{"report_id":"b563714a-3f08-4af9-88d6-f958fe137de4","version":6,"status":"done","tags":[],"date":"2026-03-04T22:19:36Z","url":{"schema":"http","addr":"exodusshield.com","fqdn":"exodusshield.com","domain":"exodusshield.com","tld":"com"},"ip":{"addr":"172.67.170.160","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"exodusshield.com/","fqdn":"exodusshield.com","domain":"exodusshield.com","tld":"com"},"title":"Exodus Hardware Wallet | Protect Your Crypto From Hacks \u0026 Scams","dom":{"size":52137,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4759)","md5":"f33dc978f7d819b38f2c68c56a16da69","sha1":"cca0b661d890678ceb85bf78419883a5dedc648b","sha256":"c45947beff3fe967238f3dc968f0683ef5bd968591c09726f1fa63a81c31d561","sha512":"6fa94a04cc84328f52f45924e3f5e393ab366700b44d17f00dd4d95a4596dfca54de017acb2f778106d543d66f5f4e7a7b82a7d7524e8d574af026a961e5a137","ssdeep":"384:hhB6UZSUPmbzoUFbowvhL7DBFTSDsZnjfAVFrk5DaGKvX:0UZSUebzoUFbowvhnrSsnTAVd6ap/","tlshash":"ad33f826b1f120265853c1d1bba25b4f7b60d543c60a8a6877fd4a84afdadd08da36cc","dom_hash":"domhashe59238f6d167c45533b7e0eae3df481a","first_seen":"2026-03-04T22:19:42.01201Z","last_seen":"2026-03-04T22:26:40.084162Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"exodusshield.com","fqdn":"exodusshield.com","domain":"exodusshield.com","tld":"com"},"ip":{"addr":"172.67.170.160","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-08T22:19:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"exodusshield.com","ip":{"addr":"104.21.55.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":36,"request_count":18,"received_data":325878,"sent_data":8316,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-03-02T04:56:47.471326Z","alert_count":0,"request_count":2,"received_data":815939,"sent_data":824,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.exodus.com","ip":{"addr":"104.18.36.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1994-12-15","domain_rank":202967,"first_seen":"2014-12-27T06:16:54Z","last_seen":"2026-02-27T00:15:06.083505Z","alert_count":0,"request_count":3,"received_data":109459,"sent_data":1620,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-03T16:23:30.873663Z","times_seen":47891,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodusshield.com/","fqdn":"exodusshield.com","domain":"exodusshield.com","tld":"com"},"ip":{"addr":"104.21.55.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9a8a3e0cb9a13f8cfb39b5537f31198a","sha1":"abd3d5909cc4139f15917abe3c6c5ac4ac729dec","sha256":"2df7f93b38d668fd44937c7915dbd7a0b88020d8f634ee3ae817d80a6e1518d8","sha512":"e615ff8b359f5558b23e995c2f072c77c96a75d897c7cab6a2c8e3d7e3f4446c1a989fc4399136f8a94610d1446e627504f92b239644665c51be12e39b3b4413","ssdeep":"","tlshash":"20a0128324420430055d1613200493453021810c1d8106044819407060239863464bc2","size":84,"data":"","first_seen":"2026-03-04T22:19:42.031637Z","last_seen":"2026-03-04T22:26:40.109533Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodusshield.com/","fqdn":"exodusshield.com","domain":"exodusshield.com","tld":"com"},"ip":{"addr":"104.21.55.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de58624154b2f5576d0d48b1a3edca4c","sha1":"f8f150561b7783e31bd9f607c8698e518c11dd3b","sha256":"314cca59d72ad79e46fc0a72c2c883aa3b3a5ae69d72df71632245a393ef0cf2","sha512":"1082639ca68ac75078910dd3b45a47ade3be24bd17ed569f0291a34ea85e17276580e79f199252249a83353e825cf254f5dfe8258b55dacff4d4c1eda15f19d4","ssdeep":"","tlshash":"7fa022c330020c3008be3a033080e3ca3032820c0ec20a00882c0020a023ecb38b8fc0","size":79,"data":"","first_seen":"2026-03-04T22:19:42.032564Z","last_seen":"2026-03-04T22:26:40.110905Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodusshield.com/","fqdn":"exodusshield.com","domain":"exodusshield.com","tld":"com"},"ip":{"addr":"104.21.55.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76aa0c6f825db29e592a9848cded2393","sha1":"ba22738336d90fcd498de3b178d1f10e04cd2c61","sha256":"2bd8c7c09bf644f061941b08f85798826f84ec9311f83cd608a3425ef3a56533","sha512":"2a106a6401d8422be0ef6702f15984de24308ead28121df21f047df10ccbb40514a0fe5733aa84572cd278abd424418a350ff3530113dbc8991b53bf2db296df","ssdeep":"","tlshash":"4d01990b31b6003f14bb612b9317430677260043348dcd2a3f5c8b5a0f98e781df06c6","size":739,"data":"","first_seen":"2026-03-04T22:19:42.033487Z","last_seen":"2026-03-04T22:26:40.112148Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"exodusshield.com/images/DAI.svg","fqdn":"exodusshield.com","domain":"exodusshield.com","tld":"com"},"ip":{"addr":"104.21.55.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodusshield.com/","date":"2026-03-04T22:19:15.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusshield.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 15:52:41 GMT","end":"Tue, 02 Jun 2026 15:52:40 GMT"},"fingerprint":{"sha1":"E0:D8:8F:0E:6A:FC:54:7C:F2:5E:7F:A4:27:72:60:CD:60:71:15:37","sha256":"E4:45:E6:17:81:4D:AF:5F:6C:2E:3A:87:2D:29:4C:E1:5F:35:F9:00:48:04:F3:82:B3:93:2A:6F:95:6B:E9:7B"}}},"request":{"raw":"GET /images/DAI.svg HTTP/1.1\r\nHost: exodusshield.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusshield.