{"report_id":"a093dcd3-e77a-40a4-ab26-891fe35aa0eb","version":0,"status":"done","tags":[],"date":"2026-09-27T14:59:29Z","url":{"schema":"http","addr":"exodus-online.net/","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":0,"asn":214036,"as":"Ultahost, Inc.","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"exodus-online.net/","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"title":"Exodus — Multichain Crypto Wallet \u0026 Market Tracker","dom":{"size":368778,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"e18dbea959c73bef622e3f5ea5af0b0d","sha1":"aadc26ebe69fe3115d9bc1b6a724ecd6ae0ed981","sha256":"eca0674925079039eed5d3d60a91f5a6e222b9176a6e20f108716c94dac3aa34","sha512":"9c80288b2973c2bdb249f46b272a39085d008823e1bafcbee20f89a1b72b72f7d9961494cfd3e5887c3535db671ad0c0f45d9ce5e8f7f97ec9a18a29a4e5039c","ssdeep":"1536:Z7+eEqRDLYRDLMicip20yIK20yIQakezNp/ezNpAwJwVCuhWcuhWwZdCZdqxLx1P:NRF4","tlshash":"f8741a922251daaefd4b6f99103dfe28615e90fae747c6acc1ed9b5217838709f41cc0","dom_hash":"domhashb8dc9778055f411844c657903156afa5","first_seen":"2026-09-27T14:59:51.051159Z","last_seen":"2026-09-27T14:59:51.051159Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"exodus-online.net/","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":0,"asn":214036,"as":"Ultahost, Inc.","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-01T14:59:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"exodus-online.net","ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2026-09-23","domain_rank":0,"first_seen":"2026-09-27T14:59:45.996328Z","last_seen":"2026-09-27T14:59:45.996328Z","alert_count":140,"request_count":70,"received_data":1609461,"sent_data":36908,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"exodus-online.net/_next/static/chunks/27jktro2p5rq9.js","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c621d697f789f9a625e80384da50359c","sha1":"21b6e9613cc917a5fa984be427364d03e5757cbc","sha256":"5261101892e2476e4346e19e86fd5f19cbcf7c765ff76e92eb9cefcc86b6db6a","sha512":"59a0ad4d3270e18ccc1178b7a1c8902793a70e88a518f01ce894d1d3335251953289630dcaa26b4c6d9a3b6bb5563b8845d5fabfc521878c382c7d2a56957ffa","ssdeep":"384:p7/A2dkTd93jBT0diRTRIpowbIBqjac/s+rPYjDExpCkKMny1V0U5+wQhKHAlwe4:BN8pcowkpc/s+zYXExp7ly1V0UVD","tlshash":"4513e7b132d4faa3539341e0e43f2016f2780d7520ad6470a7e89c9f754d88da6befa5","size":44414,"data":"","first_seen":"2026-03-18T18:55:57.705164Z","last_seen":"2026-09-29T03:41:50.419986Z","times_seen":15690,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/_next/static/chunks/turbopack-365gp6lo53o-a.js","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d32008a3cf751a17b273d7c8c274b7b","sha1":"eafabc0def3230411dd01277ca09e34d6e4d7599","sha256":"3d53bc4d60d873d707c5b38346f63c6b9e2f6246fb2fcc00f7dbca7e07ded3d8","sha512":"5207a7bad872d695cc55a105a7e680a70e46f38e75c0722fa9a08e4ac1beafdbd8124f53a35221b9a8476bc488ddc45cf23d1d4050ce237175073bbb8d75edb5","ssdeep":"192:l4gM6B688Esg6+9ErUO/lhjTNWn+S3sBT4fCT3cXXqroor2:l4gM6Va/lHW+ssqCTMKA","tlshash":"a022c8da33a6f07343af94e7906b4004f17984a9145d141c93aca8e72c3949e85e7f76","size":10580,"data":"","first_seen":"2026-09-27T14:59:51.103095Z","last_seen":"2026-09-27T15:05:29.132397Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/_next/static/chunks/3cj9p54vu2_hd.js","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2548424e490928391bbe06fad65b0408","sha1":"c7640cf4d4478f2c43a4d1ab13c3bcefb5e49dd1","sha256":"02a4c9118bbd16df08e62360953c8206b99892a43042e5c1630a7fbf3c93d81f","sha512":"c8deaad22f146a63b3cd0763d86d038137cfa231e16445407613f4112283861cf5f3e28f8398edbfc61ba94d7f732a495f7dbfb0060110190a695b5568c42cb2","ssdeep":"384:uGXcwKMgtfZ8onS0FFdUCE1Ff8IiU5SOd+sUnjWIfMitiKf5yXdjzv/9Ap:ueiz8oSP5SOIvjWIfngv9Ap","tlshash":"91c2b626b90305be2aef93d7e41ceb95d9381602e5498b0cf39b4f31d744ba85587b0e","size":27399,"data":"","first_seen":"2026-05-20T19:23:32.420523Z","last_seen":"2026-09-28T13:09:38.115143Z","times_seen":200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/_next/static/chunks/3hpdki-e7iwrj.js","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d6af70de4ce6ea9fffac400f11b6ea5","sha1":"c3e790405431ba74ba44e9bbc5dd341c9a9ece53","sha256":"5ccdc0b056e64017875d740b6c45783a82cf3b3675cada6b56eb71fa3c9fdf1a","sha512":"2907d2abb4481af95f06f6e5528c97854543a0c33f27aaea5dd4a9f36b78284c98cc1909c23d8d380b08b7383e87165af4882ac966de688b670c0dcd9475c6b6","ssdeep":"384:TCn7vBksZkpwF5Sf67m3zqAxb2QCk4MWwE6GEQ0IMT7N:TCn7WsZSwDS2m3zqAx54YGIt","tlshash":"cdc2d4a97195f4911b9354a9803f500bf2392c3a286ce0b0b3e6ccf57aa059de537fd9","size":27574,"data":"","first_seen":"2026-09-27T14:59:51.106884Z","last_seen":"2026-09-27T15:05:29.192303Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/_next/static/chunks/42tlkv3h8p65g.js","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"97c9500035ac5eb13a5126fc60161c42","sha1":"b60037d9dc5fdbd940dd2c6aa27fd0603cba3a4c","sha256":"fef001dc20b6687befec12ae1a12b3531394757c2cf360e7a1c7fe57eb6c4fb9","sha512":"cb707955fb759ab7cdae131f1f9796a303f1df1f9ef3fba9a4c34b7e63564ee21766d36ce20903c8b524114101f5ad684bf0e1498b70bcfec711312764192cf5","ssdeep":"384:jUaqGDJp9MbbmN6fYqkmBKpYXfD3LdRUAgGcyZktMOiEKEVEhrkaZa:jUqJebmN6wmBKpYv7pRUwcyZjCBOhrFA","tlshash":"7082f855e244febcb66304cc96dec108316e6fd4ca5fcaa4f2bc946549120e96e3bf84","size":19027,"data":"","first_seen":"2026-09-27T14:59:51.114299Z","last_seen":"2026-09-27T15:05:29.160189Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/_next/static/chunks/3oy3w827ylcdw.js","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b206415ae7ac0d98dae9f84f4668454","sha1":"5425d5347e63b795d7b626fa7dfe697071e328b8","sha256":"a47583af1fec788614f2bab162fe785210c506c39f9f60c943596d6f93237c97","sha512":"c27a5caf5b70040609572dba1a483d4c7b51ea18147335137a51fd19228a1df7d74d9437b74434dc479d5726102901469e6fc8ba8ef838a7169058629298209e","ssdeep":"3072:KTLtaNMDfGWY7V70PTIt6h+8BibKNn0ZJGXjFMAL98nwdU+ez:KTLtKOfGWYpyI9vGzD58nwdU+ez","tlshash":"c324fbe83995f6626ab302b710af18037338252b280d4d60a251fdddb57845fb17bf9e","size":227315,"data":"","first_seen":"2026-09-27T14:59:51.120519Z","last_seen":"2026-09-27T15:05:29.161423Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/_next/static/chunks/2mnldv4j0sib4.js","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"860590e8b0b4b3809723c6e32155f06e","sha1":"98180ef315c90c9d0e6a71ad30998cbc98bd56be","sha256":"c471f35217a6b60c502799aa8376667e84fc56044bd59be9d8448ef626a1af01","sha512":"9f7f68bc0193fcfb79642799e1327bb3584d78d63c5d7c987293b31de16289075c024dd4fbea21ed742e4995c998b70f45afad3bcdcff8361abb8a1d9bff077e","ssdeep":"192:AKVYl4uiWFZCupbHttjxoHEFeDHcKhfz8zw286qXP:Vs/FltAFh78lY","tlshash":"e4e1c9b631a1b4e0d29b41848427580ef23a1d39a05e74b4a7fc8cf966b085df1b3f96","size":7025,"data":"","first_seen":"2026-05-09T03:56:06.393592Z","last_seen":"2026-09-27T15:05:29.179088Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/_next/static/chunks/14mrh2-p_w84d.js","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c6890538a7dca3df0f031d8acf1bf06","sha1":"c516eec44b0e1d433f4bb380271297e7eaf3ca15","sha256":"a3ac200f3ab8bfa57cf78882057741ddb5c0fbc9e2490c5d951c099b37484206","sha512":"ca54d71ce89709406d40dcbf86d9425bc74cbf7127291992d2b3f974300009b3f372f6a806ac2bc44e7f30d9ba6e2b6442754814e20dbff8fc4928cb992aa693","ssdeep":"384:2sUWst5gWTnrYV3uXeqbkJdeUtdaVmzlhjuNf9zXYpDuYNb4x2pk81FZTDxJRiGD:vUWstOoS3HSqD95hdFQcCDFZ1dqFY+V","tlshash":"b333ea753295faa303db91d9c0370012f2780d7130ad64b4b395d8af399dd8a92faf69","size":54646,"data":"","first_seen":"2026-03-18T18:55:57.692711Z","last_seen":"2026-09-29T04:11:35.222086Z","times_seen":17201,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/_next/static/chunks/3sqnxhmnblly7.js","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea4f8729e934244dcac007643b12d83f","sha1":"1afc55ca18d41aa854e528bf6e9d07736a5e1e35","sha256":"5f946b3ede85867322fbcffbcf8e890da33d19844ab0f6e68891b69695aead59","sha512":"f9e9f162381d3c3f15e89866a606c0610505c1af3926899acdb78e7c4ba62d5a401ee126e1a50fc04bb1a59dfef195fba0efd61809cff4532804e63c7b64a307","ssdeep":"3072:6sZ8jNAo2JZY+eCHnGEO0y1B2sGcPZR7B02NhXSB:6sZ8jNAoMZZesGEO0+B2sGcxR/NhXSB","tlshash":"3fe3f7f935d1f482076b50aac03f0006f22c4db7189e6860e3e5ddda756465de2b3faa","size":146746,"data":"","first_seen":"2026-07-16T22:30:17.129792Z","last_seen":"2026-09-27T15:05:29.113376Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/_next/static/chunks/1ab2g_sxzf2tn.js","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ac109d64a2cef39a0ef51108d51012f","sha1":"6f78b037c652b9c7d2264a330f71a388678c81da","sha256":"a6cd4b799a324c732726514f0567c3afb76f7fc0c9ba62d5e4d5edf101012e77","sha512":"936410c58430dc0400aa569c613cc0a5bea5e9b00744f2c5c5c0a2f1c6187188da8aa90d26dfbc89554777ffcebcd1299dbd91bb5aed70a0ce785803bcd83935","ssdeep":"384:fMFxC/7FmyHZo0Pj+d2itFUYpG5nrqT2HD99828+tskkKN2cXLXNQ/6U3y:fgC/DHD7YpeOS38+nkU/LXNQ/W","tlshash":"36c2296232a5f4d553ab81c8c43b400df3791e78606eb068b3f948b966a094de0b3fb5","size":27563,"data":"","first_seen":"2026-09-27T14:59:51.067621Z","last_seen":"2026-09-27T15:05:29.187666Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/_next/static/chunks/2wxomlbu4dbdk.js","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ed843f3e031a805bcb7ca78a0d227c2","sha1":"8eef8cac8c0a927a0bf35f297d51aff7ce0b6dc4","sha256":"995ddaeeab3973dcc93a2056bf7b56741b46eff77fe39d837a4cd3b2a444d13b","sha512":"08bc6e5731211eabd8b4c5c4d6dc59e6d46f14f854c9c674e9a6a385af1474d9daec94d986cf6597070f373b3d542bac11af8e0bb5a2cbbe078bef3e4592d557","ssdeep":"96:d0rbU4dfSQIoVY8B88I4hMzMRbH718ZP4A++fsPuaAKuxExPK25MWKkJJRPoEprj:m/UoFvoMMUbWZP0bT1MGJJnpso","tlshash":"0ce17424e105eeccbe3a418c955fd008641eaa6ccd4f8c78baf57c351a168c5ba23b96","size":7110,"data":"","first_seen":"2026-09-27T14:59:51.081402Z","last_seen":"2026-09-27T15:05:29.115143Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/_next/static/chunks/1wp7fmwgrv92l.js","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4cfd3406cd4b8de588d7c39d81c30fe","sha1":"35a7935d794c2b60b5ed74558381e07ea465e6c4","sha256":"5db39bae3063c19e36040123ff378dbf92ab431b4da5b5b17257649e7f2862fe","sha512":"11b6c6af553f9db05195d3961850965902815a77ef5ecb86c8a19c681c17df16676d4c9208277a75b27bbc792da9b634552fc48f1bd46ff548390395ebb9d5e0","ssdeep":"96:r0rbU4tOQSVIuVZy88I4yBzPRbGcQ18vFGfFQIfEnuaEyJmzFKy9EpKxBHmLReip:I/U0+IoPBVbGqvFqYKz0ZwAz","tlshash":"8fc1a720a055aedcbd37419cd19fd008351f6a6ccd1f9878f6f53c351a568817a23f9a","size":5901,"data":"","first_seen":"2026-09-27T14:59:51.075701Z","last_seen":"2026-09-27T15:05:29.20015Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/_next/static/chunks/0fujw7wb4lnje.js","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9185af779ddb7650c83ef8ec14aed33","sha1":"e8d3b5f6ded9d2166bfc8eaa99d0760906600819","sha256":"1f222728a7c78b0a9005dfd7cb004204d2c3088febcb48be7fb7ae538b07c045","sha512":"c944988f23ca7d2ef195938b18e0ab176fee65cc8b1833b2f3a25d678de6a0f3bf8617d8d646a73