","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.206312Z","times_seen":59,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/heebo/v28/NGS6v5_NC0k9P9H2TbE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.925Z","timestamp":1787056066925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/heebo/v28/NGS6v5_NC0k9P9H2TbE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://exoder.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30116\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 16 Aug 2026 10:28:29 GMT\r\nexpires: Mon, 16 Aug 2027 10:28:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 179957\r\nlast-modified: Tue, 09 Sep 2025 18:57:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30116,"size_decoded":30929,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30116, version 1.0","md5":"480b1d24f2aa69252a57d434d50a5288","sha1":"6128ad01170e7ace7e1cfa1d7c3d3dbc93242d61","sha256":"50dae2e12dae22c920388023e35aaebcd1e1d27bbe915c83d64210377e083e60","sha512":"db3d713d158f992aaab42936324d64b3edae8d5afded25bf1f2ad4e9380466a5a3d2f061f0a60293a20070b357f693ac0a3b2ee8f159cbc04aa33145db1003c7","ssdeep":"768:dtra3jdzHzeBerSkbONWaWIomeJQ9A2x9qvg2J:72j1qw58W+eOe2x9+g2J","tlshash":"b0d2f1234292dcaae76490b0d8385253409de8e4265b9b49b434cd2ebf7547103ebffb","first_seen":"2025-09-10T17:46:19.009186Z","last_seen":"2026-08-19T20:58:27.618272Z","times_seen":6232,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":24,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/heebo/v28/NGS6v5_NC0k9P9H2TbE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.927Z","timestamp":1787056066927,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/heebo/v28/NGS6v5_NC0k9P9H2TbE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://exoder.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30116\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 16 Aug 2026 10:28:29 GMT\r\nexpires: Mon, 16 Aug 2027 10:28:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 179957\r\nlast-modified: Tue, 09 Sep 2025 18:57:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30116,"size_decoded":30929,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30116, version 1.0","md5":"480b1d24f2aa69252a57d434d50a5288","sha1":"6128ad01170e7ace7e1cfa1d7c3d3dbc93242d61","sha256":"50dae2e12dae22c920388023e35aaebcd1e1d27bbe915c83d64210377e083e60","sha512":"db3d713d158f992aaab42936324d64b3edae8d5afded25bf1f2ad4e9380466a5a3d2f061f0a60293a20070b357f693ac0a3b2ee8f159cbc04aa33145db1003c7","ssdeep":"768:dtra3jdzHzeBerSkbONWaWIomeJQ9A2x9qvg2J:72j1qw58W+eOe2x9+g2J","tlshash":"b0d2f1234292dcaae76490b0d8385253409de8e4265b9b49b434cd2ebf7547103ebffb","first_seen":"2025-09-10T17:46:19.009186Z","last_seen":"2026-08-19T20:58:27.618272Z","times_seen":6232,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":31,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/images/home/Arrow-two.svg","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.936Z","timestamp":1787056066936,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/images/home/Arrow-two.svg HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/landings/2/style/home.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nsCJvgMiNTMqosgrVJ51zDXmaaLtwVzKR9RDTaQWOECYjnn6MjWSSuAe0p6e2lZU9XKVKySAeoNfRjjIIRh8XfG392qahembaGGcwMqs9AZyLwpck6aiJhrUnZm5\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea225ba4b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":488,"size_decoded":1120,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"b0ea8aaa74e1d8c16b8e00c110019392","sha1":"73c379d1e58ee1dc26119445850bb9f435e07236","sha256":"43a21876d53d3e424db89db11c79ab99fbd24d63c733175bf2ec19b10b645090","sha512":"6403133d9fc36dbea97d388560b0074eda9b3868c53e4c62c3452968c06e07577670c73a4167b86ffc68f7d561ea95e64b7ce27b1c072dc6c08ae85a1266f2be","ssdeep":"","tlshash":"d3f0599a4449c3e091438fb1f5295c72a13770f602cdc1ade1c1a824b2022ea2b84d44","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.206813Z","times_seen":59,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exoder.net/landings/2/style/stats.css","fqdn":"exoder.net","domain":"exoder.net","tld":"net"},"ip":{"addr":"104.21.82.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exoder.net/","date":"2026-08-18T12:27:46.704Z","timestamp":1787056066704,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoder.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 15:33:43 GMT","end":"Tue, 13 Oct 2026 16:32:12 GMT"},"fingerprint":{"sha1":"4A:82:9E:84:B0:C1:28:4F:74:C6:F3:E8:CE:9A:DB:B1:F6:60:6D:14","sha256":"08:CD:AA:14:83:AC:1D:76:EE:1F:E7:44:FE:3C:68:A1:B8:5D:9A:52:07:6B:2C:D6:7D:0F:0A:52:BC:97:F5:26"}}},"request":{"raw":"GET /landings/2/style/stats.css HTTP/1.1\r\nHost: exoder.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exoder.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:27:46 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 May 2025 10:21:01 GMT\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yi33GPz9LF37PwidUMRjpd8BuaWx092ayszS8jbRTErRpibLdQvAK38LNBkAJqvAPKyAJnb7LfomfyCmi3CTPBrdFA3p0CORaXPMe3N%2BqICHQUPd4Oezpv%2FBfXtE\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nage: 1118\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2d0ea20eb67b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1456,"size_decoded":1321,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"d841820013e9b4a07fc86aa13c59bb39","sha1":"f0644daa107aafa1718b4c93f2e6db4dc5b3c428","sha256":"582f7c12192f516e506737a5fed2227c0cedff52820d1bddd8063a6507d1c48f","sha512":"ae67874bf12ba2b91336bb97578560c08fa7622d30c9de7ff040a7def5b088612ee107bc7da65a7787d1bd76007338581f6353b53fd1f201ede86fdf37339938","ssdeep":"","tlshash":"1531462ac54a6047bc37beb467722314e68d9813c30282f47bada244dff44a8412afdd","first_seen":"2023-07-19T01:27:01Z","last_seen":"2026-08-18T12:28:17.207351Z","times_seen":59,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"exoder.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}