{"report_id":"a5633a76-a9df-433c-9665-0e32239d553b","version":6,"status":"done","tags":[],"date":"2026-04-15T05:08:40Z","url":{"schema":"https","addr":"exodusrecoverytool.com/","fqdn":"exodusrecoverytool.com","domain":"exodusrecoverytool.com","tld":"com"},"ip":{"addr":"172.67.161.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"exodusrecoverytool.com/","fqdn":"exodusrecoverytool.com","domain":"exodusrecoverytool.com","tld":"com"},"title":"Exodus Recovery Tool — recover from Exodus backups","dom":{"size":33611,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"187e47d147ffe7cede5939eda9cd2bbe","sha1":"d7d56cc871acdfc9cf43cc78e3d17fe434b7cd62","sha256":"8dbecb1a3c461ef77bfa7368787a7966f618d0057d8727ad4e1d988c68a1d769","sha512":"9b650e1f2c18ebebd5d3a72b73a784a0c1c4bf4852697c95d25b10bc70adcf0b8db2e86183f3826bfa12dc115482688063732147eebbdc456581e29bcbebef64","ssdeep":"384:hC1zhZEo/y+Rr7fQQBFT6DCXF8l/U+J3f3og3RK9SOaeiD6dtS1UTol:4DXF8ls+TKNi+3Tm","tlshash":"ace2117b60f09b3b115340d3eeaa9b1a6fa1d507c19a214272bc7b8d1fa3ec1991354f","dom_hash":"domhashae8593f8975726cf957311ec34f68078","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"exodusrecoverytool.com/","fqdn":"exodusrecoverytool.com","domain":"exodusrecoverytool.com","tld":"com"},"ip":{"addr":"172.67.161.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-20T05:08:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exodusrecoverytool.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"exodusrecoverytool.com","ip":{"addr":"104.21.15.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":16,"request_count":16,"received_data":703102,"sent_data":7392,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-12T22:16:45.621325Z","alert_count":0,"request_count":4,"received_data":112284,"sent_data":2284,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-12T22:20:19.752051Z","alert_count":0,"request_count":1,"received_data":7502,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"exodusrecoverytool.com/script.js","fqdn":"exodusrecoverytool.com","domain":"exodusrecoverytool.com","tld":"com"},"ip":{"addr":"104.21.15.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8841b2ec55a77d0eac8fc37b8e879e52","sha1":"f0e28a7369eaecc809c5c6f2d71d9efdf5830e88","sha256":"47338cb2e81066a2b39d9a32de06b85094347a5761ec4efe1ded383f0d95a3ab","sha512":"1b341b3cc17626fabba463c854d275ed67914f8f8ccc5689152e4f2bb860198913a5ebb88ccca988c9cdd943924e34a10f9f0264b43b7a37e6bb945ae838ce31","ssdeep":"96:n1FrzutAxGWGlEs9UOfTqhP5pqFH6b5ovlNBxjVqbHuZb4r0Kf:nT4WGPrqhkjMZZ","tlshash":"0ac10d6171fb20fa803734be4f8ba61976295043704bd951fe9c83542fd0a17a6b7ed8","size":5789,"data":"","first_seen":"2026-04-15T05:08:45.554936Z","last_seen":"2026-04-15T05:10:45.892312Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodusrecoverytool.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"exodusrecoverytool.com","domain":"exodusrecoverytool.com","tld":"com"},"ip":{"addr":"104.21.15.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-22T05:07:32.247818Z","times_seen":309964,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"exodusrecoverytool.com/assets/windows.png","fqdn":"exodusrecoverytool.com","domain":"exodusrecoverytool.com","tld":"com"},"ip":{"addr":"104.21.15.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodusrecoverytool.com/","date":"2026-04-15T05:08:19.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusrecoverytool.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 07:46:27 GMT","end":"Fri, 26 Jun 2026 07:46:26 GMT"},"fingerprint":{"sha1":"E5:E2:F2:92:41:58:38:0D:BE:79:AA:4A:3F:68:76:61:0A:D1:D3:4C","sha256":"21:8F:32:97:AB:08:7E:1D:83:ED:C2:A9:50:12:83:5B:4C:1F:42:ED:90:EE:94:7B:29:B8:42:CA:D0:40:E2:1A"}}},"request":{"raw":"GET /assets/windows.png HTTP/1.1\r\nHost: exodusrecoverytool.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exodusrecoverytool.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:08:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 4041\r\nlast-modified: Fri, 23 Jan 2026 22:10:04 GMT\r\npriority: u=4,i=?0\r\netag: \"6973f1bc-fc9\"\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; img-src 'self' data: https://mc.yandex.ru https://mc.yandex.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.com wss://mc.webvisor.com wss://mc.webvisor.org; child-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-ancestors 'self' https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://*.webvisor.com blob: https://mc.yandex.ru https://mc.yandex.com; font-src 'self' data: https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; media-src 'self'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1nMyjz7KFeSILR%2BkRZc%2BusKFfKZ2P07fzkjmuoLUtcN3qYrq1zkfrSqqpDL%2BwF5oSy1NfxZbAcoHX%2Bdsbztb0pLLMNytt9Ua0NzMtDEZlEvuCfGfKjmoQ93qLnoAH66uIpc0nJ6K9QgL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec86e8428b81ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4041,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"ae66725105aea5a7cd135efc63123463","sha1":"367f2794c0acdf72dfa1bc1e391c6ec9662db6c8","sha256":"6944d5f19feee30079ff2a88c46cea9cfbcdc6f8edb766f3df6af07b8b2a0f9e","sha512":"a62e64f34e92428e22194f7e56712aa4f22a3b1fa6acedba66ef4a134664c2b5d77b1ec87d7fd21792a43541cab4ea947ced01d6eddedaba229ca6d48d7cc37c","ssdeep":"","tlshash":"c081d3c2e71418fbc4b8a7b100eb2981499bda607b3707431f4444ec6e5f33a609af60","first_seen":"2025-11-28T15:34:05.616822Z","last_seen":"2026-04-15T05:10:45.884439Z","times_seen":4,"resource_available":false,"data":null}},"time_used":522,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exodusrecoverytool.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusrecoverytool.com/assets/internet.png","fqdn":"exodusrecoverytool.com","domain":"exodusrecoverytool.com","tld":"com"},"ip":{"addr":"104.21.15.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodusrecoverytool.com/","date":"2026-04-15T05:08:19.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusrecoverytool.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 07:46:27 GMT","end":"Fri, 26 Jun 2026 07:46:26 GMT"},"fingerprint":{"sha1":"E5:E2:F2:92:41:58:38:0D:BE:79:AA:4A:3F:68:76:61:0A:D1:D3:4C","sha256":"21:8F:32:97:AB:08:7E:1D:83:ED:C2:A9:50:12:83:5B:4C:1F:42:ED:90:EE:94:7B:29:B8:42:CA:D0:40:E2:1A"}}},"request":{"raw":"GET /assets/internet.png HTTP/1.1\r\nHost: exodusrecoverytool.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exodusrecoverytool.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:08:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 7541\r\nlast-modified: Sat, 24 Jan 2026 02:11:10 GMT\r\npriority: u=4,i=?0\r\netag: \"69742a3e-1d75\"\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; img-src 'self' data: https://mc.yandex.ru https://mc.yandex.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.com wss://mc.webvisor.com wss://mc.webvisor.org; child-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-ancestors 'self' https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://*.webvisor.com blob: https://mc.yandex.ru https://mc.yandex.com; font-src 'self' data: https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; media-src 'self'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ckyBi4sZ83tfOQjfSlpE%2BJe1AphcgYyzxtb5KNhCcR0f6wbDgIYKDgMzxyelGvzNHjef853kYFUUKITW3cWvUUP6HEbwzE17%2FKiiUZtqd7AD6il8EvSSx5twIc7ojMOPTYiWjF%2BcqJ8D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec86e8428bb1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7541,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"59d07812cf5099f96bd22a2c629a600b","sha1":"76f315239a835ae027f6f55e4cf0b71c75b7d3e3","sha256":"efa939cac8961c5b231a8692fbe968a6b95e02c7891f7cef9aa47ce99d33f1b8","sha512":"72cf26eda662e5ee8de1d458d8ce705c6077653f30257ac8e3f55de11c7a597c08c7a024ed863a3b02e86917c8358252443fda5570e678648e8c0d384693a85c","ssdeep":"192:XYZI/UpUIwyVKF3VCg1VWyv1taOxez4wfR1Q:XYUUCy0iyVWyvn3xKPQ","tlshash":"03f19edb1431093036a702bc26cf1474683aa7270c4a09bb6d00f67ea6139a5d2bbe7d","first_seen":"2026-04-15T05:08:45.5527Z","last_seen":"2026-04-15T05:10:45.889218Z","times_seen":2,"resource_available":false,"data":null}},"time_used":579,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":578,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exodusrecoverytool.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusrecoverytool.com/assets/donate.png","fqdn":"exodusrecoverytool.com","domain":"exodusrecoverytool.com","tld":"com"},"ip":{"addr":"104.21.15.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodusrecoverytool.com/","date":"2026-04-15T05:08:19.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusrecoverytool.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 07:46:27 GMT","end":"Fri, 26 Jun 2026 07:46:26 GMT"},"fingerprint":{"sha1":"E5:E2:F2:92:41:58:38:0D:BE:79:AA:4A:3F:68:76:61:0A:D1:D3:4C","sha256":"21:8F:32:97:AB:08:7E:1D:83:ED:C2:A9:50:12:83:5B:4C:1F:42:ED:90:EE:94:7B:29:B8:42:CA:D0:40:E2:1A"}}},"request":{"raw":"GET /assets/donate.png HTTP/1.1\r\nHost: exodusrecoverytool.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exodusrecoverytool.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:08:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 3059\r\nlast-modified: Wed, 25 Mar 2026 22:10:15 GMT\r\npriority: u=4,i=?0\r\netag: \"69c45d47-bf3\"\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; img-src 'self' data: https://mc.yandex.ru https://mc.yandex.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.com wss://mc.webvisor.com wss://mc.webvisor.org; child-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-ancestors 'self' https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://*.webvisor.com blob: https://mc.yandex.ru https://mc.yandex.com; font-src 'self' data: https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; media-src 'self'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l42ttxOu9b%2FsLlVzAvVvW8Ll9N9QTZ1gC4OQXvPLn1r6pgpAmFmF0PteMhuhxI6%2F12Li7cu9E5FQ6M7BjKlVXZXbN0Ys3HVtYfVRGOywy6ExONIU1RPsmXf5zAaFmYc3gdcWS1J32MEC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec86e8428bd1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3059,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"d272948cc539e20d9f849b5894935724","sha1":"3b650d2c77579fa19450be0e7b4f3a7f796c3e29","sha256":"f82f5735596f925f3877efe1049f07b1e0f782c5e3c138e146a4895bc0f24132","sha512":"126619ab91e8ce8a6316319e38cc8d925cde4695523298e7424a9d50d376b84ab84bc0f6f3871488c56e2c417ab3e2aa1a16d82c9725cece9a9e126fecdaddfc","ssdeep":"","tlshash":"e7517ed2be51a754cf4b9537a024343d49a68dddc52c0fd4d57cc62323201049b19c5e","first_seen":"2026-04-15T05:08:45.553835Z","last_seen":"2026-04-15T05:10:45.893673Z","times_seen":2,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":507,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exodusrecoverytool.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusrecoverytool.com/script.js","fqdn":"exodusrecoverytool.com","domain":"exodusrecoverytool.com","tld":"com"},"ip":{"addr":"104.21.15.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exodusrecoverytool.com/","date":"2026-04-15T05:08:19.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusrecoverytool.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 07:46:27 GMT","end":"Fri, 26 Jun 2026 07:46:26 GMT"},"fingerprint":{"sha1":"E5:E2:F2:92:41:58:38:0D:BE:79:AA:4A:3F:68:76:61:0A:D1:D3:4C","sha256":"21:8F:32:97:AB:08:7E:1D:83:ED:C2:A9:50:12:83:5B:4C:1F:42:ED:90:EE:94:7B:29:B8:42:CA:D0:40:E2:1A"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: exodusrecoverytool.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exodusrecoverytool.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:08:19 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n7f10P6AXApg76z1YkXU0MFZ%2BPOPgMpy9KisFqcU2OdYbYtbEgPh5hUykselStlzV9Mcnco%2BiUqQMTgYr1D0CU%2Bvnpj3uevNEx%2BSpmkDyl1bxMMkVzQ%2BnnLOOzB%2By55dPaWV7WUw%2Bhui\"}]}\r\nlast-modified: Wed, 25 Mar 2026 22:34:24 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; img-src 'self' data: https://mc.yandex.ru https://mc.yandex.