d649a6fb84a454a1784b32798fa40663b16df26ad9dbf4a29","ssdeep":"","tlshash":"b1215354f302487d7413a6e867a9b80cfa3e72668d5aa0f4fd6c55641a04fc9252bbc8","size":1362,"data":"","first_seen":"2026-09-27T14:59:51.064003Z","last_seen":"2026-09-27T15:05:29.11841Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/_next/static/chunks/15q8tzrp-k8zl.js","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2cb778280cec192edad7e2ba09abd8f4","sha1":"55a4b787ba90a4118292b898c134b83ab9f673ba","sha256":"6f8cb7ff54ce8099391572e677e3636ee6cb327f1af0d58b94dcef540ee75c19","sha512":"cc65faf4d76a7d8f9942611b07f37b896f1be3153d67e9a820e5367a365a95e80f9dee500389880fbb438524eeb067d4b56248efe5c588e109608c30426df9d7","ssdeep":"192:FPUoarPrrCPGvip263fiS88BpXLC4qmQ/muXV:5Ux3rCPGvdN4zXmaY","tlshash":"6fe1b6d4b2d2f57643eb40ca403b5169f23d29a4541e8464d3f5a8af7a20e4d90b2fb5","size":6821,"data":"","first_seen":"2026-09-27T14:59:51.11125Z","last_seen":"2026-09-27T15:05:29.16669Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/_next/static/chunks/1w-g0ud0qb4r1.js","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3c3e44cd96b0cc209c00be5f48161a3","sha1":"aab1bd77d5176c5148811fe4c0e564994d704db5","sha256":"8756d7470514ab90388da79ee3c3da972cb3794ab4cc8410def87969ce65570e","sha512":"4c653d482c5c40fb31fa7feda1b8e9760d1a261af5682a5dbd6751f6096e877f24bc5ba67ddd74c6f7fe163e5170f888f64e36f2cc1bb09ad3084103c86d126f","ssdeep":"384:fdWMukCNoHB03WU+26FkgYpjo09BtT2HDS8vRq5BMdHY2cYYrqmjH2RTwuDiE9Cb:fdWgC+HaWlYpjoSlTORCBMd4BqmvuDTU","tlshash":"d7e23b7132a1f8d9576b81c8c42f800cf26e2e78946e6474f3f55cb926a0949f1b3fa5","size":33878,"data":"","first_seen":"2026-09-27T14:59:51.055662Z","last_seen":"2026-09-27T15:05:29.116527Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"exodus-online.net/_next/static/chunks/3sqnxhmnblly7.js","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:57.741Z","timestamp":1790521137741,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /_next/static/chunks/3sqnxhmnblly7.js HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exodus-online.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 28 Jul 2026 09:58:46 GMT\r\netag: W/\"23d3a-19fa82997f0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146746,"size_decoded":39914,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ea4f8729e934244dcac007643b12d83f","sha1":"1afc55ca18d41aa854e528bf6e9d07736a5e1e35","sha256":"5f946b3ede85867322fbcffbcf8e890da33d19844ab0f6e68891b69695aead59","sha512":"f9e9f162381d3c3f15e89866a606c0610505c1af3926899acdb78e7c4ba62d5a401ee126e1a50fc04bb1a59dfef195fba0efd61809cff4532804e63c7b64a307","ssdeep":"3072:6sZ8jNAo2JZY+eCHnGEO0y1B2sGcPZR7B02NhXSB:6sZ8jNAoMZZesGEO0+B2sGcxR/NhXSB","tlshash":"3fe3f7f935d1f482076b50aac03f0006f22c4db7189e6860e3e5ddda756465de2b3faa","first_seen":"2026-07-16T22:30:17.129792Z","last_seen":"2026-09-27T15:05:29.113376Z","times_seen":3,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/_next/static/chunks/1w-g0ud0qb4r1.js","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:57.750Z","timestamp":1790521137750,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /_next/static/chunks/1w-g0ud0qb4r1.js HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exodus-online.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 28 Jul 2026 09:58:46 GMT\r\netag: W/\"8456-19fa82997f0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33878,"size_decoded":12516,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (16309)","md5":"f3c3e44cd96b0cc209c00be5f48161a3","sha1":"aab1bd77d5176c5148811fe4c0e564994d704db5","sha256":"8756d7470514ab90388da79ee3c3da972cb3794ab4cc8410def87969ce65570e","sha512":"4c653d482c5c40fb31fa7feda1b8e9760d1a261af5682a5dbd6751f6096e877f24bc5ba67ddd74c6f7fe163e5170f888f64e36f2cc1bb09ad3084103c86d126f","ssdeep":"384:fdWMukCNoHB03WU+26FkgYpjo09BtT2HDS8vRq5BMdHY2cYYrqmjH2RTwuDiE9Cb:fdWgC+HaWlYpjoSlTORCBMd4BqmvuDTU","tlshash":"d7e23b7132a1f8d9576b81c8c42f800cf26e2e78946e6474f3f55cb926a0949f1b3fa5","first_seen":"2026-09-27T14:59:51.055662Z","last_seen":"2026-09-27T15:05:29.116527Z","times_seen":2,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/coin/ethereum?_rsc=5CB68i4pnAekjehf","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.061Z","timestamp":1790521138061,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /coin/ethereum?_rsc=5CB68i4pnAekjehf HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":251,"size_decoded":689,"mime_type":"text/x-component","magic":"ASCII text","md5":"4ebaedcffda746afecb384948e5b7b1e","sha1":"4ce5023d04d24f80c0cf6356d4f99f1ad5484f3b","sha256":"9b49dd5553d26a6ff70794a031c97beafaa64461bc220cc1f7b89ff229d54cfa","sha512":"e018022ada33db39ef68bccbb06a99eb667744bb0202f2fbe53cc53a6ffc9e699fed02cd566ac2ca08530ae2174ab002f67c4fbdcd59a78bbf6645cf18433a69","ssdeep":"","tlshash":"cad0c22b410025a21cff10c1802ee81b6a0e563b12d95cf080811e2623a327502975f3","first_seen":"2026-09-27T14:59:51.057286Z","last_seen":"2026-09-27T15:05:29.170724Z","times_seen":2,"resource_available":true,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/search?_rsc=7h4NYy5eoyMcNlUN","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.658Z","timestamp":1790521138658,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /search?_rsc=7h4NYy5eoyMcNlUN HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2413,"size_decoded":1519,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (2036)","md5":"b606f40468ebe8efa1de1d70a4d05a0e","sha1":"dc28bac33b2a2d765e088f0c1040662408a09fdf","sha256":"832084d5a91319752ba92517f219aeeba04797c21424a5757d419b0f6338dbee","sha512":"ddd885233d1e341901a59ee07b1b52cc615a6c90c33255885ac05e3d8287f7e59506c7ec1d62dfc6f46685ed46dc0257dd66eedfdde3d20dacaf0e65aa1b8b34","ssdeep":"","tlshash":"6841247fe600ed5d7b97ca8d08aba32da21c1337cb645d7f414d8c0846dea5a1e413a0","first_seen":"2026-09-27T14:59:51.058533Z","last_seen":"2026-09-27T15:05:29.177495Z","times_seen":2,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/search?_rsc=l8Y7EWkCgaEZrOCz","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.688Z","timestamp":1790521138688,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /search?_rsc=l8Y7EWkCgaEZrOCz HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHB1YmxpYyk/search\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":445,"size_decoded":856,"mime_type":"text/x-component","magic":"ASCII text","md5":"a19e681f837105e98d3d14f400f637b1","sha1":"2f7831bbdea0170452807214fca1e02549420622","sha256":"18f2278486299aed72c5c7be4188d21d8cb9a9eefa91c1e08c964b8951c039a3","sha512":"935de6493f188c59c12f98773095436f07a2b106131bfc8edc8f7b4404c60253f1f12206ef319896e0cd309765b953d2ef283c575d4b3dc9f5a6efadaa7ebb14","ssdeep":"","tlshash":"fbf0ab23e208ed693c76c84c0c6e433e817d687b993634e4b28c8c18438087627ca6c0","first_seen":"2026-09-27T14:59:51.05954Z","last_seen":"2026-09-27T15:05:29.136204Z","times_seen":2,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/help?_rsc=tZZbOIIwN4qaDK0x","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.946Z","timestamp":1790521138946,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /help?_rsc=tZZbOIIwN4qaDK0x HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHB1YmxpYyk/help\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":445,"size_decoded":856,"mime_type":"text/x-component","magic":"ASCII text","md5":"a19e681f837105e98d3d14f400f637b1","sha1":"2f7831bbdea0170452807214fca1e02549420622","sha256":"18f2278486299aed72c5c7be4188d21d8cb9a9eefa91c1e08c964b8951c039a3","sha512":"935de6493f188c59c12f98773095436f07a2b106131bfc8edc8f7b4404c60253f1f12206ef319896e0cd309765b953d2ef283c575d4b3dc9f5a6efadaa7ebb14","ssdeep":"","tlshash":"fbf0ab23e208ed693c76c84c0c6e433e817d687b993634e4b28c8c18438087627ca6c0","first_seen":"2026-09-27T14:59:51.05954Z","last_seen":"2026-09-27T15:05:29.136204Z","times_seen":2,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/icon.svg?icon.3j9fo-9rwrxu6.svg","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:57.870Z","timestamp":1790521137870,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /icon.svg?icon.3j9fo-9rwrxu6.svg HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exodus-online.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:57 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Accept-Encoding, rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-nextjs-cache: HIT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":818,"size_decoded":914,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3732b3f8661cdf416b39351f2bc95a85","sha1":"da3b474b99b4115ac2857a041361f998f8b08357","sha256":"828fe98dfe8f89fee7760b4f468b865d608418e9426851dc638bce956e5765af","sha512":"d2eb847e2e7a0f7155890e97d3cfc52533a10f2a36cd101d27209f8ca5abe5c9c2963b19d6d5dd5876158da15ef62f98083336cd7af7700daf558250c43c83b5","ssdeep":"","tlshash":"3601bdb4d8ada917da0c91eacf4d783645a852d75a400125f189ab2c2f358d30f1bef4","first_seen":"2026-09-27T14:59:51.061336Z","last_seen":"2026-09-27T15:05:29.193477Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/coin/binancecoin?_rsc=5CB68i4pnAekjehf","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.064Z","timestamp":1790521138064,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /coin/binancecoin?_rsc=5CB68i4pnAekjehf HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":254,"size_decoded":690,"mime_type":"text/x-component","magic":"ASCII text","md5":"d2ec12b81104094e3c449a0365b7b6ae","sha1":"4ccfcdba12c64188bd661361515a76fd48e6c113","sha256":"38b125f83bd497a3ac723cfb0aa7b9a658a93ea4497eeab488c99682ac39d98b","sha512":"69c7643c16bab069ab12e3959331c559577d06c4f37cb7104fa0a126172ed84bae076af775a5b5f448928bc0206573b37ef416b1bc55bff55282b51da1b7e08e","ssdeep":"","tlshash":"3ed0c22b820425a61cff10c1802ad81b690e563b12995cf580911e2523e327142935f3","first_seen":"2026-09-27T14:59:51.062372Z","last_seen":"2026-09-27T15:05:29.13682Z","times_seen":2,"resource_available":true,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/_next/static/chunks/3cj9p54vu2_hd.js","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:57.748Z","timestamp":1790521137748,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /_next/static/chunks/3cj9p54vu2_hd.js HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exodus-online.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 28 Jul 2026 09:58:46 GMT\r\netag: W/\"6b07-19fa82997f0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27399,"size_decoded":9081,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (27399), with no line terminators","md5":"2548424e490928391bbe06fad65b0408","sha1":"c7640cf4d4478f2c43a4d1ab13c3bcefb5e49dd1","sha256":"02a4c9118bbd16df08e62360953c8206b99892a43042e5c1630a7fbf3c93d81f","sha512":"c8deaad22f146a63b3cd0763d86d038137cfa231e16445407613f4112283861cf5f3e28f8398edbfc61ba94d7f732a495f7dbfb0060110190a695b5568c42cb2","ssdeep":"384:uGXcwKMgtfZ8onS0FFdUCE1Ff8IiU5SOd+sUnjWIfMitiKf5yXdjzv/9Ap:ueiz8oSP5SOIvjWIfngv9Ap","tlshash":"91c2b626b90305be2aef93d7e41ceb95d9381602e5498b0cf39b4f31d744ba85587b0e","first_seen":"2026-05-20T19:23:32.420523Z","last_seen":"2026-09-28T13:09:38.115143Z","times_seen":200,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/_next/static/chunks/0fujw7wb4lnje.js","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:57.751Z","timestamp":1790521137751,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /_next/static/chunks/0fujw7wb4lnje.js HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exodus-online.