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 22:19:15 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 575\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Mar 2026 22:19:15 GMT\r\nlast-modified: Tue, 17 Feb 2026 07:20:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w9T%2BYEDErMR886%2B1dxxoUEKSdfRxolyZRE26P%2F0B022Tybb%2BWX3at44gq1tPD9aHvWcbEnqetJIKABCXDV%2BnD6KIpp52ij%2F%2Fe0%2B18q%2FCcxo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d7442eda8b72382-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1049,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4fdd8744673974da69b712cf005e2aad","sha1":"02dbd86f168d3b742b4666cb1bdb25de6ebbb5ce","sha256":"c2e30864c1259177b5e41514e1a6d574ab0e9b786689da532dfc4b7201407a8a","sha512":"9367bce611b579b4ac7ff54cc0663817585bd03788ce4c3cafb62c2d10a3adab692cbb9e8cdf0460a3ac095c681728111cf78ccf9f61fb344aa48ea03fc2bdd8","ssdeep":"","tlshash":"a011753ac75c157ce02947b6de6e3d60236f62ef76500402648c3f290150be9e10adc0","first_seen":"2026-03-04T22:19:42.013146Z","last_seen":"2026-03-04T22:26:40.105762Z","times_seen":2,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusshield.com/_next/static/media/background-particles.f910caaf.webm","fqdn":"exodusshield.com","domain":"exodusshield.com","tld":"com"},"ip":{"addr":"104.21.55.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://exodusshield.com/","date":"2026-03-04T22:19:16.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusshield.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 15:52:41 GMT","end":"Tue, 02 Jun 2026 15:52:40 GMT"},"fingerprint":{"sha1":"E0:D8:8F:0E:6A:FC:54:7C:F2:5E:7F:A4:27:72:60:CD:60:71:15:37","sha256":"E4:45:E6:17:81:4D:AF:5F:6C:2E:3A:87:2D:29:4C:E1:5F:35:F9:00:48:04:F3:82:B3:93:2A:6F:95:6B:E9:7B"}}},"request":{"raw":"GET /_next/static/media/background-particles.f910caaf.webm HTTP/1.1\r\nHost: exodusshield.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusshield.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 04 Mar 2026 22:19:16 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GgRxuWKvWxlKbfN2RYhkoqfpJWJSoxWTlzZolaskNtp8vNYFg0qWHqFvEBJ8I088SxtgGvM%2BfYTsZrp6GHzXTbQCldWEZb2YTRwGNUv8v9w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7442f249032382-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-03T16:04:00.794906Z","times_seen":145561,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusshield.com/css/53b3f59564e76f29.css","fqdn":"exodusshield.com","domain":"exodusshield.com","tld":"com"},"ip":{"addr":"104.21.55.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exodusshield.com/","date":"2026-03-04T22:19:15.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusshield.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 15:52:41 GMT","end":"Tue, 02 Jun 2026 15:52:40 GMT"},"fingerprint":{"sha1":"E0:D8:8F:0E:6A:FC:54:7C:F2:5E:7F:A4:27:72:60:CD:60:71:15:37","sha256":"E4:45:E6:17:81:4D:AF:5F:6C:2E:3A:87:2D:29:4C:E1:5F:35:F9:00:48:04:F3:82:B3:93:2A:6F:95:6B:E9:7B"}}},"request":{"raw":"GET /css/53b3f59564e76f29.css HTTP/1.1\r\nHost: exodusshield.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusshield.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 22:19:15 GMT\r\ncontent-type: text/css\r\ncontent-length: 425\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 03 Apr 2026 22:19:15 GMT\r\nlast-modified: Tue, 17 Feb 2026 07:19:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GBlMrlaP8mItzjs6cCf20zeM52d8OFBxhLFgoQI%2BQjb2dEYJ9UxscuXipE2pkHbb%2BFAz8yVwtl6ngMOxi3NcLF%2B4tt%2F6sehvr1FMMJqNAyU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9d7442ed88a82382-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1794,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1794), with no line terminators","md5":"6856b173e3ceb2f13fa007832ec26fca","sha1":"2eccf22841661915dbfc201d5ab963bbdfb4f1a6","sha256":"6fd66d446ffe791783026dcd95710da8bc2155d7c9dfce80101bb0e8031128d2","sha512":"b4f3f7d7feb1dfef00afa800a902e1a2087857dd37a5466076bedadf1069efdfe3850361caac844fb8bee6e35f68aaf175f5c232912030636516e62b85e1fc49","ssdeep":"","tlshash":"b1316d14a00b5fd2d9209c87778a3b1169196c1ab6a504e7f62ac66ccce7c3f43e4f79","first_seen":"2025-11-14T22:42:51.470022Z","last_seen":"2026-04-30T04:06:28.073001Z","times_seen":18,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exodusshield.com/","date":"2026-03-04T22:19:15.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:26:32 GMT","end":"Tue, 21 Apr 2026 09:26:27 GMT"},"fingerprint":{"sha1":"90:9B:CE:CB:FE:F2:C6:A9:53:13:5D:52:B6:07:F4:B4:84:28:97:60","sha256":"61:49:94:E8:FB:D1:24:14:DF:C9:92:BE:60:84:A8:D8:37:E3:89:DC:42:7B:0A:64:D3:F2:32:FD:D0:93:4C:4B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusshield.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 04 Mar 2026 22:19:15 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::5nmdm-1772662095245-9db8e8aaf804\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 660\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2BG47%2FKPpOPQGKny67DjwhG0ahFTpkGSSPxEzSesuuDTGNKEbQRgiQDcx6lKyyf6wleLrepp0ULQ%2FKNolu6Bt4jRPt5ZCE9zIvMYI3WUhFPByw%3D%3D\"}]}\r\ncf-ray: 9d7442edcfd476a9-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T16:30:16.639858Z","times_seen":17692840,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":16,"dns":0,"connect":8,"send":0,"wait":13,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exodusshield.com/","date":"2026-03-04T22:19:15.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:26:32 GMT","end":"Tue, 21 Apr 2026 09:26:27 GMT"},"fingerprint":{"sha1":"90:9B:CE:CB:FE:F2:C6:A9:53:13:5D:52:B6:07:F4:B4:84:28:97:60","sha256":"61:49:94:E8:FB:D1:24:14:DF:C9:92:BE:60:84:A8:D8:37:E3:89:DC:42:7B:0A:64:D3:F2:32:FD:D0:93:4C:4B"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exodusshield.