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.com wss://mc.webvisor.com wss://mc.webvisor.org; child-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-ancestors 'self' https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://*.webvisor.com blob: https://mc.yandex.ru https://mc.yandex.com; font-src 'self' data: https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; media-src 'self'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69c462f0-169d\"\r\ncf-ray: 9ec86e8438bf1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5789,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"8841b2ec55a77d0eac8fc37b8e879e52","sha1":"f0e28a7369eaecc809c5c6f2d71d9efdf5830e88","sha256":"47338cb2e81066a2b39d9a32de06b85094347a5761ec4efe1ded383f0d95a3ab","sha512":"1b341b3cc17626fabba463c854d275ed67914f8f8ccc5689152e4f2bb860198913a5ebb88ccca988c9cdd943924e34a10f9f0264b43b7a37e6bb945ae838ce31","ssdeep":"96:n1FrzutAxGWGlEs9UOfTqhP5pqFH6b5ovlNBxjVqbHuZb4r0Kf:nT4WGPrqhkjMZZ","tlshash":"0ac10d6171fb20fa803734be4f8ba61976295043704bd951fe9c83542fd0a17a6b7ed8","first_seen":"2026-04-15T05:08:45.554936Z","last_seen":"2026-04-15T05:10:45.892312Z","times_seen":2,"resource_available":true,"data":null}},"time_used":505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":505,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exodusrecoverytool.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exodusrecoverytool.com/","date":"2026-04-15T05:08:20.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:49 GMT","end":"Mon, 15 Jun 2026 08:38:48 GMT"},"fingerprint":{"sha1":"37:8D:19:21:5B:E0:E1:BB:D8:7C:65:74:CB:23:05:60:8D:DA:34:48","sha256":"87:F6:F5:DB:75:39:30:F7:7B:2E:F2:78:F3:AF:75:98:AC:41:5C:58:80:43:5D:A4:53:50:BC:D4:D6:F1:CC:56"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://exodusrecoverytool.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Apr 2026 05:05:31 GMT\r\nexpires: Fri, 09 Apr 2027 05:05:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 518569\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-04-22T04:04:35.788844Z","times_seen":9144,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":100,"dns":19,"connect":17,"send":0,"wait":27,"receive":7,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodusrecoverytool.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"exodusrecoverytool.com","domain":"exodusrecoverytool.com","tld":"com"},"ip":{"addr":"104.21.15.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exodusrecoverytool.com/","date":"2026-04-15T05:08:19.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusrecoverytool.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 07:46:27 GMT","end":"Fri, 26 Jun 2026 07:46:26 GMT"},"fingerprint":{"sha1":"E5:E2:F2:92:41:58:38:0D:BE:79:AA:4A:3F:68:76:61:0A:D1:D3:4C","sha256":"21:8F:32:97:AB:08:7E:1D:83:ED:C2:A9:50:12:83:5B:4C:1F:42:ED:90:EE:94:7B:29:B8:42:CA:D0:40:E2:1A"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: exodusrecoverytool.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exodusrecoverytool.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Wed, 15 Apr 2026 05:56:19 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kUbFnK7vTxjSmnk6itV0vUpf16i8zgptGebdlb%2FBdglkYmz2Q0jWr9fH%2B43v6tLep%2BnSaszkRflRThunlSv2kXIzPDjFgkcJaFROCASA4UGnqPfNihGBrizpopV1IKFJ1Hb5X4I%2BCulT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:08:19 GMT\r\ncf-ray: 9ec86e8438be1ae6-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-22T05:07:32.247818Z","times_seen":309964,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exodusrecoverytool.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusrecoverytool.com/assets/security-background.webp","fqdn":"exodusrecoverytool.com","domain":"exodusrecoverytool.com","tld":"com"},"ip":{"addr":"104.21.15.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodusrecoverytool.com/","date":"2026-04-15T05:08:20.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusrecoverytool.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 07:46:27 GMT","end":"Fri, 26 Jun 2026 07:46:26 GMT"},"fingerprint":{"sha1":"E5:E2:F2:92:41:58:38:0D:BE:79:AA:4A:3F:68:76:61:0A:D1:D3:4C","sha256":"21:8F:32:97:AB:08:7E:1D:83:ED:C2:A9:50:12:83:5B:4C:1F:42:ED:90:EE:94:7B:29:B8:42:CA:D0:40:E2:1A"}}},"request":{"raw":"GET /assets/security-background.webp HTTP/1.1\r\nHost: exodusrecoverytool.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusrecoverytool.com/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:08:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 76396\r\nlast-modified: Sat, 24 Jan 2026 00:44:54 GMT\r\npriority: u=4,i=?0\r\netag: \"69741606-12a6c\"\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; img-src 'self' data: https://mc.yandex.ru https://mc.yandex.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.com wss://mc.webvisor.com wss://mc.webvisor.org; child-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-ancestors 'self' https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://*.webvisor.com blob: https://mc.yandex.ru https://mc.yandex.com; font-src 'self' data: https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; media-src 'self'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8OOjp61edolI3MuiDgaA9lWvkLhfHck2THOtNqIx74hcljsyZFVkjXsDzotwHpTlgAHm2cRFBvG2HbvCpoDneak6wUcMz28kDzLj7VoQHCCyKJ%2BGjsgNdRpdk%2Fr%2B54IlyeCrScr%2F9AGi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec86e89d8d01ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76396,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"93edd65749731807792d108b120c61a3","sha1":"f3cae30ca8bbb83ffde6576a1c80523238d9d211","sha256":"f89f31432c6b54d7a8c7c9fab32a37326a0c64775101baa9d40447ad4982094e","sha512":"346909a0b454743acff8d020a676f11de6dd7307d29f787966a509d0103b94505005a5e897b26dc923f840c63e5c90ed3c23e41c748491553470e40d4f0e3e09","ssdeep":"1536:bUvRckG3s2aVjNC0qJ5otvL+U7QuNP3Nc/gJlr:wvWkG3sbVxMJ5otDQuNPKClr","tlshash":"f673e18d84318aabc34d8f3f479299fb412c8f6fc0b4058dd28987b15a5a11e5f5ee4c","first_seen":"2026-04-15T05:08:45.557738Z","last_seen":"2026-04-15T05:10:45.893107Z","times_seen":2,"resource_available":false,"data":null}},"time_used":949,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":762,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exodusrecoverytool.