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 28 Jul 2026 09:58:46 GMT\r\netag: W/\"552-19fa82997f0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1362,"size_decoded":1277,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1362), with no line terminators","md5":"d9185af779ddb7650c83ef8ec14aed33","sha1":"e8d3b5f6ded9d2166bfc8eaa99d0760906600819","sha256":"1f222728a7c78b0a9005dfd7cb004204d2c3088febcb48be7fb7ae538b07c045","sha512":"c944988f23ca7d2ef195938b18e0ab176fee65cc8b1833b2f3a25d678de6a0f3bf8617d8d646a73d649a6fb84a454a1784b32798fa40663b16df26ad9dbf4a29","ssdeep":"","tlshash":"b1215354f302487d7413a6e867a9b80cfa3e72668d5aa0f4fd6c55641a04fc9252bbc8","first_seen":"2026-09-27T14:59:51.064003Z","last_seen":"2026-09-27T15:05:29.11841Z","times_seen":2,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/coins/bitcoin.png","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:57.875Z","timestamp":1790521137875,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /coins/bitcoin.png HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exodus-online.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:57 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-cache, no-store, must-revalidate\r\nlast-modified: Tue, 28 Jul 2026 09:59:47 GMT\r\netag: W/\"2fd2-19fa82a8638\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12242,"size_decoded":12757,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"565e8c524f6da22928811f836d0b92a2","sha1":"c52a8b6052273f04ffe097517461948beb849d3b","sha256":"1eb4e75d64a76a5d1fba301715ae227c683b34e8f75291670cdf7ae2a59de86f","sha512":"eaec675e23843f9fbe93edf354d54bd9b35001daa17b2345f6193e004035f1d16e0f5fdd933826a0dfb2e58e803174adf0cffdedba3ed561b1f1f528b15f4263","ssdeep":"192:CcG4VfIT9czHUiIxaA0BOlAD6sXLsU9Hogsr/ncqUd/gaPQ8SB+Dfd4rfMst/C0b:1G4VfIOExaA0Bz6aLmncqqoFBdLMoC0","tlshash":"1a42c005aae317c9cfa9803311a524136489c3800e65e8e6b1d4dc7cee9eb096fb37e5","first_seen":"2024-07-06T20:02:44Z","last_seen":"2026-09-27T19:23:24.839997Z","times_seen":1568,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/coins/ethereum.png","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:57.877Z","timestamp":1790521137877,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /coins/ethereum.png HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exodus-online.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:57 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-cache, no-store, must-revalidate\r\nlast-modified: Tue, 28 Jul 2026 09:59:47 GMT\r\netag: W/\"333a-19fa82a8638\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13114,"size_decoded":13504,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"af87366546180c799987073ac53f0733","sha1":"184c444a964020e531cb72b9c5e3017e411d5185","sha256":"d90e937d915ab0c865ff6e335361386c56524d4d33fb66f2f04defe1500082eb","sha512":"01d259380cb9b000fafe13cd736aa34b2f73d4e5ab8927d44347a33f4168914cd97d10bda83ffbcd5da4c4c90f7bd9acb90026c7f6c0cd3f73c634ba697cb106","ssdeep":"192:htyirrPkRdnpyRa5GKLC4XCLAJRwwTCW2BwLVrCu3O1AFkNsJgvl8qiY0x:7xrPkX5Gt4XCLAPjIB67YRvTiX","tlshash":"3342afb7dc26c34e0440984c756c7bb5ac6abe6ccc4bfe7127f5b46db86418e7644089","first_seen":"2024-07-06T20:02:44Z","last_seen":"2026-09-27T19:23:24.803886Z","times_seen":1331,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/coin/bitcoin?_rsc=5CB68i4pnAekjehf","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.062Z","timestamp":1790521138062,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /coin/bitcoin?_rsc=5CB68i4pnAekjehf HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":250,"size_decoded":687,"mime_type":"text/x-component","magic":"ASCII text","md5":"843b5514eca201c8d82ad63b0d800ab4","sha1":"af7e61a89a47e24ddd33ac338f1b4366aa26dd16","sha256":"0b2f51582cb45066d78f38f10c90412e3b708a016df03cdc755f73e42693f7c2","sha512":"57496475dc8a26fd7418d857127fd9a9b777f3bddbea7246fa5bdca8d4d0311e71eaae6d44e006361e137685b36be61d05c54336cffd63361d0ce9fa85537677","ssdeep":"","tlshash":"07d0122b410425a61dff10d1802ad81b690e563b12995cf590911e2623a617556975f7","first_seen":"2026-09-27T14:59:51.066406Z","last_seen":"2026-09-27T15:05:29.114252Z","times_seen":2,"resource_available":true,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/_next/static/chunks/1ab2g_sxzf2tn.js","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.780Z","timestamp":1790521138780,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /_next/static/chunks/1ab2g_sxzf2tn.js HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exodus-online.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 28 Jul 2026 09:58:46 GMT\r\netag: W/\"6bab-19fa82997f0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27563,"size_decoded":10826,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (17865)","md5":"7ac109d64a2cef39a0ef51108d51012f","sha1":"6f78b037c652b9c7d2264a330f71a388678c81da","sha256":"a6cd4b799a324c732726514f0567c3afb76f7fc0c9ba62d5e4d5edf101012e77","sha512":"936410c58430dc0400aa569c613cc0a5bea5e9b00744f2c5c5c0a2f1c6187188da8aa90d26dfbc89554777ffcebcd1299dbd91bb5aed70a0ce785803bcd83935","ssdeep":"384:fMFxC/7FmyHZo0Pj+d2itFUYpG5nrqT2HD99828+tskkKN2cXLXNQ/6U3y:fgC/DHD7YpeOS38+nkU/LXNQ/W","tlshash":"36c2296232a5f4d553ab81c8c43b400df3791e78606eb068b3f948b966a094de0b3fb5","first_seen":"2026-09-27T14:59:51.067621Z","last_seen":"2026-09-27T15:05:29.187666Z","times_seen":2,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/privacy?_rsc=2yGAsAUbkZEZgVsP","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.864Z","timestamp":1790521138864,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /privacy?_rsc=2yGAsAUbkZEZgVsP HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHB1YmxpYyk/privacy/__PAGE__\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6366,"size_decoded":2813,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (4358)","md5":"551b7e435904a4727a89a7eb7e39c626","sha1":"6593788daa57c6a00c7b139d4a63bc90b2f7452a","sha256":"cca0ae5647a9525664859f2e16d2b59945e21e21c553464526c779af4e32e747","sha512":"5bca389f3d3a9a3722c89b32792ea4f91cde1566cf9ca57de36fdec0f85dcc01efa36cc34fca7e3363d132698e6621cb76e913b854f258a4d63a26268e6fc2f0","ssdeep":"192:LgMDvYAWr82vOMXvBh3z5DgBh39BLpPasGbSwQBh3RJQIeBhvBh9Op8:1YVXTHlgH9BV5HRkfY6","tlshash":"a9d1103e57497ebe3e678159a55fe22b272d423b8a664df292fc5d2143c20366e133c0","first_seen":"2026-09-27T14:59:51.068864Z","last_seen":"2026-09-27T15:05:29.173806Z","times_seen":2,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-27T14:58:57.072Z","timestamp":1790521137072,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:57 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nlink: \u003c/_next/static/media/797e433ab948586e-s.p.0r6juujl39pe6.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/caa3a2e1cccd8315-s.p.0wgildi0cnwt9.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\"\r\nx-powered-by: Next.js\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}],"data":{"size":368167,"size_decoded":77486,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"a3ad138e4e90e78922b2131a711b0bc7","sha1":"4691b8f9fbfbddd648142f2e4629d054cab557ba","sha256":"b8903f28ef64b10dace327d2a0c45b95b34baf009db7dd5c6be05c1529218e92","sha512":"75e789576be1abd7f9de4b00bfd2e736d6fd2e58197022b1c8939f25a6a8c2b9ff6d02ec4286140ace1dd4b33bcba4e7cdf67b9ae27abb49866ed974a5eb05d6","ssdeep":"1536:4VA+HcRDLYRDLTiciW20yIK20yINaRezNp/ezNpMwJwHCuhWcuhWFZdCZd7xLx4D:QOaE","tlshash":"29741a922251daaefd4b6f99103dfe28615e90fae747c6acc1ed9b5217838709f41cc0","first_seen":"2026-09-27T14:59:51.069988Z","last_seen":"2026-09-27T14:59:51.069988Z","times_seen":1,"resource_available":true,"data":null}},"time_used":472,"timings":{"blocked":-1,"dns":301,"connect":19,"send":0,"wait":128,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/coins/usd-coin.png","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:57.885Z","timestamp":1790521137885,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /coins/usd-coin.png HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exodus-online.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:57 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-cache, no-store, must-revalidate\r\nlast-modified: Tue, 28 Jul 2026 09:59:47 GMT\r\netag: W/\"6731-19fa82a8638\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26417,"size_decoded":26776,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"76c6fe8560fc7f0dc487edfe08cc5fbc","sha1":"5a87d585db1fd7b5bba9261366ebdda0e25523cb","sha256":"79deff2c3654a94ca0e483276831da515205010bf553008862a677b6108aeb22","sha512":"40b4b30feffabac2477e8aa695b4a7e4d9427e4abe38ffdeef9845280a945f0d64770d6ae13003420420e8647a9821ba95bb252983068dde6d01000b4d04f8dd","ssdeep":"384:peufZxlYncJ946u1CFK36U19IxAU0YhSyp1OofPiPdvVbFmO+28gdHLS34:pZYncDYEFK3f19CR4y7Oo3iPB8a9","tlshash":"fcc2e1d1c8a7d2deec4b1823b514eed561b57e69ff163488e4e42a38b6f5c40086389b","first_seen":"2024-08-19T17:21:32.593297Z","last_seen":"2026-09-27T15:05:29.117266Z","times_seen":346,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/coin/ripple?_rsc=5CB68i4pnAekjehf","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.063Z","timestamp":1790521138063,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /coin/ripple?_rsc=5CB68i4pnAekjehf HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":249,"size_decoded":688,"mime_type":"text/x-component","magic":"ASCII text","md5":"21086c2939c2897967792bbbadc49805","sha1":"f50ed15524361b3d60d52eeaa00be93a6ca47e57","sha256":"a83ee66a60b9cd6e19515770e220f390c84f85e5759639b55a84059b2c0c8f12","sha512":"3533f335f52217711c4cfb1c5baf6e32d3d52b29a64fff8ab2ffa0a4c84b0edc063c66cee63918cfdf617624b8763c23ff6d6a481d10f5c55f65c866c0287db0","ssdeep":"","tlshash":"fad05b2b411429b61dff10d2803ed81b6a0e563b12dd5cf5d0911f2523f71b552975f7","first_seen":"2026-09-27T14:59:51.072862Z","last_seen":"2026-09-27T15:05:29.189913Z","times_seen":2,"resource_available":true,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/register?_rsc=fGJn87jYv0bW619I","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.743Z","timestamp":1790521138743,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /register?