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 22:19:15 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::crrwr-1770516958843-e8a5a5e1e05a\r\nlast-modified: Sun, 08 Feb 2026 02:15:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 2145796\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PpKBWaJaWxvPek2yBztLAUykxpJcXWQkutJtGcvBpGD63g9ZQXaYvRqSbUy45XfzbzbY8LEfflDk0jdiSrTv2XJdcl8gj0nIVf9JFay9b%2FET9g%3D%3D\"}]}\r\ncf-ray: 9d7442ede81276a9-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-03T16:23:30.873663Z","times_seen":47891,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodusshield.com/_next/static/media/background-particles.8b579856.webp","fqdn":"exodusshield.com","domain":"exodusshield.com","tld":"com"},"ip":{"addr":"104.21.55.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodusshield.com/","date":"2026-03-04T22:19:16.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusshield.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 15:52:41 GMT","end":"Tue, 02 Jun 2026 15:52:40 GMT"},"fingerprint":{"sha1":"E0:D8:8F:0E:6A:FC:54:7C:F2:5E:7F:A4:27:72:60:CD:60:71:15:37","sha256":"E4:45:E6:17:81:4D:AF:5F:6C:2E:3A:87:2D:29:4C:E1:5F:35:F9:00:48:04:F3:82:B3:93:2A:6F:95:6B:E9:7B"}}},"request":{"raw":"GET /_next/static/media/background-particles.8b579856.webp HTTP/1.1\r\nHost: exodusshield.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusshield.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 04 Mar 2026 22:19:16 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7DqnOIATeAGGOfa2TgRuwZwzhzao%2FAoyGWE75PBB%2BMAo1GNE%2BRaLylubBmeRxZz%2BjJdb69NEXC424TYa9oqBDcKgs%2BQESS1pnQXHWbWoHHI%3D\"}]}\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d7442f128ec2382-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-03T16:04:00.794906Z","times_seen":145561,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusshield.com/icon.svg","fqdn":"exodusshield.com","domain":"exodusshield.com","tld":"com"},"ip":{"addr":"104.21.55.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodusshield.com/","date":"2026-03-04T22:19:16.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusshield.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 15:52:41 GMT","end":"Tue, 02 Jun 2026 15:52:40 GMT"},"fingerprint":{"sha1":"E0:D8:8F:0E:6A:FC:54:7C:F2:5E:7F:A4:27:72:60:CD:60:71:15:37","sha256":"E4:45:E6:17:81:4D:AF:5F:6C:2E:3A:87:2D:29:4C:E1:5F:35:F9:00:48:04:F3:82:B3:93:2A:6F:95:6B:E9:7B"}}},"request":{"raw":"GET /icon.svg HTTP/1.1\r\nHost: exodusshield.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusshield.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 04 Mar 2026 22:19:16 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r7z%2FmKlVLoj6YUcjUuR8eXABDbcHpekp5EgzafVJQVN%2BLWc55CWUqZSknCVnHH1DtYBhGy1SH8PRIs6mrzFo1eMee%2BUWP9J84jxlR9K5E8A%3D\"}]}\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9d7442f3b9262382-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-03T16:04:00.794906Z","times_seen":145561,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusshield.com/css/d2577403f79a7564.css","fqdn":"exodusshield.com","domain":"exodusshield.com","tld":"com"},"ip":{"addr":"104.21.55.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exodusshield.com/","date":"2026-03-04T22:19:15.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusshield.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 15:52:41 GMT","end":"Tue, 02 Jun 2026 15:52:40 GMT"},"fingerprint":{"sha1":"E0:D8:8F:0E:6A:FC:54:7C:F2:5E:7F:A4:27:72:60:CD:60:71:15:37","sha256":"E4:45:E6:17:81:4D:AF:5F:6C:2E:3A:87:2D:29:4C:E1:5F:35:F9:00:48:04:F3:82:B3:93:2A:6F:95:6B:E9:7B"}}},"request":{"raw":"GET /css/d2577403f79a7564.css HTTP/1.1\r\nHost: exodusshield.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusshield.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 22:19:15 GMT\r\ncontent-type: text/css\r\ncontent-length: 28413\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 03 Apr 2026 22:19:15 GMT\r\nlast-modified: Tue, 17 Feb 2026 07:19:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BX%2B%2F8n7P%2Bt1NqZG08Yt6lgwTUkGkIM57tUGN%2B52NqqQMAyysnObmOuNCfO33kkrAC8PVuro2pVKl9dlHBa80UnIxMmf4RKUUEZKUr%2FFEMqw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9d7442ed98a92382-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":194067,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (64343)","md5":"2479dc231e8c0cf7aa5792e786172f56","sha1":"6067e9c7a19ebf2941c9fdfcc7d145ee794c275c","sha256":"2b9be10f63f5628c2c7d757bb46838068a882bec0702112d98038dbc757c2bd1","sha512":"2b87970ec3e6097222c0cc0af12282a9008014e5166c9faa0c32dfb31cbff63ed9d3090d56c3e9fd20385585a57e486de3847dec67eec0ce56c6b6bb4eb9db9c","ssdeep":"3072:aLxIPrelB+7hIIICwPzebVMs81s3fEvsiKhRjfgfFntJrIevl07n9Op2J0JOuHe1:aLmPrelB+7hIIICwPzebVMs81s3fEvsp","tlshash":"ee1482fa6a55107f7e27d1f5c3d8b95cd82af1c0de2a14e9e95200092be33f50ddaa24","first_seen":"2026-03-04T22:19:42.017618Z","last_seen":"2026-03-04T22:26:40.0977Z","times_seen":2,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusshield.com/images/USDC.svg","fqdn":"exodusshield.com","domain":"exodusshield.com","tld":"com"},"ip":{"addr":"104.21.55.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodusshield.com/","date":"2026-03-04T22:19:15.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusshield.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 15:52:41 GMT","end":"Tue, 02 Jun 2026 15:52:40 GMT"},"fingerprint":{"sha1":"E0:D8:8F:0E:6A:FC:54:7C:F2:5E:7F:A4:27:72:60:CD:60:71:15:37","sha256":"E4:45:E6:17:81:4D:AF:5F:6C:2E:3A:87:2D:29:4C:E1:5F:35:F9:00:48:04:F3:82:B3:93:2A:6F:95:6B:E9:7B"}}},"request":{"raw":"GET /images/USDC.svg HTTP/1.1\r\nHost: exodusshield.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusshield.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 22:19:15 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 826\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Mar 2026 22:19:15 GMT\r\nlast-modified: Tue, 17 Feb 2026 07:20:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fAo39a3TgYOdipSZi3UOhqBN3nOLE0r1F5gSgInCWbcoFvSQF%2FCwmEQBYaXOJD7fFduKS9Mbd44vT1HZFZZYQsQf5UpIQmV2OazrlrsHo34%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d7442eda8b22382-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1699,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"09222c1ed04d6804263027ae8c4f2aa5","sha1":"c387066421ad2cb07f8f194f3d2df37c90389b18","sha256":"c548dcd50160150746debc543f8253dd6fdb7a234b0d894ea49b10afc00ac400","sha512":"8210d360de5257384fb69798a7be653a7a265c6d01258761cd1bdb7a12fb0f5bd765daeb1520100904e73feba3179687fe17c8e7c8bb4a83f0ec43925d8f501f","ssdeep":"","tlshash":"bd3174f2a73820ecd48aee4fbf69a560a31d75bd7f515992908e2f694003a86e047c44","first_seen":"2025-10-01T11:56:17.898944Z","last_seen":"2026-06-24T01:40:58.619636Z","times_seen":23,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusshield.com/_next/static/media/background-particles.8bd8815e.mp4","fqdn":"exodusshield.com","domain":"exodusshield.com","tld":"com"},"ip":{"addr":"104.21.55.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://exodusshield.com/","date":"2026-03-04T22:19:16.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusshield.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 15:52:41 GMT","end":"Tue, 02 Jun 2026 15:52:40 GMT"},"fingerprint":{"sha1":"E0:D8:8F:0E:6A:FC:54:7C:F2:5E:7F:A4:27:72:60:CD:60:71:15:37","sha256":"E4:45:E6:17:81:4D:AF:5F:6C:2E:3A:87:2D:29:4C:E1:5F:35:F9:00:48:04:F3:82:B3:93:2A:6F:95:6B:E9:7B"}}},"request":{"raw":"GET /_next/static/media/background-particles.8bd8815e.mp4 HTTP/1.1\r\nHost: exodusshield.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusshield.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 04 Mar 2026 22:19:16 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FI96hMLQvJwLNl9VjSaCavidHOyWj2xt1mseaSf6kU9IVo6SHPTWDOtr%2BHw6949mYMby%2FqAgDlnfao9JE9pbJDo1kxqPJbENErU%2FsZ1uhH8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7442f3e92b2382-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-03T16:04:00.794906Z","times_seen":145561,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusshield.com/images/bitcoin.svg","fqdn":"exodusshield.com","domain":"exodusshield.com","tld":"com"},"ip":{"addr":"104.21.55.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodusshield.com/","date":"2026-03-04T22:19:15.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusshield.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 15:52:41 GMT","end":"Tue, 02 Jun 2026 15:52:40 GMT"},"fingerprint":{"sha1":"E0:D8:8F:0E:6A:FC:54:7C:F2:5E:7F:A4:27:72:60:CD:60:71:15:37","sha256":"E4:45:E6:17:81:4D:AF:5F:6C:2E:3A:87:2D:29:4C:E1:5F:35:F9:00:48:04:F3:82:B3:93:2A:6F:95:6B:E9:7B"}}},"request":{"raw":"GET /images/bitcoin.svg HTTP/1.1\r\nHost: exodusshield.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusshield.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 22:19:15 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 779\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Mar 2026 22:19:15 GMT\r\nlast-modified: Tue, 17 Feb 2026 07:20:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MCGiWZB%2BP7SwMzlQVpVTfAvn3NUKZIs20rOORPG1oDj36bDbygcegDI%2B3iVsLhaJMjoDd%2F%2BDRUJNX3hKLfuk4E%2FfHtSIebYoxt8iC5nOd9Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d7442ed98ae2382-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1521,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6c0c94f34ad843962ded552a58619658","sha1":"61d511a7859219f47d41e999180978691081967d","sha256":"992c61cb382d28d893e0dd8ca1b9746f850e76e6d0946acf3858316763407c2c","sha512":"1bd8c577a237ad1367884c8d50768abbf8b286c243d69177ad0cdd7543b5f3a28c3e6ad97bd3fa852a27a264b41fc4039a6e7ec072999b065535c1303af9ec66","ssdeep":"","tlshash":"cf3167ff9714e3acdb49c1aedf39e854111aa4de777714d18dee4a2c01039c2b506d54","first_seen":"2025-10-01T11:56:18.114114Z","last_seen":"2026-06-24T01:40:58.572539Z","times_seen":24,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusshield.com/images/ethereum.svg","fqdn":"exodusshield.com","domain":"exodusshield.com","tld":"com"},"ip":{"addr":"104.21.55.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodusshield.com/","date":"2026-03-04T22:19:15.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusshield.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 15:52:41 GMT","end":"Tue, 02 Jun 2026 15:52:40 GMT"},"fingerprint":{"sha1":"E0:D8:8F:0E:6A:FC:54:7C:F2:5E:7F:A4:27:72:60:CD:60:71:15:37","sha256":"E4:45:E6:17:81:4D:AF:5F:6C:2E:3A:87:2D:29:4C:E1:5F:35:F9:00:48:04:F3:82:B3:93:2A:6F:95:6B:E9:7B"}}},"request":{"raw":"GET /images/ethereum.svg HTTP/1.1\r\nHost: exodusshield.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusshield.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 22:19:15 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 783\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Mar 2026 22:19:15 GMT\r\nlast-modified: Tue, 17 Feb 2026 07:20:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AJUNprIYpA34kX1Xw7YJA6Nfq9lXR3uPvGDrR5IawPh3j1cLCIKLsqJJxwkXkoBzw%2FDJQwRd4mfQ8KUk4iE4YFEmsciQ9BO1P74bnT12%2FUI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d7442ed98af2382-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1903,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1d9d0abafaa9db2f6a62ad5aa86f94a6","sha1":"5961ee54b358833329e88e6b15a6a2f96d789a45","sha256":"ef4fb9345dd9b5a10a78c25d65f88e824264ced0bf6d3eea20f792c36d52b90e","sha512":"555c724234fa51db68cd80841b3bdee018f521f33d66acc30bd38d08185cca35025abbf5cde55122ab89acde436a46a0f17f27442d9fc263291811ab99a4c0bf","ssdeep":"","tlshash":"be410fe401ec62ec5109c7f5ae7b68b9011239ffc225c4a5fbc42a55e9440ef2c28253","first_seen":"2025-10-01T11:56:18.097185Z","last_seen":"2026-06-24T01:40:58.543012Z","times_seen":23,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusshield.com/images/USDT.svg","fqdn":"exodusshield.com","domain":"exodusshield.com","tld":"com"},"ip":{"addr":"104.21.55.