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exodusrecoverytool.com/","date":"2026-04-15T05:08:19.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"GET /css2?family=Plus+Jakarta+Sans:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exodusrecoverytool.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 15 Apr 2026 05:08:19 GMT\r\ndate: Wed, 15 Apr 2026 05:08:19 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6816,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c1192235fce50de6b1862e00e3eb4e5b","sha1":"1acc08e2711f780af3a52a52e820282f8cde8a81","sha256":"7ea10d6b629da25ecda50bce71d3cfdcdd586f2a8c65018ac741b637050c1cf8","sha512":"0777d00a666c459828c22a4df1d3d645f8015271ce5056a67e888e1704184498607dde6d23e5d94e98b25b3c7b91cc37b0b813256b39ad3bba4ac2c722fd7bca","ssdeep":"96:HOEaCyOEauOEahJc+ueOEaCNuOXaCyOXauOXahJc+ueOXaCNuOxMaCyOxMauOxMC:ACFJRSdCmaRBUCj3Ro7CcQRvd","tlshash":"83e1a2a0092fa540eb431cc663cf3d3a9e9e6196601584b99bfd0854dc7ec2a7375b1c","first_seen":"2025-09-12T03:43:28.128552Z","last_seen":"2026-04-21T19:48:36.482856Z","times_seen":437,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":80,"dns":1,"connect":20,"send":0,"wait":32,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodusrecoverytool.com/assets/logo.svg","fqdn":"exodusrecoverytool.com","domain":"exodusrecoverytool.com","tld":"com"},"ip":{"addr":"104.21.15.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodusrecoverytool.com/","date":"2026-04-15T05:08:19.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusrecoverytool.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 07:46:27 GMT","end":"Fri, 26 Jun 2026 07:46:26 GMT"},"fingerprint":{"sha1":"E5:E2:F2:92:41:58:38:0D:BE:79:AA:4A:3F:68:76:61:0A:D1:D3:4C","sha256":"21:8F:32:97:AB:08:7E:1D:83:ED:C2:A9:50:12:83:5B:4C:1F:42:ED:90:EE:94:7B:29:B8:42:CA:D0:40:E2:1A"}}},"request":{"raw":"GET /assets/logo.svg HTTP/1.1\r\nHost: exodusrecoverytool.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exodusrecoverytool.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:08:19 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2D%2FAVk1yyoNWZ8s8S%2BAkLddWIjTRVL3cKKrYy8CXxyEEO8Yh9tySUzHjl8lowAaUFGeRFbHlb7nR3smYeFhcjLrt00XWvN08jejFDjr8lJgBeczwXt8hipTbgxn6IBiX8EcDth6fwJqk\"}]}\r\nlast-modified: Sat, 24 Jan 2026 23:36:13 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; img-src 'self' data: https://mc.yandex.ru https://mc.yandex.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.com wss://mc.webvisor.com wss://mc.webvisor.org; child-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-ancestors 'self' https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://*.webvisor.com blob: https://mc.yandex.ru https://mc.yandex.com; font-src 'self' data: https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; media-src 'self'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6975576d-939\"\r\ncf-ray: 9ec86e8428b71ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2361,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1a62c84f251c8d224483a78878e673df","sha1":"a89603b1b0c5c653a17f8a0c1fe2e64b4f879ec6","sha256":"f3aacd4a1ab60e14b1d638f144960a808a31bd8aae073d531bc7305639b30cd0","sha512":"3879b6e68a3ba13ced412130dbe388230d6d6e52ec40e02850aeb829992c11bcf99dcfdfc5d5e2f100b0ea284c63bd7e1695245f7f0351c4478bf8db41bfd0e5","ssdeep":"","tlshash":"0341cc3ef63aec17e714e6dcfd544439914b81f2c9c14221c2a1bf9a25159c21e2ebe7","first_seen":"2025-04-18T11:22:59.804264Z","last_seen":"2026-04-15T05:10:45.883721Z","times_seen":119,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exodusrecoverytool.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusrecoverytool.com/assets/apple.png","fqdn":"exodusrecoverytool.com","domain":"exodusrecoverytool.com","tld":"com"},"ip":{"addr":"104.21.15.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodusrecoverytool.com/","date":"2026-04-15T05:08:19.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusrecoverytool.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 07:46:27 GMT","end":"Fri, 26 Jun 2026 07:46:26 GMT"},"fingerprint":{"sha1":"E5:E2:F2:92:41:58:38:0D:BE:79:AA:4A:3F:68:76:61:0A:D1:D3:4C","sha256":"21:8F:32:97:AB:08:7E:1D:83:ED:C2:A9:50:12:83:5B:4C:1F:42:ED:90:EE:94:7B:29:B8:42:CA:D0:40:E2:1A"}}},"request":{"raw":"GET /assets/apple.png HTTP/1.1\r\nHost: exodusrecoverytool.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exodusrecoverytool.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:08:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 13046\r\nlast-modified: Fri, 23 Jan 2026 22:09:39 GMT\r\npriority: u=4,i=?0\r\netag: \"6973f1a3-32f6\"\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; img-src 'self' data: https://mc.yandex.ru https://mc.yandex.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.com wss://mc.webvisor.com wss://mc.webvisor.org; child-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-ancestors 'self' https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://*.webvisor.com blob: https://mc.yandex.ru https://mc.yandex.com; font-src 'self' data: https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; media-src 'self'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YQ0zU8FagNOpB5edZPT25rTgnPeLxNddUue77P9qsaC6og1BeWsPzcDnVwyOZHTvdAbXDM8MGHIkCsvYRPi9sG5U%2FD4PpxddWMs7vH217k%2BEOS5xUQAYwHmUWynnAg8tUX7s%2F%2FkwMiCO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec86e8428b91ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13046,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit gray+alpha, non-interlaced","md5":"5df66dc7ba7aae11df6f683e028a2e82","sha1":"2d3a811e8d79ad6afd8b59acc56f3ef824fbb601","sha256":"795ba551c37dc8bf753d23eebd746f10f197d2460b9761e886c5bd9cc9ee8489","sha512":"192e42f420407c99a7bdd28f17f00d2745976b864284250646bdf086546828d3ee5f9f20bdee0aeca35d2e65f483e961342e5be42561cdb62d8b6e802e3b1b9f","ssdeep":"384:EMuAA53+TbI3JTFnedPbiI8/t+Sn6xPksodYC:0ZGbIngW+S0k57","tlshash":"4b42c04cf0c0e91724ee85e945016f19bde51f6df139ea058833731da98126a68e76b1","first_seen":"2026-04-15T05:08:45.559909Z","last_seen":"2026-04-15T05:10:45.887595Z","times_seen":2,"resource_available":false,"data":null}},"time_used":704,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":704,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exodusrecoverytool.