_rsc=fGJn87jYv0bW619I HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KGF1dGgp\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8939,"size_decoded":2770,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (4823)","md5":"903bd12585a5287f92fec0d794b12894","sha1":"a409182fafb4a7c9a112a31f00679e79f7b59f92","sha256":"f34eff1d694bb46d53836373d5bfd407f448c0b9ffe08811919ea38ecac7809e","sha512":"93bc18d508087d9ace117e0d4fcb32d3925ebbf3c0e830329928c5e6ed4ee498df25f6fd40e2f3f4d3769dcd5f0ae5b2f2991b5bf4da691c30b400d92c291d9d","ssdeep":"192:YAG+/OJQdMHmFqawfdhyd3SHCfLFTn2hIYab9IY9DIYrOH6p9o9Jo1gD1lvFI0Iv:YAGIIYY8aYqYZabY","tlshash":"8a02cd3e9706ad7dae774548691fe32a531d4736caa68eb6e2fd6e1113861306e033c0","first_seen":"2026-09-27T14:59:51.074405Z","last_seen":"2026-09-27T15:05:29.11781Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/_next/static/chunks/1wp7fmwgrv92l.js","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.848Z","timestamp":1790521138848,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /_next/static/chunks/1wp7fmwgrv92l.js HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exodus-online.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 28 Jul 2026 09:58:46 GMT\r\netag: W/\"170d-19fa82997f0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5901,"size_decoded":2926,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5885), with no line terminators","md5":"e4cfd3406cd4b8de588d7c39d81c30fe","sha1":"35a7935d794c2b60b5ed74558381e07ea465e6c4","sha256":"5db39bae3063c19e36040123ff378dbf92ab431b4da5b5b17257649e7f2862fe","sha512":"11b6c6af553f9db05195d3961850965902815a77ef5ecb86c8a19c681c17df16676d4c9208277a75b27bbc792da9b634552fc48f1bd46ff548390395ebb9d5e0","ssdeep":"96:r0rbU4tOQSVIuVZy88I4yBzPRbGcQ18vFGfFQIfEnuaEyJmzFKy9EpKxBHmLReip:I/U0+IoPBVbGqvFqYKz0ZwAz","tlshash":"8fc1a720a055aedcbd37419cd19fd008351f6a6ccd1f9878f6f53c351a568817a23f9a","first_seen":"2026-09-27T14:59:51.075701Z","last_seen":"2026-09-27T15:05:29.20015Z","times_seen":2,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/coin/tether?_rsc=tXyZJ52UQVBCVsD3","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.656Z","timestamp":1790521138656,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /coin/tether?_rsc=tXyZJ52UQVBCVsD3 HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2552,"size_decoded":1699,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (1568)","md5":"9ecb5f919ad6392dbf4a7e33ce9604f8","sha1":"1ceee77260ecba6c168bc53d4d275b4de11553ac","sha256":"a0a0ec24b0edd4c9264a00c0c118e5c8a709df54ab3293446547aef219c0d363","sha512":"b4a4e1144b5e7c1a26efbb989080a34c60f3af33baeffe8e95de07803dde7c1e0eac39f950fbf1c13717af744e96ae01af1af3963cb4f34c8e41b404b88f337c","ssdeep":"","tlshash":"8e51153fd600ed5d6b97c98a04abe22ea64c13378b545cbb814d9c1847da65e1e423e1","first_seen":"2026-09-27T14:59:51.076878Z","last_seen":"2026-09-27T14:59:51.076878Z","times_seen":1,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/login?_rsc=w7y6nB6E5Nueb3gD","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.819Z","timestamp":1790521138819,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /login?_rsc=w7y6nB6E5Nueb3gD HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KGF1dGgp/login/__PAGE__\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":984,"size_decoded":1055,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (424)","md5":"01fcfd916970060652d7997b1fcce328","sha1":"a3f6c3d5b6cb58210e7dd6ff370c153d51f0ac09","sha256":"805a53ca6deed78c440ddd80332909058114284d897d256afea4917e63d87720","sha512":"e0205e6be7f10ae0dcca7a3f66f3a30cf123a0e637fa70303b7779850cdae96307a63b7e7af4d04ca845bab48a68e42d2ef3bea52bbd6475759c701433cf8fe2","ssdeep":"","tlshash":"8a117a2be60cfd5aaca1c84d2d5b973b91b9683788369cdcf28ddda90249c6527841c0","first_seen":"2026-09-27T14:59:51.07787Z","last_seen":"2026-09-27T15:05:29.172701Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/privacy?_rsc=CKc_ZyYEHqUEF59y","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.863Z","timestamp":1790521138863,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /privacy?_rsc=CKc_ZyYEHqUEF59y HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHB1YmxpYyk/privacy\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":445,"size_decoded":856,"mime_type":"text/x-component","magic":"ASCII text","md5":"a19e681f837105e98d3d14f400f637b1","sha1":"2f7831bbdea0170452807214fca1e02549420622","sha256":"18f2278486299aed72c5c7be4188d21d8cb9a9eefa91c1e08c964b8951c039a3","sha512":"935de6493f188c59c12f98773095436f07a2b106131bfc8edc8f7b4404c60253f1f12206ef319896e0cd309765b953d2ef283c575d4b3dc9f5a6efadaa7ebb14","ssdeep":"","tlshash":"fbf0ab23e208ed693c76c84c0c6e433e817d687b993634e4b28c8c18438087627ca6c0","first_seen":"2026-09-27T14:59:51.05954Z","last_seen":"2026-09-27T15:05:29.136204Z","times_seen":2,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/privacy?_rsc=5CB68i4pnAekjehf","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.538Z","timestamp":1790521138538,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /privacy?_rsc=5CB68i4pnAekjehf HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":615,"size_decoded":890,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (332)","md5":"9cbc2eb794dbff875922b1ae9b12a2e6","sha1":"c276d328c532975613f598471a027841aa449934","sha256":"30dab55463b6c7ab15f305989e0a17186c4fcc5f56c1a0a7889e96ad035df544","sha512":"008f70647c2c748afec1a6189d2922838d3eea997c55122e6b66393256081c463f8281de864505a589ce1434110f6a9db7450f1edc48d1104be8e4fa2dbe95c6","ssdeep":"","tlshash":"9df0287a8a083dc46ce4d45c176be70a24382933b0a94de8d8ce8e9403a543e1a4ba87","first_seen":"2026-09-27T14:59:51.078949Z","last_seen":"2026-09-27T15:05:29.135468Z","times_seen":2,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/search?_rsc=MI4mGD_gBDQkS0ch","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.676Z","timestamp":1790521138676,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /search?_rsc=MI4mGD_gBDQkS0ch HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHB1YmxpYyk\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8616,"size_decoded":2747,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (4270)","md5":"6d050239147e63c41871c941601f08c3","sha1":"a7937536cb7fc0e871f4847907e91a3bb3db1513","sha256":"65df32b997c08144db8cd7a5f11197c0257bd2fcf27eb9bbebb587f347dae0fe","sha512":"a9f9cfd523a480b7f4b9d7f44b17c14d710a8e171fc763e941e65840dfa27655066c5206a4886f571ddd4d41c76ec91855b11f4cdb409dc6944469f50670699d","ssdeep":"192:LOyhd3SH4fLFTB2hIY4b9IYfDIYb5ceq5kBqawSWaD0ng2n4nYnn3D5nicn2UDqM:dYKaYkYTMg2gAzRHvanOXs+r","tlshash":"1d02df3e9345ae7d6e7f445d245fe21a635d8636ca628eb9e3ed6d2103c60356f032c0","first_seen":"2026-09-27T14:59:51.080277Z","last_seen":"2026-09-27T15:05:29.191082Z","times_seen":2,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/login?_rsc=nC3siu_m_4Fu2Aui","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.784Z","timestamp":1790521138784,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /login?_rsc=nC3siu_m_4Fu2Aui HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KGF1dGgp/login\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":445,"size_decoded":856,"mime_type":"text/x-component","magic":"ASCII text","md5":"a19e681f837105e98d3d14f400f637b1","sha1":"2f7831bbdea0170452807214fca1e02549420622","sha256":"18f2278486299aed72c5c7be4188d21d8cb9a9eefa91c1e08c964b8951c039a3","sha512":"935de6493f188c59c12f98773095436f07a2b106131bfc8edc8f7b4404c60253f1f12206ef319896e0cd309765b953d2ef283c575d4b3dc9f5a6efadaa7ebb14","ssdeep":"","tlshash":"fbf0ab23e208ed693c76c84c0c6e433e817d687b993634e4b28c8c18438087627ca6c0","first_seen":"2026-09-27T14:59:51.05954Z","last_seen":"2026-09-27T15:05:29.136204Z","times_seen":2,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/_next/static/chunks/2wxomlbu4dbdk.js","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.824Z","timestamp":1790521138824,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /_next/static/chunks/2wxomlbu4dbdk.js HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exodus-online.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 28 Jul 2026 09:58:46 GMT\r\netag: W/\"1bc6-19fa82997f0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7110,"size_decoded":3259,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7110), with no line terminators","md5":"7ed843f3e031a805bcb7ca78a0d227c2","sha1":"8eef8cac8c0a927a0bf35f297d51aff7ce0b6dc4","sha256":"995ddaeeab3973dcc93a2056bf7b56741b46eff77fe39d837a4cd3b2a444d13b","sha512":"08bc6e5731211eabd8b4c5c4d6dc59e6d46f14f854c9c674e9a6a385af1474d9daec94d986cf6597070f373b3d542bac11af8e0bb5a2cbbe078bef3e4592d557","ssdeep":"96:d0rbU4dfSQIoVY8B88I4hMzMRbH718ZP4A++fsPuaAKuxExPK25MWKkJJRPoEprj:m/UoFvoMMUbWZP0bT1MGJJnpso","tlshash":"0ce17424e105eeccbe3a418c955fd008641eaa6ccd4f8c78baf57c351a168c5ba23b96","first_seen":"2026-09-27T14:59:51.081402Z","last_seen":"2026-09-27T15:05:29.115143Z","times_seen":2,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/help?_rsc=7h4NYy5eoyMcNlUN","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.943Z","timestamp":1790521138943,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /help?_rsc=7h4NYy5eoyMcNlUN HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2339,"size_decoded":1514,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (1960)","md5":"51ebad05d33188aa671ad3cb1542f1c8","sha1":"fb379b6cb1f091ca7a8e30cc641325b3eef3bbfa","sha256":"773d366cc5e046042ee2341ee277b1b7e23d5877f79ada0f91a471d41bd38f8c","sha512":"8d23685271b89db53f7a6cc0fcbb3f6dc412335b8a7bfb18a7657fbb5b3852cc346c9ed915a52ad4a0b51d41b573a37ac8f5e28974967139119b0f6ce4e5a471","ssdeep":"","tlshash":"7141333fa610ec5d7ba7ca8d08dba31ea25c1337cf705d6b414d9d0806cea5a2e413e0","first_seen":"2026-09-27T14:59:51.082579Z","last_seen":"2026-09-27T15:05:29.115863Z","times_seen":2,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/help?_rsc=73UaIXeo_gHklcI_","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.947Z","timestamp":1790521138947,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /help?_rsc=73UaIXeo_gHklcI_ HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHB1YmxpYyk/help/__PAGE__\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10820,"size_decoded":3256,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (4206)","md5":"2d5ca4aac68f2cd6d69844da9a493e4c","sha1":"7179eadb05d8bcdf3cde20888771a4b1a1abe8df","sha256":"78644b9ca1ec6ea1d989442da8cf2f6f793b0165c6fc098db4828a1a3ad73d9d","sha512":"eda0397787a3142f387f59f6eebd8e13184c41b1612e1733eecd3a2507351f7866e9b519719ebb8a134302be7e1805bb20f84e0d412fc6ca5ffb5c3c32c2c655","ssdeep":"192:+lMDvYAndlFwJCLQ1KjJR+K/8LtDKTjn4tYNA3CxkhIpQGmPc/NB+p+GB5M/uaGA:rYgEncjiYNWV4eTxYf0Yb","tlshash":"c822103e63852e7ebf77425c754fe216572d523acaa68eb1a2fd2a2513d20319d032c1","first_seen":"2026-09-27T14:59:51.089113Z","last_seen":"2026-09-27T15:05:29.201253Z","times_seen":2,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/coins/binancecoin.png","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:57.881Z","timestamp":1790521137881,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /coins/binancecoin.png HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exodus-online.