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodusshield.com/","date":"2026-03-04T22:19:15.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusshield.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 15:52:41 GMT","end":"Tue, 02 Jun 2026 15:52:40 GMT"},"fingerprint":{"sha1":"E0:D8:8F:0E:6A:FC:54:7C:F2:5E:7F:A4:27:72:60:CD:60:71:15:37","sha256":"E4:45:E6:17:81:4D:AF:5F:6C:2E:3A:87:2D:29:4C:E1:5F:35:F9:00:48:04:F3:82:B3:93:2A:6F:95:6B:E9:7B"}}},"request":{"raw":"GET /images/USDT.svg HTTP/1.1\r\nHost: exodusshield.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusshield.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 22:19:15 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 765\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Mar 2026 22:19:15 GMT\r\nlast-modified: Tue, 17 Feb 2026 07:20:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=md%2BCCtYSlZLkxTIoFAGQl2xiVNzZ824M0V2j4FqdkvXJtrIbQtoj9Eyba%2FHmiDmFypL%2BjPgiCME832KVIltlAubYte399REOiFtwFuAh5qU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d7442ed98b12382-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1663,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e5f0278d54e9998e3d3b7e3e01505dd9","sha1":"479492bab5d363977f18ac311b827a03ee9c4e75","sha256":"edfd3c8eba63db18aa77ab9f92275a348acc2fa2f608bc2ccf296f065a59a7ef","sha512":"fbad900d4b90a1eccc7a4e1be1631bf1706e6cb6e6a10e81dc6422e452768f3f49748e481702f5c4a6d543ba4f3c9620629feffb540ac66b66af7b573194f51f","ssdeep":"","tlshash":"82313291d3ee90f5a345e3fcea7b50a6316700e76241c9bcd3ea5a17e50416d005089b","first_seen":"2025-10-01T11:56:18.109572Z","last_seen":"2026-06-24T01:40:58.594521Z","times_seen":23,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusshield.com/","fqdn":"exodusshield.com","domain":"exodusshield.com","tld":"com"},"ip":{"addr":"104.21.55.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T22:19:15.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusshield.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 15:52:41 GMT","end":"Tue, 02 Jun 2026 15:52:40 GMT"},"fingerprint":{"sha1":"E0:D8:8F:0E:6A:FC:54:7C:F2:5E:7F:A4:27:72:60:CD:60:71:15:37","sha256":"E4:45:E6:17:81:4D:AF:5F:6C:2E:3A:87:2D:29:4C:E1:5F:35:F9:00:48:04:F3:82:B3:93:2A:6F:95:6B:E9:7B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: exodusshield.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 22:19:15 GMT\r\ncontent-type: text/html\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 03 Apr 2026 22:19:15 GMT\r\nlast-modified: Wed, 04 Mar 2026 13:56:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R7%2BPAWHnggP6w3nEkVYUhjGtoE1EQsZueEI9gvNlk5kv%2Fgggv1SNWtzcLeUc8T1zppstY84gnJhjA98y4FA51%2Bm9QIsRpDvuN4%2BDf8oL1mk%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d7442eb2e374b93-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":48334,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (341), with CRLF line terminators","md5":"e3f76eecd7b0f2d8535554f65e963ffd","sha1":"c3320032aa08ce6d8bb7d7590efa8c22b73c9bd4","sha256":"3c8bfd91d08d8211aa50120e78f9c4036c269a2c88047ba0d9f7b1301b0127d6","sha512":"f4dcd2cbae18d2b4a9f6802938b3d8f29b42e7d42ac5b054060ca1604633923f39b4bd6cf141366e7b6c12b98a16e03e6a836cf9e1b71fd70bc6af3a2219fa98","ssdeep":"384:qJSMZ4tGioptLUVscgtTXA52DE59O7Ytb:qJSMZ4tGiop+VKt7A50cOU1","tlshash":"67239326a1c020265533c2e5fb629b9efea18107c706426877fd57c75ffad508d23ad8","first_seen":"2026-03-04T22:19:42.022913Z","last_seen":"2026-03-04T22:26:40.086705Z","times_seen":2,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":30,"dns":1,"connect":9,"send":0,"wait":259,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exodus.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fhero-preview.ce325941.png\u0026w=1920\u0026q=75","fqdn":"www.exodus.com","domain":"exodus.com","tld":"com"},"ip":{"addr":"104.18.36.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodusshield.com/","date":"2026-03-04T22:19:15.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 18:16:47 GMT","end":"Sun, 19 Apr 2026 19:16:46 GMT"},"fingerprint":{"sha1":"B3:1E:8E:2E:61:AA:3F:A6:17:45:DC:72:68:62:01:C2:9A:6C:17:90","sha256":"6F:99:42:D1:F0:1D:45:DF:AF:E0:C9:59:B0:67:E2:70:B2:9C:66:E3:02:D4:3C:03:4F:C8:6A:38:1E:63:64:8A"}}},"request":{"raw":"GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fhero-preview.ce325941.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: www.exodus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusshield.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 22:19:15 GMT\r\ncontent-type: image/webp\r\ncontent-length: 56614\r\nserver: cloudflare\r\ncf-ray: 9d7442edc84a120a-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nage: 2412701\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: attachment; filename=\"hero-preview.webp\"\r\nlast-modified: Thu, 05 Feb 2026 00:07:34 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-matched-path: /_next/static/media/hero-preview.ce325941.