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusrecoverytool.com/assets/offline.png","fqdn":"exodusrecoverytool.com","domain":"exodusrecoverytool.com","tld":"com"},"ip":{"addr":"104.21.15.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodusrecoverytool.com/","date":"2026-04-15T05:08:19.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusrecoverytool.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 07:46:27 GMT","end":"Fri, 26 Jun 2026 07:46:26 GMT"},"fingerprint":{"sha1":"E5:E2:F2:92:41:58:38:0D:BE:79:AA:4A:3F:68:76:61:0A:D1:D3:4C","sha256":"21:8F:32:97:AB:08:7E:1D:83:ED:C2:A9:50:12:83:5B:4C:1F:42:ED:90:EE:94:7B:29:B8:42:CA:D0:40:E2:1A"}}},"request":{"raw":"GET /assets/offline.png HTTP/1.1\r\nHost: exodusrecoverytool.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exodusrecoverytool.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:08:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 25305\r\nlast-modified: Sat, 24 Jan 2026 02:09:07 GMT\r\npriority: u=4,i=?0\r\netag: \"697429c3-62d9\"\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; img-src 'self' data: https://mc.yandex.ru https://mc.yandex.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.com wss://mc.webvisor.com wss://mc.webvisor.org; child-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-ancestors 'self' https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://*.webvisor.com blob: https://mc.yandex.ru https://mc.yandex.com; font-src 'self' data: https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; media-src 'self'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9TGIH%2B5cw5vVEbNmRIhIZFLtZaRLSqFnm17WTP3vmH%2FVgy3lmZ258UIgKjQrGw9uz%2Bi09j1tBvxq3dP%2B20uRsiF9u3ZRB8FXCoFC%2FSKR47EE5cFHhacGnGMlE4IiKeOzUgfMHhbbR6Wv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec86e8428bc1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25305,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"86166b08ebb5bea37158da26dcf2bcf1","sha1":"b9d3ba55b4fc9d77104c36c17904c8f78c255ce6","sha256":"00f62d56d4080ab25a90459e191d2889f8c5f96f2e8844bd17a8814834a5bace","sha512":"4208af9b35443bbba394dfd08d1e4e842153aa169898b01cfe217ea73822221add125ffd8f5cc2ee2e45b6bf75a652b4a72443d19e1355a45797a85fb8fd89f6","ssdeep":"384:Qy9LVivVYfntJ961/GVnQ3HYgOH8wP2jA4l/1ERAud0Tt4FOnsEsc8sJcZmb:f8kt/7nQpA8l/l/1E2/HsEL8ir","tlshash":"31b2e111a8b5fbd4fcaf647154958e139d9b389184f08a19cced897dcd7ce048cbe09a","first_seen":"2026-04-15T05:08:45.56095Z","last_seen":"2026-04-15T05:10:45.885447Z","times_seen":2,"resource_available":false,"data":null}},"time_used":708,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":707,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exodusrecoverytool.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusrecoverytool.com/assets/how-bg.webp","fqdn":"exodusrecoverytool.com","domain":"exodusrecoverytool.com","tld":"com"},"ip":{"addr":"104.21.15.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodusrecoverytool.com/","date":"2026-04-15T05:08:20.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusrecoverytool.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 07:46:27 GMT","end":"Fri, 26 Jun 2026 07:46:26 GMT"},"fingerprint":{"sha1":"E5:E2:F2:92:41:58:38:0D:BE:79:AA:4A:3F:68:76:61:0A:D1:D3:4C","sha256":"21:8F:32:97:AB:08:7E:1D:83:ED:C2:A9:50:12:83:5B:4C:1F:42:ED:90:EE:94:7B:29:B8:42:CA:D0:40:E2:1A"}}},"request":{"raw":"GET /assets/how-bg.webp HTTP/1.1\r\nHost: exodusrecoverytool.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusrecoverytool.com/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:08:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 92564\r\nlast-modified: Sat, 24 Jan 2026 02:14:08 GMT\r\npriority: u=4,i=?0\r\netag: \"69742af0-16994\"\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; img-src 'self' data: https://mc.yandex.ru https://mc.yandex.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.com wss://mc.webvisor.com wss://mc.webvisor.org; child-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-ancestors 'self' https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://*.webvisor.com blob: https://mc.yandex.ru https://mc.yandex.com; font-src 'self' data: https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; media-src 'self'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WE%2F7t1%2B6hb9qbKqSI4kkttFQxQLPluF5GlZ0C5xv%2FvekMNxyluZLzcBePDEHIooGD5PFPPsiSBlgiawEClnTvxRj8GKMTq0BVhJ9YY8kyPg86edoHFHjI7DCadtoUaiKZ7vG4K8gP6Kf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec86e89e8d21ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92564,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d60f9d715448b9766f589eeadff54140","sha1":"16ec9ae03c8d1eec42b75dfd81e4bbb08d170124","sha256":"800998d8237b74834d43e5864762a1f5e647a397a82735f2358407a148a06c6c","sha512":"b2647ec1af0ff8216a79d97010e798c1f8d71b39ff3b68889802fc002d698332c9f7a0e6c5df574edd593b41fbd86c5d71f546461556e85961c6cf2f7e08a4b2","ssdeep":"1536:lOHu5NhtM6jr2vgm4T+oxj2hKproSIGzuDnI+hwzTohj0mNQXcgAHaU:lOWfhjr2vCTrqur5IkubIrTD6ecgAHaU","tlshash":"f993cf435332e993f5f56a77f63898d4b835788f788d828584f15bf1b5f1a20e52828c","first_seen":"2026-04-15T05:08:45.561851Z","last_seen":"2026-04-15T05:10:45.894541Z","times_seen":2,"resource_available":false,"data":null}},"time_used":834,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":670,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exodusrecoverytool.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exodusrecoverytool.com/","date":"2026-04-15T05:08:20.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:49 GMT","end":"Mon, 15 Jun 2026 08:38:48 GMT"},"fingerprint":{"sha1":"37:8D:19:21:5B:E0:E1:BB:D8:7C:65:74:CB:23:05:60:8D:DA:34:48","sha256":"87:F6:F5:DB:75:39:30:F7:7B:2E:F2:78:F3:AF:75:98:AC:41:5C:58:80:43:5D:A4:53:50:BC:D4:D6:F1:CC:56"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://exodusrecoverytool.