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:57 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-cache, no-store, must-revalidate\r\nlast-modified: Tue, 28 Jul 2026 09:59:47 GMT\r\netag: W/\"420a-19fa82a8638\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16906,"size_decoded":17432,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"8c4132019f6809ff9c2a835b35af1856","sha1":"5a4964b666058590af8d4a7f73524e9d1f5d6cf5","sha256":"c8f109417aa3e33fa63a791dac00beed96d3e8bc452ffab61587e006603c18d5","sha512":"69aaaa16119febfa23b15cdfad197fb0130e4d4170a26a2eb430f9dc2dea913d004fdc71701bce2870085787983f25f929c36fcc89847484407cbff09c07e673","ssdeep":"384:QYbovmuoWjwje4x/W9D7EcA9Ez2UWQNe3Dqk7jz71yOsFO3jSVNvGpY:QDajj/g7EcA9gbXNe3Okv319sM3+f3","tlshash":"4c72d1f917026917d38b4a1571370a3b069693aacd082d210cf83c56365283fa7cfaeb","first_seen":"2026-01-28T05:19:21.280953Z","last_seen":"2026-09-27T15:05:29.196868Z","times_seen":132,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/search?_rsc=5CB68i4pnAekjehf","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.403Z","timestamp":1790521138403,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /search?_rsc=5CB68i4pnAekjehf HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":614,"size_decoded":889,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (331)","md5":"629656e0cdfe43d2110e322c3668aa09","sha1":"0147ba43d62fc5a71f7ca52c366f06301cd339f4","sha256":"12aa2fde65c809148c461e3a0f825cee9b90fee09b9411cced57889fce035818","sha512":"6d6f847dc0f9da2d4feec6c9de38237029755a8bca9e8ed440c5daec8d53efdb7daf84087947f0d54d3722da647d2c5b292d4ccd1b0c10d1b7d7d5f49a804dc9","ssdeep":"","tlshash":"f5f0427645083dc46df0d45c166be70b243c293370b94de8d8ce8e90036543d5e47a87","first_seen":"2026-09-27T14:59:51.091607Z","last_seen":"2026-09-27T15:05:29.141522Z","times_seen":2,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/register?_rsc=5CB68i4pnAekjehf","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.411Z","timestamp":1790521138411,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /register?_rsc=5CB68i4pnAekjehf HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":614,"size_decoded":888,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (331)","md5":"a4c7c4c70ecb267071d08fbd95970523","sha1":"24e1ed356446f67723001f1fc6c5c5d1f692aac7","sha256":"bf5d4529c1d81bdb50882f93611aaed46b256116cc94ec2977b829a4397de877","sha512":"28f624be390efbca444e6ca660127e8f6aaefb0ca5a219c5ada66f9c413d167e7725aaf769453d2843e97cf47a951d0d7ec034a66792009356171c4ef4a8e642","ssdeep":"","tlshash":"10f04276850c2dc46df0d45c1667e70a243c283370b94de8d8ce8e90036543d5e47a87","first_seen":"2026-09-27T14:59:51.093114Z","last_seen":"2026-09-27T15:05:29.120161Z","times_seen":2,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/register?_rsc=u_bty1QrfRAXweeL","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.764Z","timestamp":1790521138764,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /register?_rsc=u_bty1QrfRAXweeL HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KGF1dGgp/register/__PAGE__\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":984,"size_decoded":1055,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (424)","md5":"26852169ef17a5161c9869e9a725a74f","sha1":"238bbf909d8fc6a77124982cdc89ca47e4d840f5","sha256":"d007093ff17b8f70af39500e5f8c0566f9f3c9b5a7aa4c508f643fcf1225393a","sha512":"0a2f56d97d1732a78f82e46e1d705ead5c5eaff9c7bc5999d700f7bc07d07535e6060a9ae22115abe07d56f63808dfd663244072d892c44595147f3658349899","ssdeep":"","tlshash":"5711d017e708ed5a6c61cc4d3c6f973b81ac7837c4755cece29dcd990249c6527850c0","first_seen":"2026-09-27T14:59:51.094478Z","last_seen":"2026-09-27T15:05:29.157093Z","times_seen":2,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/privacy?_rsc=7h4NYy5eoyMcNlUN","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.853Z","timestamp":1790521138853,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /privacy?_rsc=7h4NYy5eoyMcNlUN HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2301,"size_decoded":1492,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (1922)","md5":"a17ea30fb6ccc6a46c30dbc5d2beaa00","sha1":"fdf8abe270299250035270119976aef8c244072f","sha256":"253288528ad10099a9e6a2d512a130705f1f3993c141f97771aeba3f77e2471b","sha512":"d877e1b26ef9a2e3bda75ba340e48239d209b337d8e68a278ad6fe5b4d1caad553ed0d49cfb12bcd3e34340c3b7df96c7204de71069beb02743a38d42f457a7b","ssdeep":"","tlshash":"d641227fa600ed5d7b97ca8a08dba31da25c1337cb705cbb454ddd0806cea5a2e413a1","first_seen":"2026-09-27T14:59:51.096106Z","last_seen":"2026-09-27T15:05:29.123057Z","times_seen":2,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/_next/static/media/caa3a2e1cccd8315-s.p.0wgildi0cnwt9.woff2","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:57.731Z","timestamp":1790521137731,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /_next/static/media/caa3a2e1cccd8315-s.p.0wgildi0cnwt9.woff2 HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:57 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 29288\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 28 Jul 2026 09:58:46 GMT\r\netag: W/\"7268-19fa82997f0\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29288,"size_decoded":29785,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29288, version 1.0","md5":"f4634c3bc1fa7cb53247e1f2872adb5a","sha1":"9d846db84c501327431670fe23b1a8ea1d2a5349","sha256":"9b6f5ff45b278c744b5f379a2c4ecbaf858a842b8eaf82ac8d21b699ca16c608","sha512":"e480a1ca3a52fdfd2f59daf185b56c9f203c4b0daa7a36537410ccefee9bfab229308145026aeea53a49d02cd7f0e89de8d4c05ec15fe80a2b09e754197afa49","ssdeep":"768:ePXLNqwQ5RnlpBAyv/2+NR6C36OojNMUp06QIhgXZY2Ko1K:e/LNHQtpBAQO+NR6k/eFp06zE0","tlshash":"27d2f155036f442269023b6a0619a9a0c172469fa9bd73c2407a6a931f67fd7d37dc8c","first_seen":"2026-05-13T23:24:18.838523Z","last_seen":"2026-09-29T05:29:02.823865Z","times_seen":17706,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/coin/tether?_rsc=5CB68i4pnAekjehf","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.394Z","timestamp":1790521138394,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /coin/tether?_rsc=5CB68i4pnAekjehf HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":249,"size_decoded":688,"mime_type":"text/x-component","magic":"ASCII text","md5":"b014d1f96f71fe757713094994de3e49","sha1":"4872274375e0839c2351b3dcc2bb2e58b91b9941","sha256":"d1a35e1c5282327ec3e1011337c66adb079e1bbb5afae007a4b3929023140d96","sha512":"ada3ac098033a18d172cefd4d65cca082b2ef9a7d9f6e56ca65c6a140f2b123c5a003e44c705792c207665882b6845347354d179484cd14153d12781ab43436f","ssdeep":"","tlshash":"b5d0122b410429b61eff10d1803ae85b690e563b129d5cf590911e2623e317552975f7","first_seen":"2026-09-27T14:59:51.097899Z","last_seen":"2026-09-27T15:05:29.184355Z","times_seen":2,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/login?_rsc=5CB68i4pnAekjehf","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.453Z","timestamp":1790521138453,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /login?_rsc=5CB68i4pnAekjehf HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":611,"size_decoded":888,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (328)","md5":"6924f4323abba000a1ebd03e9dd39168","sha1":"80a73c5f34c006c848161ae7f9f9828d3d3608f4","sha256":"387a7134d49794739d86750c1ad15ef845640a20497a5f52d9054e80e6775e8d","sha512":"e002859fc404b9d9cd6cf99a39073f25125e745dd6f40a3baff3917e8ae769fa86cbf213c835c5875f1b2ca0abb9776eeab5838e55412e1be3b5c89dc7ba5f46","ssdeep":"","tlshash":"96f0cd764a0c6dc46df4e498166be71a243c293370a94de8d8de8e90076543d5e47a87","first_seen":"2026-09-27T14:59:51.09905Z","last_seen":"2026-09-27T15:05:29.176433Z","times_seen":2,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/coin/binancecoin?_rsc=tXyZJ52UQVBCVsD3","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.646Z","timestamp":1790521138646,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /coin/binancecoin?_rsc=tXyZJ52UQVBCVsD3 HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2557,"size_decoded":1700,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (1568)","md5":"f6fbe4ced72869535e4951c370b1045a","sha1":"d5039f3512c181627c3d331126161c7f0ea62bbe","sha256":"8ba2a9cfd8b378fdca58d0ba1ae00a7f00ddd888c1a3668b167a11bc7ec79138","sha512":"3396a278b6e4477723a63345752058228ed4a82e182481fd1c22219d8fd49c0e83f744109b4b521c2496134214922ac5a229e43c2c16cfbe8ba461a274eb872b","ssdeep":"","tlshash":"f551343fd600ec5d7ba7c9ce04abe22ea60c17378b545cbf814d9c1846daa5a1e523e1","first_seen":"2026-09-27T14:59:51.100146Z","last_seen":"2026-09-27T14:59:51.100146Z","times_seen":1,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/register?_rsc=bGGR2Yrv0BbdJE4l","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.760Z","timestamp":1790521138760,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /register?_rsc=bGGR2Yrv0BbdJE4l HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KGF1dGgp/register\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":445,"size_decoded":856,"mime_type":"text/x-component","magic":"ASCII text","md5":"a19e681f837105e98d3d14f400f637b1","sha1":"2f7831bbdea0170452807214fca1e02549420622","sha256":"18f2278486299aed72c5c7be4188d21d8cb9a9eefa91c1e08c964b8951c039a3","sha512":"935de6493f188c59c12f98773095436f07a2b106131bfc8edc8f7b4404c60253f1f12206ef319896e0cd309765b953d2ef283c575d4b3dc9f5a6efadaa7ebb14","ssdeep":"","tlshash":"fbf0ab23e208ed693c76c84c0c6e433e817d687b993634e4b28c8c18438087627ca6c0","first_seen":"2026-09-27T14:59:51.05954Z","last_seen":"2026-09-27T15:05:29.136204Z","times_seen":2,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/terms?_rsc=m8eXcOGwnnDgpTod","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.828Z","timestamp":1790521138828,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /terms?_rsc=m8eXcOGwnnDgpTod HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHB1YmxpYyk/terms\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":445,"size_decoded":856,"mime_type":"text/x-component","magic":"ASCII text","md5":"a19e681f837105e98d3d14f400f637b1","sha1":"2f7831bbdea0170452807214fca1e02549420622","sha256":"18f2278486299aed72c5c7be4188d21d8cb9a9eefa91c1e08c964b8951c039a3","sha512":"935de6493f188c59c12f98773095436f07a2b106131bfc8edc8f7b4404c60253f1f12206ef319896e0cd309765b953d2ef283c575d4b3dc9f5a6efadaa7ebb14","ssdeep":"","tlshash":"fbf0ab23e208ed693c76c84c0c6e433e817d687b993634e4b28c8c18438087627ca6c0","first_seen":"2026-09-27T14:59:51.05954Z","last_seen":"2026-09-27T15:05:29.136204Z","times_seen":2,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/terms?_rsc=7bt_SPn0CF30WF2H","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.829Z","timestamp":1790521138829,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /terms?