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qx7zl-1772662755684-e8ef6edd6150\r\ncross-origin-opener-policy: same-origin\r\nset-cookie: _cfuvid=R7Q20X3Y_TRQzwVA3CdoSGAioRCUivwvRaIwxn5GNxE-1772662755765-0.0.1.1-604800000; path=/; domain=.exodus.com; HttpOnly; Secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56614,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"645e06ac7d54ccbd44bccce21f2e4c94","sha1":"e65ccca3069a41237b34bbc59fb8f09854b00019","sha256":"b5e22f7d3b63a9efe858b65c1e1cb6a27b6b947700d64e29d7594bafe4b49252","sha512":"c04155af6b17cc039048f3aaad2b2e7d416b5256077dc5b89d6b24439a9d2e1f55530fd5f8bc001281366f911a53d18bd0d766ed16fdccd714aa27632984b9ac","ssdeep":"768:r9nUFEX1IGu2lsvb7C3ssmrKZj/mEIPhXL4fDCcAO145946nxz/LkwPyA9mLO7gx:r9nUazBg7C3ssHtmsMOCtxXkwvAXA","tlshash":"f743e1df609908b5b1258f72e7c1eb8e6be5c0b94b5acb542947f1a621403ea2c1fc13","first_seen":"2026-03-04T22:19:42.024094Z","last_seen":"2026-03-04T22:26:40.099326Z","times_seen":2,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":17,"dns":12,"connect":1,"send":0,"wait":285,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodusshield.com/images/PEPEethereum22ED551C.svg","fqdn":"exodusshield.com","domain":"exodusshield.com","tld":"com"},"ip":{"addr":"104.21.55.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodusshield.com/","date":"2026-03-04T22:19:15.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusshield.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 15:52:41 GMT","end":"Tue, 02 Jun 2026 15:52:40 GMT"},"fingerprint":{"sha1":"E0:D8:8F:0E:6A:FC:54:7C:F2:5E:7F:A4:27:72:60:CD:60:71:15:37","sha256":"E4:45:E6:17:81:4D:AF:5F:6C:2E:3A:87:2D:29:4C:E1:5F:35:F9:00:48:04:F3:82:B3:93:2A:6F:95:6B:E9:7B"}}},"request":{"raw":"GET /images/PEPEethereum22ED551C.svg HTTP/1.1\r\nHost: exodusshield.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusshield.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 22:19:15 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 16369\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Mar 2026 22:19:15 GMT\r\nlast-modified: Tue, 17 Feb 2026 07:20:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ptECwbKvGvEki86ckcXsL5VHxTQ4N3EZ%2BGy4mxvcrb33%2FVGuPgbQ6y5QFH2r%2B%2Fp%2B53VOZQ2U1xlILFsHnOOQleTfbmoWMO8wPyb%2BRYwjhng%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d7442eda8b62382-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":43788,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"91a41d491c109133c56dfb72275d24cc","sha1":"fb1c0ab5831a8bf9add0cfb9f21699b41c38241c","sha256":"8305cdd608831e8153c8ff037605c50a894307dcb4804b251c57dc2804707040","sha512":"872de1927314112df08b5c1a25b80baafa321663b635c9d05349d968886cf97332ec75f74543a7df7161d44022be9f5b9b4a38bd5b19619b131af6bc46bb3fc1","ssdeep":"768:0CO2LlF7crFJDbJj1iilhycKBw1IsQ0/z9YV1N1Nl3fYnaf9oUbeRw:3JcnXjhEC+T0/CV1vDeASaew","tlshash":"c113d2c621609389e8ccf65e8bafedd0111e70dbb5b295c54faf874c940e984ff584a8","first_seen":"2026-01-11T05:20:03.587263Z","last_seen":"2026-06-24T01:40:58.54741Z","times_seen":18,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exodus.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fshowcase-slide-1-d.b1d9d7b0.jpg\u0026w=1920\u0026q=75","fqdn":"www.exodus.com","domain":"exodus.com","tld":"com"},"ip":{"addr":"104.18.36.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://exodusshield.com/","date":"2026-03-04T22:19:16.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 18:16:47 GMT","end":"Sun, 19 Apr 2026 19:16:46 GMT"},"fingerprint":{"sha1":"B3:1E:8E:2E:61:AA:3F:A6:17:45:DC:72:68:62:01:C2:9A:6C:17:90","sha256":"6F:99:42:D1:F0:1D:45:DF:AF:E0:C9:59:B0:67:E2:70:B2:9C:66:E3:02:D4:3C:03:4F:C8:6A:38:1E:63:64:8A"}}},"request":{"raw":"GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fshowcase-slide-1-d.b1d9d7b0.jpg\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: www.exodus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusshield.com/\r\nCookie: _cfuvid=R7Q20X3Y_TRQzwVA3CdoSGAioRCUivwvRaIwxn5GNxE-1772662755765-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 22:19:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18356\r\nserver: cloudflare\r\ncf-ray: 9d7442f258d4120a-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nage: 2400152\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: attachment; filename=\"showcase-slide-1-d.webp\"\r\nlast-modified: Thu, 05 Feb 2026 03:36:43 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-matched-path: /_next/static/media/showcase-slide-1-d.b1d9d7b0.jpg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5c688-1772662756291-fc4560512561\r\ncross-origin-opener-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":18356,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x819, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"809df5846f01281d689d0f0ad999f5cd","sha1":"f677c43ff672e1f66d2ccc9d66fc9355ba1150c1","sha256":"b877747d7f8b77dbf0d8db69f271bc2c53f639fdf929322332e74f85b9cde146","sha512":"d32d99c7f4042a63f76a223089d3d66587feb3e64195c3324f75e5f72e795a44906e09e1fc20d7abb8f64e7b63d040d8a87fb2f3d01c872ec36a3d1d25d2922d","ssdeep":"384:Y5hF4dkMpScuVctFiCIDFy5mPRp/oD7o/AbaXTocCArVTVPh:ehFRcumPrIhy58TAMAbaXbrVTVJ","tlshash":"3882cf49bc9c68719a6e9ec12a27f02d9b46c4c26e8953f0bbbcd05f23911ca1f5614b","first_seen":"2026-03-04T22:19:42.026066Z","last_seen":"2026-03-04T22:26:40.102101Z","times_seen":2,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exodus.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fhero-background.5576d612.jpg\u0026w=3840\u0026q=75","fqdn":"www.exodus.com","domain":"exodus.com","tld":"com"},"ip":{"addr":"104.18.36.