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Apr 2026 05:05:31 GMT\r\nexpires: Fri, 09 Apr 2027 05:05:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 518569\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-04-22T04:04:35.788844Z","times_seen":9144,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":99,"dns":13,"connect":14,"send":0,"wait":15,"receive":15,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exodusrecoverytool.com/","date":"2026-04-15T05:08:20.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:49 GMT","end":"Mon, 15 Jun 2026 08:38:48 GMT"},"fingerprint":{"sha1":"37:8D:19:21:5B:E0:E1:BB:D8:7C:65:74:CB:23:05:60:8D:DA:34:48","sha256":"87:F6:F5:DB:75:39:30:F7:7B:2E:F2:78:F3:AF:75:98:AC:41:5C:58:80:43:5D:A4:53:50:BC:D4:D6:F1:CC:56"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://exodusrecoverytool.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Apr 2026 05:05:31 GMT\r\nexpires: Fri, 09 Apr 2027 05:05:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 518569\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-04-22T04:04:35.788844Z","times_seen":9144,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":98,"dns":17,"connect":27,"send":0,"wait":27,"receive":6,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodusrecoverytool.com/","fqdn":"exodusrecoverytool.com","domain":"exodusrecoverytool.com","tld":"com"},"ip":{"addr":"104.21.15.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-15T05:08:18.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusrecoverytool.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 07:46:27 GMT","end":"Fri, 26 Jun 2026 07:46:26 GMT"},"fingerprint":{"sha1":"E5:E2:F2:92:41:58:38:0D:BE:79:AA:4A:3F:68:76:61:0A:D1:D3:4C","sha256":"21:8F:32:97:AB:08:7E:1D:83:ED:C2:A9:50:12:83:5B:4C:1F:42:ED:90:EE:94:7B:29:B8:42:CA:D0:40:E2:1A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: exodusrecoverytool.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:08:19 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sun, 29 Mar 2026 10:04:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; img-src 'self' data: https://mc.yandex.ru https://mc.yandex.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.com wss://mc.webvisor.com wss://mc.webvisor.org; child-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-ancestors 'self' https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://*.webvisor.com blob: https://mc.yandex.ru https://mc.yandex.com; font-src 'self' data: https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; media-src 'self'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A6rireYbOqABCvzoHq%2FCXWgbc800vev4%2BdNWmS1MX1obvb1dcANkjDP3DX8cOKr7QiMfIMbyCbS%2F4jwMULXxuBBrZcmUe9OfKQ8L6%2FNlX2D5KhurwJJem6Yk8yC2q%2BPjXXpOxMvuysDR\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9ec86e7f9e17a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34131,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"f425bd21c1ff05f656d566f130ff33b7","sha1":"100021ad5bdddee7d6618df3e33faaef60ed500c","sha256":"ccdd34e0dcbe5762b5f1932f49cd17740ab9816e9c86cd553554021ae74fb780","sha512":"41744a273404b7bcb520d7f1eed16c0372647d9b9b7cfea718a4597264abf02fac0d08bcf38149666b5ee4acc0b9e2925c48e63853b2b4ed9eca6d3732b82d4b","ssdeep":"384:WcaHrKUCXF8l/n+u343o73RM9SOaei9J2tp8/8pwYi:5aHrKUCXF8lv+6MNiqsau","tlshash":"38e2237760f0977b119340d3afa6971a6fa2d503c29a204272bc7b8d5fa3ec1991364f","first_seen":"2026-04-15T05:08:45.562776Z","last_seen":"2026-04-15T05:08:45.562776Z","times_seen":1,"resource_available":true,"data":null}},"time_used":593,"timings":{"blocked":22,"dns":11,"connect":1,"send":0,"wait":541,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exodusrecoverytool.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusrecoverytool.com/styles.css","fqdn":"exodusrecoverytool.com","domain":"exodusrecoverytool.com","tld":"com"},"ip":{"addr":"104.21.15.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exodusrecoverytool.com/","date":"2026-04-15T05:08:19.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusrecoverytool.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 07:46:27 GMT","end":"Fri, 26 Jun 2026 07:46:26 GMT"},"fingerprint":{"sha1":"E5:E2:F2:92:41:58:38:0D:BE:79:AA:4A:3F:68:76:61:0A:D1:D3:4C","sha256":"21:8F:32:97:AB:08:7E:1D:83:ED:C2:A9:50:12:83:5B:4C:1F:42:ED:90:EE:94:7B:29:B8:42:CA:D0:40:E2:1A"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: exodusrecoverytool.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exodusrecoverytool.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:08:19 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BnhT2Qn8BccSBH8Y4RhSAFCTEm6rB%2FJ4zkpXPOw9JPHCA6AnWBVMDc5zyYxKWxrrb99JGG9VSFGUACXtQv91e3cn7QdsAMBgDgF3QkFtSxumX1k3ZUWD39vGj94PS%2Fk0P3HWsH%2FXuYmQ\"}]}\r\nlast-modified: Wed, 25 Mar 2026 22:49:36 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; img-src 'self' data: https://mc.yandex.ru https://mc.yandex.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.com wss://mc.webvisor.com wss://mc.webvisor.org; child-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-ancestors 'self' https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://*.webvisor.com blob: https://mc.yandex.ru https://mc.yandex.com; font-src 'self' data: https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; media-src 'self'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69c46680-ce6d\"\r\ncf-ray: 9ec86e8418b61ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52845,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0c9cc869fc12103bca2eebd3457b6977","sha1":"cfd8c7834e482e07c70e5218a4ce93a1d2e8ae46","sha256":"f13005443f91715b9248592f989b7e835fb67c38530ec19ecda66233c0d4a6c9","sha512":"42614712f912ead9824caadaa9e999699ccab2bdb20acaf9a93eeaf4237d9f9f10595bf384924da8389b3b90f8009f27266f9be94ec2f937ef3f8f793db4fdee","ssdeep":"1536:8t4XMjXw1F1z1jkk8hHiP2roofla4sVFyFhFj5cH8Izj+nsj537sI35rZ:a4GU4s+ccgtYA","tlshash":"f233a69537965920b52be4ac65d3db0af36ad143c90ad67c3be8201c6fc53ed4072f8a","first_seen":"2026-04-15T05:08:45.563987Z","last_seen":"2026-04-15T05:10:45.886935Z","times_seen":2,"resource_available":false,"data":null}},"time_used":901,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":706,"receive":195,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exodusrecoverytool.