_rsc=7bt_SPn0CF30WF2H HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHB1YmxpYyk/terms/__PAGE__\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5311,"size_decoded":2517,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (4212)","md5":"5e6146c17b260bb6b54ab5446c79e235","sha1":"f0731410333d4e46a46408e502969f354ce9fea7","sha256":"15757a74bf2c0de59ff672f49b8deecf3e179c4528e6b9e9efdcd6b33fbebd85","sha512":"e86d76fcaf074ea017346667b3893052159d39ee39f9acff959a6155f80753e0ab21e57b72ed8f107147f73840edeca01ea406f5ee273f8b1b663b40e9406b4a","ssdeep":"96:b88gHdX6MDDjY4tLd1rS2edp5iMXvBh3gdyOPCWeMwj9tj1xIBh3gdQjXsqBh3g5:xggMDvYAEp5iMXvBh3RJBx1xIBh3Tsqy","tlshash":"61b1113e67896ebeae739558a14fe226172d513adba34df1a1fc5d2143c20369e033c1","first_seen":"2026-09-27T14:59:51.101221Z","last_seen":"2026-09-27T15:05:29.181849Z","times_seen":2,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/_next/static/chunks/turbopack-365gp6lo53o-a.js","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:57.744Z","timestamp":1790521137744,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-365gp6lo53o-a.js HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exodus-online.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 28 Jul 2026 09:58:46 GMT\r\netag: W/\"2954-19fa82997f0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10580,"size_decoded":4674,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10580), with no line terminators","md5":"2d32008a3cf751a17b273d7c8c274b7b","sha1":"eafabc0def3230411dd01277ca09e34d6e4d7599","sha256":"3d53bc4d60d873d707c5b38346f63c6b9e2f6246fb2fcc00f7dbca7e07ded3d8","sha512":"5207a7bad872d695cc55a105a7e680a70e46f38e75c0722fa9a08e4ac1beafdbd8124f53a35221b9a8476bc488ddc45cf23d1d4050ce237175073bbb8d75edb5","ssdeep":"192:l4gM6B688Esg6+9ErUO/lhjTNWn+S3sBT4fCT3cXXqroor2:l4gM6Va/lHW+ssqCTMKA","tlshash":"a022c8da33a6f07343af94e7906b4004f17984a9145d141c93aca8e72c3949e85e7f76","first_seen":"2026-09-27T14:59:51.103095Z","last_seen":"2026-09-27T15:05:29.132397Z","times_seen":2,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/coins/tron.png","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:57.888Z","timestamp":1790521137888,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /coins/tron.png HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exodus-online.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:57 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-cache, no-store, must-revalidate\r\nlast-modified: Tue, 28 Jul 2026 09:59:47 GMT\r\netag: W/\"197f-19fa82a8638\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6527,"size_decoded":6332,"mime_type":"image/png","magic":"PNG image data, 238 x 250, 8-bit colormap, non-interlaced","md5":"a5266fe31ee5f6ed3b0f50de5a085d01","sha1":"a2a632d840a2e5caa5f923bec3aef0a5d81748df","sha256":"d9adb9912b19945646ee8d4d36e4da8eb3f3c3d48c863ace08d8727cbb4280f2","sha512":"3a6a0cfad0a62efe56ae6d2aab33130cc456e731a1e11b33cd2894631e02895e6b5ed447ce2c55a9929e25d9dcc175c72eda975980520d5939c4dde3138fc0b8","ssdeep":"96:/IL2A6PRcykuThmBPtNFOnYr2EEOYGIDjV5oiURAVhhfdZK4X2Ao9aZiVz:QLURDIBPtWYr2fO2jrVVhoUFZiN","tlshash":"4fd18db81440a736d107aa4f4017167c1feafdb661754f7a3c34f80a09a5f89ca35ed0","first_seen":"2026-02-19T10:31:57.853514Z","last_seen":"2026-09-27T15:05:29.180408Z","times_seen":20,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/register?_rsc=7h4NYy5eoyMcNlUN","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.741Z","timestamp":1790521138741,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /register?_rsc=7h4NYy5eoyMcNlUN HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2413,"size_decoded":1519,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (2036)","md5":"b606f40468ebe8efa1de1d70a4d05a0e","sha1":"dc28bac33b2a2d765e088f0c1040662408a09fdf","sha256":"832084d5a91319752ba92517f219aeeba04797c21424a5757d419b0f6338dbee","sha512":"ddd885233d1e341901a59ee07b1b52cc615a6c90c33255885ac05e3d8287f7e59506c7ec1d62dfc6f46685ed46dc0257dd66eedfdde3d20dacaf0e65aa1b8b34","ssdeep":"","tlshash":"6841247fe600ed5d7b97ca8d08aba32da21c1337cb645d7f414d8c0846dea5a1e413a0","first_seen":"2026-09-27T14:59:51.058533Z","last_seen":"2026-09-27T15:05:29.177495Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/_next/static/media/797e433ab948586e-s.p.0r6juujl39pe6.woff2","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:57.729Z","timestamp":1790521137729,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /_next/static/media/797e433ab948586e-s.p.0r6juujl39pe6.woff2 HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:57 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 23108\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 28 Jul 2026 09:58:46 GMT\r\netag: W/\"5a44-19fa82997f0\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23108,"size_decoded":23605,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23108, version 1.0","md5":"cd5b25781181c5c03d99ac2cbf88016a","sha1":"0e04bb6e7b54057d64c421b959c8c22774ae632d","sha256":"5f3d6ad60f29d6cb708414ec6887163d63bf197377ef5417d2483ff31ace6c3b","sha512":"f41989a87c7438a19dff3325c3546aaad0039f2433b4fe8550f3831bb01acfae9956c3e6d402d83fb6c38df647156cab2e4ed2ccc321007e858760e9af7ffe6e","ssdeep":"384:4CAnZnTSz1wLaDPA2knsJ9ufQnGaWPegCLyUrMF97Vg8RWP94KiBjJRMbkcYCaXp:4CAQzec94U9uonMP7BF97V9RWl4KyLMW","tlshash":"aea2d004c129ac1911b6017780694ce99eef64d51cac357f9cbe2cbaddb5252fc3be28","first_seen":"2026-06-08T23:37:37.659571Z","last_seen":"2026-09-29T05:39:35.91227Z","times_seen":17588,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/_next/static/chunks/3hpdki-e7iwrj.js","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:57.737Z","timestamp":1790521137737,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /_next/static/chunks/3hpdki-e7iwrj.js HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exodus-online.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 28 Jul 2026 09:58:46 GMT\r\netag: W/\"6bb6-19fa82997f0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27574,"size_decoded":9017,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24140)","md5":"6d6af70de4ce6ea9fffac400f11b6ea5","sha1":"c3e790405431ba74ba44e9bbc5dd341c9a9ece53","sha256":"5ccdc0b056e64017875d740b6c45783a82cf3b3675cada6b56eb71fa3c9fdf1a","sha512":"2907d2abb4481af95f06f6e5528c97854543a0c33f27aaea5dd4a9f36b78284c98cc1909c23d8d380b08b7383e87165af4882ac966de688b670c0dcd9475c6b6","ssdeep":"384:TCn7vBksZkpwF5Sf67m3zqAxb2QCk4MWwE6GEQ0IMT7N:TCn7WsZSwDS2m3zqAx54YGIt","tlshash":"cdc2d4a97195f4911b9354a9803f500bf2392c3a286ce0b0b3e6ccf57aa059de537fd9","first_seen":"2026-09-27T14:59:51.106884Z","last_seen":"2026-09-27T15:05:29.192303Z","times_seen":2,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/icon.png?icon.34bd8gw92kaqa.png","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:57.869Z","timestamp":1790521137869,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /icon.png?icon.34bd8gw92kaqa.png HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exodus-online.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:57 GMT\r\ncontent-type: image/png\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Accept-Encoding, rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-nextjs-cache: HIT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":217595,"size_decoded":218209,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"94c7bf2251c5cc4a47bd6e3b94ac4d77","sha1":"3892e2e05a52932e8dad2b1f1184912755b3150a","sha256":"b32834629c27175b87cc69730c0c76e43bbd398ac9726c1941eace1297a75a8b","sha512":"8a706f51a27f07513eedb2dcbafddfc78c7f5a59c9903361b93f52dd612c91ccaee87a27b9210fff1464a0da147a0e946f9c9f8ffabd88d0149b71a31777656f","ssdeep":"6144:AWKnhpI4iM7goB0HnzdPndmSs25A58uoH:chpI4F0oBwlndmHCz","tlshash":"0b2423048d3ab5dad11ee97ef722d9ad1cbdb8344c58b692a123e914101c9088bfbd5f","first_seen":"2024-03-16T22:33:34Z","last_seen":"2026-09-27T15:05:29.183128Z","times_seen":37,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/coin/ripple?_rsc=tXyZJ52UQVBCVsD3","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.592Z","timestamp":1790521138592,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /coin/ripple?_rsc=tXyZJ52UQVBCVsD3 HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2552,"size_decoded":1702,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (1568)","md5":"f1b1e32fcfb087ad1c828c7dd1c997be","sha1":"16d2b9c75377c96c6e39ce57d3b2646652a466b1","sha256":"239d9fe2f27ec7a39cf196738a191dda48f18646651940873dbbed0e843e09f2","sha512":"99aac792190b5d23ce93d86ff6ca37b9d4eab9625c9536f0bdf71581a7f005282bee20b1bf6f3ebc1e123217732cae6c9d636a2b2ee975988a7347442f11e8d4","ssdeep":"","tlshash":"8551343fd700ec5d6bd7c9ce04abe22ea61c43378b545cbb804c9d1846daa5a1e423e1","first_seen":"2026-09-27T14:59:51.108989Z","last_seen":"2026-09-27T14:59:51.108989Z","times_seen":1,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/terms?_rsc=5CB68i4pnAekjehf","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.491Z","timestamp":1790521138491,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /terms?_rsc=5CB68i4pnAekjehf HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":613,"size_decoded":888,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (330)","md5":"d20f9658a14d020a5c2fb0b1a80b8f59","sha1":"c3b85b7fcc50d8d39034194fa54aa1b3dc21afe8","sha256":"8abb77d66cf5070fa2fed621d5d90cbb36daae55b03ecad0caa44ef07459e9c1","sha512":"73f2ba4830ba3835d27a3b780b589bb59b6c1dc14920bdcc948bb66f0ea9a4d799b8cd03f783b7d6fbf20ceb6e5c86ad42c3e2f5b8ace02c954afe844defbcfa","ssdeep":"","tlshash":"85f04c768a083dc46de0d45c16abe70b243c2933b0b94de8d8ce8e9007a543e1e4ba87","first_seen":"2026-09-27T14:59:51.110094Z","last_seen":"2026-09-27T15:05:29.143647Z","times_seen":2,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/login?_rsc=7h4NYy5eoyMcNlUN","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.779Z","timestamp":1790521138779,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /login?_rsc=7h4NYy5eoyMcNlUN HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2413,"size_decoded":1519,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (2036)","md5":"b606f40468ebe8efa1de1d70a4d05a0e","sha1":"dc28bac33b2a2d765e088f0c1040662408a09fdf","sha256":"832084d5a91319752ba92517f219aeeba04797c21424a5757d419b0f6338dbee","sha512":"ddd885233d1e341901a59ee07b1b52cc615a6c90c33255885ac05e3d8287f7e59506c7ec1d62dfc6f46685ed46dc0257dd66eedfdde3d20dacaf0e65aa1b8b34","ssdeep":"","tlshash":"6841247fe600ed5d7b97ca8d08aba32da21c1337cb645d7f414d8c0846dea5a1e413a0","first_seen":"2026-09-27T14:59:51.058533Z","last_seen":"2026-09-27T15:05:29.177495Z","times_seen":2,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/_next/static/chunks/15q8tzrp-k8zl.js","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:57.745Z","timestamp":1790521137745,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /_next/static/chunks/15q8tzrp-k8zl.js HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exodus-online.