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodusshield.com/","date":"2026-03-04T22:19:15.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 18:16:47 GMT","end":"Sun, 19 Apr 2026 19:16:46 GMT"},"fingerprint":{"sha1":"B3:1E:8E:2E:61:AA:3F:A6:17:45:DC:72:68:62:01:C2:9A:6C:17:90","sha256":"6F:99:42:D1:F0:1D:45:DF:AF:E0:C9:59:B0:67:E2:70:B2:9C:66:E3:02:D4:3C:03:4F:C8:6A:38:1E:63:64:8A"}}},"request":{"raw":"GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fhero-background.5576d612.jpg\u0026w=3840\u0026q=75 HTTP/1.1\r\nHost: www.exodus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusshield.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 22:19:15 GMT\r\ncontent-type: image/webp\r\ncontent-length: 31782\r\nserver: cloudflare\r\ncf-ray: 9d7442edc853120a-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nage: 2422347\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: attachment; filename=\"hero-background.webp\"\r\nlast-modified: Wed, 04 Feb 2026 18:25:15 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-matched-path: /_next/static/media/hero-background.5576d612.jpg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::m5wjr-1772662755683-dfe07b2b240f\r\ncross-origin-opener-policy: same-origin\r\nset-cookie: _cfuvid=ouTIcAL_vQNbM4BxZzRfLDHIIw2vahB0I6kDi5FDzCA-1772662755737-0.0.1.1-604800000; path=/; domain=.exodus.com; HttpOnly; Secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31782,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2626x2072, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ff31c9e08259014137addf0d7bb590e5","sha1":"dbef4f18fb253824095a6e523babf7fcac24d69b","sha256":"2ed2dd8fc9a43e2d6ad33192768962d6302226beba1abc99d42b039a6fea2323","sha512":"a537a0831464c73740167a57f2f8d2c6ecc06b97d04c0979be5bf38731f0b881ae1611a5909b3a1e0482a6cf7be889520fe2d0a6404accbb4a063a23da72b223","ssdeep":"768:hdK5256QbxGGxx2NDjAbNDYj62HYNBdJAotTCm:n2QAeIDjAbNYH8zJL","tlshash":"30e28bb1131e3605fe6c22b96baa155bc365491b95b373b128d16f3f16ca203b214cdf","first_seen":"2026-03-04T22:19:42.026982Z","last_seen":"2026-03-04T22:26:40.088782Z","times_seen":2,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":255,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodusshield.com/_next/static/media/background-particles.8b579856.webp","fqdn":"exodusshield.com","domain":"exodusshield.com","tld":"com"},"ip":{"addr":"104.21.55.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodusshield.com/","date":"2026-03-04T22:19:15.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusshield.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 15:52:41 GMT","end":"Tue, 02 Jun 2026 15:52:40 GMT"},"fingerprint":{"sha1":"E0:D8:8F:0E:6A:FC:54:7C:F2:5E:7F:A4:27:72:60:CD:60:71:15:37","sha256":"E4:45:E6:17:81:4D:AF:5F:6C:2E:3A:87:2D:29:4C:E1:5F:35:F9:00:48:04:F3:82:B3:93:2A:6F:95:6B:E9:7B"}}},"request":{"raw":"GET /_next/static/media/background-particles.8b579856.webp HTTP/1.1\r\nHost: exodusshield.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusshield.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 04 Mar 2026 22:19:15 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YcUg3KjoZeXqMpfdxEtxAf3tOkSDR%2Flrcv42s3Y43Dqt%2Fm69dpvEKjJ3e0fllPL%2FZDw7rP5svgLtHZ7weFBDr4snzENmLyR5t%2BgNLgpfhEI%3D\"}]}\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d7442ed98ac2382-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-03T16:04:00.794906Z","times_seen":145561,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusshield.com/images/LINK.svg","fqdn":"exodusshield.com","domain":"exodusshield.com","tld":"com"},"ip":{"addr":"104.21.55.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodusshield.com/","date":"2026-03-04T22:19:15.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusshield.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 15:52:41 GMT","end":"Tue, 02 Jun 2026 15:52:40 GMT"},"fingerprint":{"sha1":"E0:D8:8F:0E:6A:FC:54:7C:F2:5E:7F:A4:27:72:60:CD:60:71:15:37","sha256":"E4:45:E6:17:81:4D:AF:5F:6C:2E:3A:87:2D:29:4C:E1:5F:35:F9:00:48:04:F3:82:B3:93:2A:6F:95:6B:E9:7B"}}},"request":{"raw":"GET /images/LINK.svg HTTP/1.1\r\nHost: exodusshield.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusshield.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 22:19:15 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 416\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Mar 2026 22:19:15 GMT\r\nlast-modified: Tue, 17 Feb 2026 07:20:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DO7I9EUiP3GXAQrQ2ACOxYTgx8Un9tYKGAhl%2BXJ%2Fmlw%2BDOWBfmDUbZAOzyERKAysaT0Gqc2iWMqf%2BrAWrsjHuc%2Fr%2BU8XvQ8wDw5R8Ozp3%2Bw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d7442eda8b42382-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":805,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"61739ac6d8fcbda3445bf0db1bd30c73","sha1":"d412aa396c2289bea2837927af870c274e1320c9","sha256":"834586f2a368df799969d2519a126b6ee3dabce885203f9ad6f2750f9debe166","sha512":"6ad7ac9707945e6f564c579de24b9110e0a9fa9e98cae41088e6ebc9c1b4daa9b82ca530199d02206e437217b7531ba37c0a593426056dc20f95c535fa558514","ssdeep":"","tlshash":"410112f7d35c81aef8274774de2079d4121e61dd7a280492a08c2e1e81222ff570ac90","first_seen":"2026-03-04T22:19:42.027866Z","last_seen":"2026-03-04T22:26:40.096127Z","times_seen":2,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusshield.com/images/solana.svg","fqdn":"exodusshield.com","domain":"exodusshield.com","tld":"com"},"ip":{"addr":"104.21.55.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodusshield.com/","date":"2026-03-04T22:19:15.