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusrecoverytool.com/assets/linux.png","fqdn":"exodusrecoverytool.com","domain":"exodusrecoverytool.com","tld":"com"},"ip":{"addr":"104.21.15.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodusrecoverytool.com/","date":"2026-04-15T05:08:19.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusrecoverytool.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 07:46:27 GMT","end":"Fri, 26 Jun 2026 07:46:26 GMT"},"fingerprint":{"sha1":"E5:E2:F2:92:41:58:38:0D:BE:79:AA:4A:3F:68:76:61:0A:D1:D3:4C","sha256":"21:8F:32:97:AB:08:7E:1D:83:ED:C2:A9:50:12:83:5B:4C:1F:42:ED:90:EE:94:7B:29:B8:42:CA:D0:40:E2:1A"}}},"request":{"raw":"GET /assets/linux.png HTTP/1.1\r\nHost: exodusrecoverytool.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exodusrecoverytool.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:08:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 39186\r\nlast-modified: Fri, 23 Jan 2026 22:08:05 GMT\r\npriority: u=4,i=?0\r\netag: \"6973f145-9912\"\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; img-src 'self' data: https://mc.yandex.ru https://mc.yandex.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.com wss://mc.webvisor.com wss://mc.webvisor.org; child-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-ancestors 'self' https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://*.webvisor.com blob: https://mc.yandex.ru https://mc.yandex.com; font-src 'self' data: https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; media-src 'self'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AmN3YcZZGnfhZRtaQHQx2ndFeHkiEiktitMz2ipvPG1hnEzJWBKCIZ%2Fjw28sJwXnwSoz6j04YOPjH3ste7Noq70kuX2QgI9KqmyjC%2F90S7PmiTkAOCieZsFsKrpT9964q0D3FcUFlNxQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec86e8428ba1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39186,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"2135e49f1bb05142ef60b0c4ecc0dc33","sha1":"c64f74fa350ba62ef76e93aafb820d6d5e63add9","sha256":"e2ddd3cca6a4c1e5dbd3934cacf2dac54b4e5c4d4321c9c3733262a06d79eea3","sha512":"21a0451363fe6d67b6ade1abeacc857590a227ec1c478155638801a694d5254fff4b95ab45995008abbbe8dc8cc4734f7b46fafc5d2258ea840214abc0effd11","ssdeep":"768:Fo36kNdwO60RXOnt3LWRdsF+S6nj6M1rIsFO5xyVFf4t7Qi4:2j7i0paL8dsFNWIOLjWki4","tlshash":"e603f1d9810826e965ab156a31facfb484587efce3b10a71b37d70d52e6c15360eb015","first_seen":"2026-04-15T05:08:45.564946Z","last_seen":"2026-04-15T05:10:45.888338Z","times_seen":2,"resource_available":false,"data":null}},"time_used":888,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":674,"receive":214,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exodusrecoverytool.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusrecoverytool.com/assets/security-card-bg.webp","fqdn":"exodusrecoverytool.com","domain":"exodusrecoverytool.com","tld":"com"},"ip":{"addr":"104.21.15.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodusrecoverytool.com/","date":"2026-04-15T05:08:20.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusrecoverytool.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 07:46:27 GMT","end":"Fri, 26 Jun 2026 07:46:26 GMT"},"fingerprint":{"sha1":"E5:E2:F2:92:41:58:38:0D:BE:79:AA:4A:3F:68:76:61:0A:D1:D3:4C","sha256":"21:8F:32:97:AB:08:7E:1D:83:ED:C2:A9:50:12:83:5B:4C:1F:42:ED:90:EE:94:7B:29:B8:42:CA:D0:40:E2:1A"}}},"request":{"raw":"GET /assets/security-card-bg.webp HTTP/1.1\r\nHost: exodusrecoverytool.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusrecoverytool.com/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:08:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 199668\r\nlast-modified: Sat, 24 Jan 2026 00:58:01 GMT\r\npriority: u=4,i=?0\r\netag: \"69741919-30bf4\"\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; img-src 'self' data: https://mc.yandex.ru https://mc.yandex.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.com wss://mc.webvisor.com wss://mc.webvisor.org; child-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-ancestors 'self' https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://*.webvisor.com blob: https://mc.yandex.ru https://mc.yandex.com; font-src 'self' data: https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; media-src 'self'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B0W7o4KXYNKgMpi8Hq9qSCQLXKfnzTWQEwo8gA%2B7Nb0On4mZtTnuW9bgF3hNuDhsxPs6AMTN6XDuicKTnKCEEtm7kfwvQYMDWX45Ku0lIb8%2Bnu5WqV7GDic0q2GOHGs18IbyCeb3aNHb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec86e89e8d11ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":199668,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"36c6a9b064473cb118a42fb4758ccb18","sha1":"8a447527e23f93773e611927bb4b76a1a2b7bdc0","sha256":"a9a95cf30e71a79fcaba695c9fcf1d002cac699133be40850a0d9ba4ba08cbca","sha512":"6a346db0069efe9bff52b6052f1b42086fa85edb44322ca1f73d861d61982ed97e4f36e465d95ba418b4dc887ae5ac01c082ebd9d5376e461868374e2f8b7e03","ssdeep":"3072:6T5+jGgK+oTYC3MYLG4yomNffiWKr+qQ6SlFvjcNUmgvVnbgYQmI:S5dgPoT58NoWtKinLccvxLQmI","tlshash":"5a14f0b20b448087ff9e2df489bf3952170fe446da33a440ab5929836e32495755fe3d","first_seen":"2026-04-15T05:08:45.56592Z","last_seen":"2026-04-15T05:10:45.89071Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1073,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":721,"receive":352,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exodusrecoverytool.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exodusrecoverytool.com/","date":"2026-04-15T05:08:20.