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 28 Jul 2026 09:58:46 GMT\r\netag: W/\"1aa5-19fa82997f0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6821,"size_decoded":3356,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6821), with no line terminators","md5":"2cb778280cec192edad7e2ba09abd8f4","sha1":"55a4b787ba90a4118292b898c134b83ab9f673ba","sha256":"6f8cb7ff54ce8099391572e677e3636ee6cb327f1af0d58b94dcef540ee75c19","sha512":"cc65faf4d76a7d8f9942611b07f37b896f1be3153d67e9a820e5367a365a95e80f9dee500389880fbb438524eeb067d4b56248efe5c588e109608c30426df9d7","ssdeep":"192:FPUoarPrrCPGvip263fiS88BpXLC4qmQ/muXV:5Ux3rCPGvdN4zXmaY","tlshash":"6fe1b6d4b2d2f57643eb40ca403b5169f23d29a4541e8464d3f5a8af7a20e4d90b2fb5","first_seen":"2026-09-27T14:59:51.11125Z","last_seen":"2026-09-27T15:05:29.16669Z","times_seen":2,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/_next/image?url=%2Fexodus-logo.png\u0026w=32\u0026q=75","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:57.763Z","timestamp":1790521137763,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /_next/image?url=%2Fexodus-logo.png\u0026w=32\u0026q=75 HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exodus-online.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 368\r\ncache-control: public, max-age=14400, must-revalidate\r\nvary: Accept\r\netag: aPQyjy7vW-IA5tOHwMxLzATGubsBn7eNdRWXkHLyzF4\r\ncontent-disposition: attachment; filename=\"exodus-logo.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":368,"size_decoded":992,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 32x32, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"58fbf1b6f75a87a861161462b5aa35df","sha1":"1df31d61df33a9d4cd2192c94f32d63233a60494","sha256":"68f4328f2eef5be200e6d387c0cc4bcc04c6b9bb019fb78d7515979072f2cc5e","sha512":"dcbd96c546a00fc6be40ad8dc90703b3e35438dd5138292f911e928694c8485bf1277f417fc984a30a2470855f365fbc8060ea935ff8d62f141c7496acab6eb0","ssdeep":"","tlshash":"8fe0c0dbc5b44b392ac071e3cb3a003c0f613c05aa343e458de44c8dc5c84941f39883","first_seen":"2026-09-27T14:59:51.112273Z","last_seen":"2026-09-27T15:05:29.138748Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/dashboard?_rsc=tXyZJ52UQVBCVsD3","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.737Z","timestamp":1790521138737,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /dashboard?_rsc=tXyZJ52UQVBCVsD3 HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2520,"size_decoded":1682,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (1568)","md5":"bd4cdc02422fdb6ee366023c81b0c25f","sha1":"feafe7047dfcfd5f2ff1f35bd82afc6431d3412f","sha256":"bba2b8fdeba40e8b425e5638f89a91d91f33f67a30c11949103e240dbf51cab7","sha512":"8d27c4a20e7f43a461dfe833b65a4ec0f533cfb45c417a59a40b9a8361208e4832a0dee8a5bb07c468f0268720ff815c6740ce0786b11299f9a44dc78b7ade7e","ssdeep":"","tlshash":"cb51383fd600ec6d7b97c98d04abe22e671c57378b545cbb814d9c1847daa5e1e423e0","first_seen":"2026-09-27T14:59:51.113322Z","last_seen":"2026-09-27T14:59:51.113322Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/_next/static/chunks/42tlkv3h8p65g.js","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.759Z","timestamp":1790521138759,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /_next/static/chunks/42tlkv3h8p65g.js HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exodus-online.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 28 Jul 2026 09:58:46 GMT\r\netag: W/\"4a53-19fa82997f0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19027,"size_decoded":7102,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19011), with no line terminators","md5":"97c9500035ac5eb13a5126fc60161c42","sha1":"b60037d9dc5fdbd940dd2c6aa27fd0603cba3a4c","sha256":"fef001dc20b6687befec12ae1a12b3531394757c2cf360e7a1c7fe57eb6c4fb9","sha512":"cb707955fb759ab7cdae131f1f9796a303f1df1f9ef3fba9a4c34b7e63564ee21766d36ce20903c8b524114101f5ad684bf0e1498b70bcfec711312764192cf5","ssdeep":"384:jUaqGDJp9MbbmN6fYqkmBKpYXfD3LdRUAgGcyZktMOiEKEVEhrkaZa:jUqJebmN6wmBKpYv7pRUwcyZjCBOhrFA","tlshash":"7082f855e244febcb66304cc96dec108316e6fd4ca5fcaa4f2bc946549120e96e3bf84","first_seen":"2026-09-27T14:59:51.114299Z","last_seen":"2026-09-27T15:05:29.160189Z","times_seen":2,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/coin/bitcoin?_rsc=tXyZJ52UQVBCVsD3","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.590Z","timestamp":1790521138590,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /coin/bitcoin?_rsc=tXyZJ52UQVBCVsD3 HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2553,"size_decoded":1694,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (1568)","md5":"3a748c38b82fc860d8f5a38d1c33321f","sha1":"2b1718add81644ba7f52f0af0bc3e5e48495dd43","sha256":"a67ee274b443f52c4542bd7ef5167d8a4b103be4c935965417ec74177ebf35a7","sha512":"726b2a4e0a1772ba24a41564ae298f04ec352399ca250ba631557e64f9fbfaa4165237501b8114a3b9ff2dc949cb8944c8e3f9a2f30d4c49ccaf863d9cab1084","ssdeep":"","tlshash":"4351343fd700ec5d6b97c9ce04ebe22ea61c133b8b545cbb804d8d1842daa1e1e523e5","first_seen":"2026-09-27T14:59:51.115349Z","last_seen":"2026-09-27T14:59:51.115349Z","times_seen":1,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/terms?_rsc=7h4NYy5eoyMcNlUN","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.826Z","timestamp":1790521138826,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /terms?_rsc=7h4NYy5eoyMcNlUN HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2306,"size_decoded":1494,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (1927)","md5":"098448aeb0b77b2a3648720fb3922ffa","sha1":"f8cebfd55442392f58a8ea9482df0b50be7a7726","sha256":"ea1d646a84e214a51daee9808cca21a2eacaec049d6fc15ec0afe92dfa14dff8","sha512":"ed3c9f02534b75de4f8d6c195f196ea4639f1cdad13a455dabf17e40e7ba918af5f534e0e59b9b289a567d9d22ef7812fcb4f303a6f28b87cb3e37866c82df64","ssdeep":"","tlshash":"8441233fa600ec6dbb97ca8908dba31da25c1737cf745c7a454d9d0806dea5a1e413a0","first_seen":"2026-09-27T14:59:51.116285Z","last_seen":"2026-09-27T15:05:29.179677Z","times_seen":2,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/_next/static/chunks/2mnldv4j0sib4.js","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.730Z","timestamp":1790521138730,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /_next/static/chunks/2mnldv4j0sib4.js HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exodus-online.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 28 Jul 2026 09:58:46 GMT\r\netag: W/\"1b71-19fa82997f0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7025,"size_decoded":3588,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7025), with no line terminators","md5":"860590e8b0b4b3809723c6e32155f06e","sha1":"98180ef315c90c9d0e6a71ad30998cbc98bd56be","sha256":"c471f35217a6b60c502799aa8376667e84fc56044bd59be9d8448ef626a1af01","sha512":"9f7f68bc0193fcfb79642799e1327bb3584d78d63c5d7c987293b31de16289075c024dd4fbea21ed742e4995c998b70f45afad3bcdcff8361abb8a1d9bff077e","ssdeep":"192:AKVYl4uiWFZCupbHttjxoHEFeDHcKhfz8zw286qXP:Vs/FltAFh78lY","tlshash":"e4e1c9b631a1b4e0d29b41848427580ef23a1d39a05e74b4a7fc8cf966b085df1b3f96","first_seen":"2026-05-09T03:56:06.393592Z","last_seen":"2026-09-27T15:05:29.179088Z","times_seen":75,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/coins/solana.png","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:57.886Z","timestamp":1790521137886,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /coins/solana.png HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exodus-online.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:57 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-cache, no-store, must-revalidate\r\nlast-modified: Tue, 28 Jul 2026 09:59:47 GMT\r\netag: W/\"533d-19fa82a8638\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21309,"size_decoded":21417,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"c77657e6bcd28104bcacc56b7d5c0cb0","sha1":"1c9b57fccdfdcd054800c3759598b4a106307b60","sha256":"78ee4d656f4f152a90d733f4eaaa4e1685e25bc654087acdb62bfe494d668976","sha512":"69ced65e4e3aca2ede5e4379cd4e4052d9e12d94871b4071b12a5f35e1b6e746ede959af5895138a3441ae54d056ed601e9585bcae242f92532d0d9454ac857b","ssdeep":"384:BywR9TdNJ0PLEjkZQYhG3Tz5jybRqCrMcESYyToXZICrittpDp7w:zLdNWhh0TNjylqCrMczDTmI7w","tlshash":"62a2e1e1f9411128804cb0bc6297dfc4ed6e6b4b4eda5a6589cef6d87f201411a0cf9c","first_seen":"2024-07-10T18:48:43Z","last_seen":"2026-09-27T15:05:29.133821Z","times_seen":793,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/_next/static/chunks/14mrh2-p_w84d.js","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:57.747Z","timestamp":1790521137747,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /_next/static/chunks/14mrh2-p_w84d.js HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exodus-online.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 28 Jul 2026 09:58:45 GMT\r\netag: W/\"d576-19fa8299408\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54646,"size_decoded":13401,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54644), with no line terminators","md5":"2c6890538a7dca3df0f031d8acf1bf06","sha1":"c516eec44b0e1d433f4bb380271297e7eaf3ca15","sha256":"a3ac200f3ab8bfa57cf78882057741ddb5c0fbc9e2490c5d951c099b37484206","sha512":"ca54d71ce89709406d40dcbf86d9425bc74cbf7127291992d2b3f974300009b3f372f6a806ac2bc44e7f30d9ba6e2b6442754814e20dbff8fc4928cb992aa693","ssdeep":"384:2sUWst5gWTnrYV3uXeqbkJdeUtdaVmzlhjuNf9zXYpDuYNb4x2pk81FZTDxJRiGD:vUWstOoS3HSqD95hdFQcCDFZ1dqFY+V","tlshash":"b333ea753295faa303db91d9c0370012f2780d7130ad64b4b395d8af399dd8a92faf69","first_seen":"2026-03-18T18:55:57.692711Z","last_seen":"2026-09-29T04:11:35.222086Z","times_seen":17201,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/_next/static/chunks/1a-got0cxrd5w.css","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:57.733Z","timestamp":1790521137733,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /_next/static/chunks/1a-got0cxrd5w.css HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exodus-online.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:57 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 28 Jul 2026 09:58:46 GMT\r\netag: W/\"13492-19fa82997f0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78994,"size_decoded":14613,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (61823)","md5":"eac65b51029e714cc0cea3d9af7fd7e8","sha1":"8b91aa64cc0d27ecd4378d2d02a5f03f22eca50a","sha256":"6dc7ff9b3e17882ea47ac03c4becb7e3d066facaf0be818d9f3ffee33294e046","sha512":"29989e93d0f392a2752adb68379996e0a5082987caf2689d30f7c44ca1e73d2829f37bc08fd29e6d790bc76ec183da622eb088b36bf73442d8b0fa9cbdf4f3da","ssdeep":"768:2JQzwouG++0o6L6wPOdlQlSWpnToBZ3CaUVZgaf01La0jczuqFZ+oXVSz8Ak/:2TG++0o6dW/yT01LKzuqFZ++685","tlshash":"6b73a360f225d53fbd23a8f9a3dcb48cb90970958d665bf8fa61221217c7bf65c53a00","first_seen":"2026-09-27T14:59:51.119403Z","last_seen":"2026-09-27T15:05:29.182494Z","times_seen":2,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/_next/static/chunks/3oy3w827ylcdw.js","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:57.742Z","timestamp":1790521137742,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /_next/static/chunks/3oy3w827ylcdw.js HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exodus-online.