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusshield.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 15:52:41 GMT","end":"Tue, 02 Jun 2026 15:52:40 GMT"},"fingerprint":{"sha1":"E0:D8:8F:0E:6A:FC:54:7C:F2:5E:7F:A4:27:72:60:CD:60:71:15:37","sha256":"E4:45:E6:17:81:4D:AF:5F:6C:2E:3A:87:2D:29:4C:E1:5F:35:F9:00:48:04:F3:82:B3:93:2A:6F:95:6B:E9:7B"}}},"request":{"raw":"GET /images/solana.svg HTTP/1.1\r\nHost: exodusshield.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusshield.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 22:19:15 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 641\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Mar 2026 22:19:15 GMT\r\nlast-modified: Tue, 17 Feb 2026 07:20:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OfGm%2FQQ6fasEIOez476UuFIc5weKud3bEdXWQMwB1QUZL%2F0QPH6jng%2BoC2qMg80JSHx5JqjcWTrd%2BdmLvJ4I0y9gOKyAqKmOPUk4xzNQeIQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d7442ed98b02382-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1654,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ec73c4186836a145e08229e8819bacab","sha1":"4b5cbb779838a2a7a063ae2e17372f99cd330e04","sha256":"14bf9719482e0f782f160f217aa9539b70cdc7ac02e6c7d67cdaff7477f82281","sha512":"8a6917ac33293048ff818c524c63be0418a4c18e742954b70ecfd01093e1c567485d634226998b74bb10dce4d6bffc3dd576cb007524ad55db11b7280a7dfd68","ssdeep":"","tlshash":"58311e5a83109cbfe1ed966ca8069c20306f26ffb2e5c1e1d419af1fed2c8c21208e50","first_seen":"2025-10-01T11:56:17.928185Z","last_seen":"2026-06-24T01:40:58.643484Z","times_seen":23,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusshield.com/images/SHIB.svg","fqdn":"exodusshield.com","domain":"exodusshield.com","tld":"com"},"ip":{"addr":"104.21.55.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodusshield.com/","date":"2026-03-04T22:19:15.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusshield.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 15:52:41 GMT","end":"Tue, 02 Jun 2026 15:52:40 GMT"},"fingerprint":{"sha1":"E0:D8:8F:0E:6A:FC:54:7C:F2:5E:7F:A4:27:72:60:CD:60:71:15:37","sha256":"E4:45:E6:17:81:4D:AF:5F:6C:2E:3A:87:2D:29:4C:E1:5F:35:F9:00:48:04:F3:82:B3:93:2A:6F:95:6B:E9:7B"}}},"request":{"raw":"GET /images/SHIB.svg HTTP/1.1\r\nHost: exodusshield.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusshield.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 22:19:15 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2892\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Mar 2026 22:19:15 GMT\r\nlast-modified: Tue, 17 Feb 2026 07:20:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jauoX%2BMDh%2FHjdwbjOII0uT2I%2B5krvcqqauzw%2BI8s3PPCEBJYO%2BengLjzPgVy2YgtLiIbyC8RW8V3lii8bZ6adzcYMbMilmBTxnQUHVhA8sM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d7442eda8b52382-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6454,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"db5bdae8c7e6552e0e337341e05194e8","sha1":"e880b54a025b7071977740d020232e32e8446a94","sha256":"8eb522b1dd1288d6798d739b23bbb0234f7064f2a0175d827fbf886f5c75c58e","sha512":"9fec5c401e38cbae3d09f8a23781825459a79d51e1f80160c770fc935e659b3f14f9640acd476e502e86abec2a615a01a60397afd22f5e19f0e9636f5e63f248","ssdeep":"192:RCfM9A+dHUPE2JlB4G5G+FnJKptenCr2kwFcwT9ZIJRRg:TdUPPng/ten22awnEg","tlshash":"fcd123ca51609398f8c9e65edbafee90000b60dbb1b594c26f9f574ce45f5c4fe08864","first_seen":"2025-10-01T11:56:18.233049Z","last_seen":"2026-06-24T01:40:58.645158Z","times_seen":23,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusshield.com/css/6c42503b3fad8ba0.css","fqdn":"exodusshield.com","domain":"exodusshield.com","tld":"com"},"ip":{"addr":"104.21.55.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exodusshield.com/","date":"2026-03-04T22:19:15.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusshield.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 15:52:41 GMT","end":"Tue, 02 Jun 2026 15:52:40 GMT"},"fingerprint":{"sha1":"E0:D8:8F:0E:6A:FC:54:7C:F2:5E:7F:A4:27:72:60:CD:60:71:15:37","sha256":"E4:45:E6:17:81:4D:AF:5F:6C:2E:3A:87:2D:29:4C:E1:5F:35:F9:00:48:04:F3:82:B3:93:2A:6F:95:6B:E9:7B"}}},"request":{"raw":"GET /css/6c42503b3fad8ba0.css HTTP/1.1\r\nHost: exodusshield.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusshield.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 22:19:15 GMT\r\ncontent-type: text/css\r\ncontent-length: 165\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 03 Apr 2026 22:19:15 GMT\r\nlast-modified: Tue, 17 Feb 2026 07:19:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fapOWjzwhIFof3FVvT5V%2BVAq02t4Ufj4MCw2w%2FQM9lyBk7xi%2BtC2gVi3cvb1JJ%2FddMpylHjMmIGqt4z5gQMGzOlDqdoFS25niS6Wad4vn8s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9d7442ed98aa2382-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":325,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (325), with no line terminators","md5":"4746e815ce5b53c2deb326f8e93d86ed","sha1":"4f38f6f7a8a906da529ca7a713f53b89b8300ead","sha256":"cec3a9c135e51fb1272f4dc0aac5bc6ddbc9c419e0b2b522d5a2a9fd72261d65","sha512":"7beb5df63c20b717f70d17eabb1b0c5807786ca4293718762113501515bb9de4af375fd2c711028911198d972f55f56447d89e3e5c7a9f76ae5f941c644fb415","ssdeep":"","tlshash":"3de02623920c1c12ce4ac3160a83221f9a75c8c8bd72c92c7340eec5c89162a146aea2","first_seen":"2025-06-19T15:13:23.428601Z","last_seen":"2026-07-31T14:42:20.026297Z","times_seen":100,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"exodusshield.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}