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:49 GMT","end":"Mon, 15 Jun 2026 08:38:48 GMT"},"fingerprint":{"sha1":"37:8D:19:21:5B:E0:E1:BB:D8:7C:65:74:CB:23:05:60:8D:DA:34:48","sha256":"87:F6:F5:DB:75:39:30:F7:7B:2E:F2:78:F3:AF:75:98:AC:41:5C:58:80:43:5D:A4:53:50:BC:D4:D6:F1:CC:56"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://exodusrecoverytool.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Apr 2026 05:05:31 GMT\r\nexpires: Fri, 09 Apr 2027 05:05:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 518569\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-04-22T04:04:35.788844Z","times_seen":9144,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":146,"dns":6,"connect":27,"send":0,"wait":15,"receive":2,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodusrecoverytool.com/favicon-16x16.png","fqdn":"exodusrecoverytool.com","domain":"exodusrecoverytool.com","tld":"com"},"ip":{"addr":"104.21.15.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodusrecoverytool.com/","date":"2026-04-15T05:08:20.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusrecoverytool.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 07:46:27 GMT","end":"Fri, 26 Jun 2026 07:46:26 GMT"},"fingerprint":{"sha1":"E5:E2:F2:92:41:58:38:0D:BE:79:AA:4A:3F:68:76:61:0A:D1:D3:4C","sha256":"21:8F:32:97:AB:08:7E:1D:83:ED:C2:A9:50:12:83:5B:4C:1F:42:ED:90:EE:94:7B:29:B8:42:CA:D0:40:E2:1A"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: exodusrecoverytool.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exodusrecoverytool.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:08:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 805\r\nlast-modified: Tue, 24 Mar 2026 17:27:04 GMT\r\npriority: u=6,i=?0\r\netag: \"69c2c968-325\"\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; img-src 'self' data: https://mc.yandex.ru https://mc.yandex.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.com wss://mc.webvisor.com wss://mc.webvisor.org; child-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-ancestors 'self' https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://*.webvisor.com blob: https://mc.yandex.ru https://mc.yandex.com; font-src 'self' data: https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; media-src 'self'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kp21%2FkTQotgHlqbgAznDDplTqoBw2cvi4sGyNQ8sCxqnMaYv%2FFnkUq7yit5GdL5CzBenpM6ib586Nz1DLvtg6KwjpTXcVtPV5lpNS7iPdCjVjI6FVRVKHbrr4UpeV39Q1iqkTgyGwPVp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec86e8d48e61ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":805,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"464678e763906d62cb62383d92e60204","sha1":"c0ebf3cd23b35a76d81ba023da7dbb58865f8fa1","sha256":"683c82c6d56e77514bedd259d2fb6b35045555e73abf647d8838d433fdc7d77e","sha512":"0b7d670f2f0c3e918f61fab9c36728bc40c7455c08ba40a20bc9436191bfc5255a57bafd7f9222a9209c3be8a7e395ce6506d99a5503f2857a290665a0d84ebf","ssdeep":"","tlshash":"e001418fbfe5dd19c67cc47ea7b9b560ee6768dc18c111352d07511893806488c9dc85","first_seen":"2026-04-15T05:08:45.567033Z","last_seen":"2026-04-15T05:10:45.882052Z","times_seen":2,"resource_available":false,"data":null}},"time_used":526,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":526,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exodusrecoverytool.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusrecoverytool.com/android-chrome-512x512.png","fqdn":"exodusrecoverytool.com","domain":"exodusrecoverytool.com","tld":"com"},"ip":{"addr":"104.21.15.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodusrecoverytool.com/","date":"2026-04-15T05:08:20.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusrecoverytool.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 07:46:27 GMT","end":"Fri, 26 Jun 2026 07:46:26 GMT"},"fingerprint":{"sha1":"E5:E2:F2:92:41:58:38:0D:BE:79:AA:4A:3F:68:76:61:0A:D1:D3:4C","sha256":"21:8F:32:97:AB:08:7E:1D:83:ED:C2:A9:50:12:83:5B:4C:1F:42:ED:90:EE:94:7B:29:B8:42:CA:D0:40:E2:1A"}}},"request":{"raw":"GET /android-chrome-512x512.png HTTP/1.1\r\nHost: exodusrecoverytool.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exodusrecoverytool.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 05:08:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 116712\r\nlast-modified: Tue, 24 Mar 2026 17:27:04 GMT\r\npriority: u=6,i=?0\r\netag: \"69c2c968-1c7e8\"\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; img-src 'self' data: https://mc.yandex.ru https://mc.yandex.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org https://yastatic.net; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.com wss://mc.webvisor.com wss://mc.webvisor.org; child-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-src 'self' blob: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-ancestors 'self' https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://*.webvisor.com blob: https://mc.yandex.ru https://mc.yandex.com; font-src 'self' data: https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; media-src 'self'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zxT06ny9KohDsFqShjKXQp1UC9y%2BplZaAnthdSvZXg80qAneZSPYKFJCsscKZArFtpnOFbDoj8SBkL3eefFj9zu7xwFYuBhn3MfdTBV5h%2FRtazt49IhByk2pN71NT%2B6y1ZpHEu%2BTzl9B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec86e8d48e51ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116712,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"ecf52752873009c24ab224f4436f284d","sha1":"28a8a912957521a1a122c72604a1d22b3e2a6046","sha256":"bcd5e5f39ffe3e3aad94388c2e56f6cc2a3b2c14fb88f980f66ea214262b1bb5","sha512":"fea5f8381e24aa41b8e1ab2006eaeed57377acfeab94c691dc049cd7d694a62ee44ce72c1dc067a1ecba26f56dd3b5f0b65b78d4c703cc8d92558cf52757c893","ssdeep":"3072:BdijpQnmPJMrd30qs1IlQRsoiGnS89TFJBaWJyZGRL6:mjpQnYZIlIHn1bBaWJyQRL6","tlshash":"32b312138cc49b4adc5efc3906de42d51071c64b8ab41ae0fa9a41f1da7afda584fbd0","first_seen":"2026-04-15T05:08:45.568189Z","last_seen":"2026-04-15T05:10:45.890003Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1060,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":710,"receive":350,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"exodusrecoverytool.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}