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 28 Jul 2026 09:58:46 GMT\r\netag: W/\"377f3-19fa82997f0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":227315,"size_decoded":71507,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7b206415ae7ac0d98dae9f84f4668454","sha1":"5425d5347e63b795d7b626fa7dfe697071e328b8","sha256":"a47583af1fec788614f2bab162fe785210c506c39f9f60c943596d6f93237c97","sha512":"c27a5caf5b70040609572dba1a483d4c7b51ea18147335137a51fd19228a1df7d74d9437b74434dc479d5726102901469e6fc8ba8ef838a7169058629298209e","ssdeep":"3072:KTLtaNMDfGWY7V70PTIt6h+8BibKNn0ZJGXjFMAL98nwdU+ez:KTLtKOfGWYpyI9vGzD58nwdU+ez","tlshash":"c324fbe83995f6626ab302b710af18037338252b280d4d60a251fdddb57845fb17bf9e","first_seen":"2026-09-27T14:59:51.120519Z","last_seen":"2026-09-27T15:05:29.161423Z","times_seen":2,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/coins/xrp.png","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:57.883Z","timestamp":1790521137883,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /coins/xrp.png HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exodus-online.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:57 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-cache, no-store, must-revalidate\r\nlast-modified: Tue, 28 Jul 2026 09:59:47 GMT\r\netag: W/\"3028-19fa82a8638\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12328,"size_decoded":12157,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"8c9a8c477f324c88cead49db9a5fc1a2","sha1":"8a8a7c615c7f00893e4c3374ad134581a053c8ce","sha256":"3672b3785d85e582ef497a6588dbe75cef4c60f982f678549f309fe784400a2b","sha512":"849e4018007f9b5406d4910a2da39689fcf847bce6f8586c7db389066af1efaf9ae8ae5bd374401b285d988a16fc2480be1e813a6ae3e2af78f485efa523fab4","ssdeep":"384:BFv36FCrffjNiI0gXcwWIzS3qJ+GmJQauo:jIqaGK3qJGbuo","tlshash":"56429d3b1465c94a4b535f7ec1ed4bb386f31224cdf224e69d781a02db0e61a2f390da","first_seen":"2024-07-06T20:02:44Z","last_seen":"2026-09-27T19:23:24.808862Z","times_seen":1966,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/dashboard?_rsc=5CB68i4pnAekjehf","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.410Z","timestamp":1790521138410,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /dashboard?_rsc=5CB68i4pnAekjehf HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":217,"size_decoded":674,"mime_type":"text/x-component","magic":"ASCII text","md5":"985dea965bec81fb8d50beb6db632557","sha1":"3365df0472127d1431a3115dccae6c1b55977767","sha256":"f4eb7135340b25fdc2a8367aadaa35bc3e1ded50785e0eecd8e2a37b4a4adac9","sha512":"0fcfc1b74816a2093ed15d0758f3e7084bb79b9576045d6e190ab69f7ccb560d61a0e733b660e89bc7cc5639879f998438a37c39faa203242db1fec05a3de026","ssdeep":"","tlshash":"e3d0a72b414429755cff10d5802ad91b164e5a3732d85cf0d0522e2a33f31b5538f5f6","first_seen":"2026-09-27T14:59:51.12213Z","last_seen":"2026-09-27T15:05:29.134414Z","times_seen":2,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/search?_rsc=yIp22O3xgPPxC28X","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.660Z","timestamp":1790521138660,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /search?_rsc=yIp22O3xgPPxC28X HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_index\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4868,"size_decoded":2112,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (4160)","md5":"a90c9c15cca2500c4e66bcd0c9e405b4","sha1":"b1ec091a2d1d59626e8d0f4ff4bd009c28fcb6a0","sha256":"28738f9580d280182279f0e5f99a440c6ed96e3925b9e5e7bda1ca52d4654d0c","sha512":"e8c488b9c70cb244df49a6c65f0dae89dbd3404f54670ae9c02af54d0beb33b98ab53ec093f397e104619b166b9834708e9afc0f3138412fb0d90c325ae65f8c","ssdeep":"96:fYCi4HJVvvad3SgW2CefLP9TAd5ab2hIjY43dxbWwIjY4DdX6DIjY4UtC:fYyznad3SH4fLFTB2hIY4b9IYfDIYI","tlshash":"a9a11d3fa7456e7eae77840c391fe31a872c5236ca759db5e2eca92502d15309f422c1","first_seen":"2026-09-27T14:59:51.123058Z","last_seen":"2026-09-27T15:05:29.145201Z","times_seen":2,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/?_rsc=tXyZJ52UQVBCVsD3","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.948Z","timestamp":1790521138948,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /?_rsc=tXyZJ52UQVBCVsD3 HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2490,"size_decoded":1678,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (1568)","md5":"5681ba8567ebddea9438c0222d89404f","sha1":"c1662bd8dafe51967960eea2a659e4b7e1905e9f","sha256":"bb6333290f28040c5449b4364390a73c7e02f72546df59bb6be18478e17a9319","sha512":"c85a81e6cd1790a9462f879d244052e0574687dce7e9e08988606ef634ada3045ff9ae85eb8cf0ce645a790655de202bdd905f78be087e2203b3bc6f6977b56c","ssdeep":"","tlshash":"f051353fd610ec6d77d7c98e04a7f22ea61c47378b945cbb814d8c1846daa5e1e423e0","first_seen":"2026-09-27T14:59:51.124127Z","last_seen":"2026-09-27T14:59:51.124127Z","times_seen":1,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/_next/static/chunks/27jktro2p5rq9.js","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:57.739Z","timestamp":1790521137739,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /_next/static/chunks/27jktro2p5rq9.js HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exodus-online.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 28 Jul 2026 09:58:46 GMT\r\netag: W/\"ad7e-19fa82997f0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44414,"size_decoded":9762,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (24405)","md5":"c621d697f789f9a625e80384da50359c","sha1":"21b6e9613cc917a5fa984be427364d03e5757cbc","sha256":"5261101892e2476e4346e19e86fd5f19cbcf7c765ff76e92eb9cefcc86b6db6a","sha512":"59a0ad4d3270e18ccc1178b7a1c8902793a70e88a518f01ce894d1d3335251953289630dcaa26b4c6d9a3b6bb5563b8845d5fabfc521878c382c7d2a56957ffa","ssdeep":"384:p7/A2dkTd93jBT0diRTRIpowbIBqjac/s+rPYjDExpCkKMny1V0U5+wQhKHAlwe4:BN8pcowkpc/s+zYXExp7ly1V0UVD","tlshash":"4513e7b132d4faa3539341e0e43f2016f2780d7520ad6470a7e89c9f754d88da6befa5","first_seen":"2026-03-18T18:55:57.705164Z","last_seen":"2026-09-29T03:41:50.419986Z","times_seen":15690,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/coins/tether.png","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:57.878Z","timestamp":1790521137878,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /coins/tether.png HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exodus-online.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:57 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-cache, no-store, must-revalidate\r\nlast-modified: Tue, 28 Jul 2026 09:59:47 GMT\r\netag: W/\"239f-19fa82a8638\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9119,"size_decoded":9589,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"1c5f521d33d5589131b0e38c7267819a","sha1":"8627378a30f47ed45e45a3ccbb0a3df69e9319a5","sha256":"bb67f99826459d4fe59b87455afd948eb01c0ce0cc64d05411cce514b85a9f34","sha512":"2eed1aae8356439105ef83b0d5f21a15cbda9eeee0a052c3fd9bbbd6fec17d0d12b9ee5d3c25552be9c61e3e4f2a7075c5a1c044238913ba3e156c4e198b1f60","ssdeep":"192:KsViHuRriIM26XU+HMNn9sxljZ/CCKyZW+8dnvIOk0Crhr:Ks9RrirXN+sxljZ/YiWXn8V","tlshash":"7d129ee375aff61a35222559de8c37de1bb1bf1784c126cb42888e9d4ea90d1c968312","first_seen":"2025-04-01T12:02:22.507499Z","last_seen":"2026-09-27T15:05:29.133219Z","times_seen":43,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/help?_rsc=5CB68i4pnAekjehf","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.541Z","timestamp":1790521138541,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /help?_rsc=5CB68i4pnAekjehf HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":612,"size_decoded":888,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (329)","md5":"e310ad0e54f444abd5a4943490fc781b","sha1":"5d518198f6310b4739f3db439c568745a0808f4e","sha256":"40700d976b44d4af23b1305dff6062f13febbc2ef70f79106f5442e640e22aa6","sha512":"28c908013f39aa14412d1e0f854400f1df22a5454c32110d6dc45b0e865edefa308085cb0ae880397255ce6a7f840136e7d3ec328154085dc4ad9937e02e5931","ssdeep":"","tlshash":"0af0f27649083dc46df4d45c1667e71b243d293370b94de8d8ce8e90076547d5e47a87","first_seen":"2026-09-27T14:59:51.126308Z","last_seen":"2026-09-27T15:05:29.190512Z","times_seen":2,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/coin/ethereum?_rsc=tXyZJ52UQVBCVsD3","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.543Z","timestamp":1790521138543,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /coin/ethereum?_rsc=tXyZJ52UQVBCVsD3 HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2554,"size_decoded":1701,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (1568)","md5":"9e5fe14f6610d70a6b288a1b1ab92262","sha1":"87a9ecc891bb31e3a6d8d25360c9de48b278c12d","sha256":"bb1c4be9a3e30296914abbee822668fabafad168b256e332ae3872ff80ad9ba3","sha512":"ec20f556bb8da3b21ae1d1322a7b287e6ce2d2c6228b610ed62099230b049280c32db58a50c32171bb8492ba08b13917f7d4d8ab18934e1d603f011728bc6ea6","ssdeep":"","tlshash":"8451263fd600ec5d7b97c98e04abf22ea60c573b8b645cbf814d9d1846da61e1e423e1","first_seen":"2026-09-27T14:59:51.127508Z","last_seen":"2026-09-27T14:59:51.127508Z","times_seen":1,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodus-online.net/search?_rsc=t37_zlVSNA9P6XVf","fqdn":"exodus-online.net","domain":"exodus-online.net","tld":"net"},"ip":{"addr":"84.200.24.239","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exodus-online.net/","date":"2026-09-27T14:58:58.732Z","timestamp":1790521138732,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-online.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:55:14 GMT","end":"Tue, 22 Dec 2026 10:55:13 GMT"},"fingerprint":{"sha1":"8F:89:D6:74:E5:FB:DB:0C:F1:C9:26:38:C1:55:08:46:20:8B:73:AF","sha256":"08:95:DB:F8:60:E4:0C:CF:90:60:69:A0:A0:13:F0:22:BB:AD:22:DC:CF:BD:04:71:DF:C1:6D:45:93:CE:66:AA"}}},"request":{"raw":"GET /search?_rsc=t37_zlVSNA9P6XVf HTTP/1.1\r\nHost: exodus-online.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exodus-online.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHB1YmxpYyk/search/__PAGE__\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:58:58 GMT\r\ncontent-type: text/x-component\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":984,"size_decoded":1056,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (424)","md5":"139cfe365381a6cbc8926d8f090e02c4","sha1":"84833e9794fba4d8e155c4f610222745aba05b2b","sha256":"a2a6b64b9e07a31e10010daf0f52a2ec0e0cd8a3df2a84f5586192ef478526ed","sha512":"ef324d1617a23e8d3971c2b7e032cf94c19c54a1be7a751b3b4b34bf79e8d2629bd9211dd92d5a543cc5ac02a57e0a1bb8ed47012401ea42f361124b16de1905","ssdeep":"","tlshash":"2011ba27e60ced9aaca6cc4d2c6bab3b91a8283788365cdce65dcc980249c6527840c0","first_seen":"2026-09-27T14:59:51.12848Z","last_seen":"2026-09-27T15:05:29.121078Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"exodus-online.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"exodus-online.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}