{"report_id":"db132842-6c55-4487-a947-3e71295ba1ed","version":6,"status":"done","tags":[],"date":"2026-02-10T16:30:16Z","url":{"schema":"http","addr":"exodusvault.com","fqdn":"exodusvault.com","domain":"exodusvault.com","tld":"com"},"ip":{"addr":"23.224.25.126","port":0,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"exodusvault.com/signin","fqdn":"exodusvault.com","domain":"exodusvault.com","tld":"com"},"title":"EXODUS","dom":{"size":11581,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (10690)","md5":"c427af8b63801dedd1e8cf51c423a567","sha1":"1ab2a41d5db239e443825f298f366d7ef2e3713b","sha256":"761f4b6a36569eff8afd893865ac085b7038b11b94fb6908c193e259fa757903","sha512":"84a9cb9c13642fce537ff8e65d444a2468b70487d8784d12ab0410bce0898b978e9459e75e6adf0fabf50f697076dabeff9a1c01e8f3c4d3239e6a94c19645df","ssdeep":"192:Zzj96l9K9upAnwKTEI2wDSO4qLpe7b2PfsZjbG3IZ7ltRAF2:BQtI2wDvnaqMHRu2","tlshash":"a732a6730c021d7643172de681bf7e9e69cd930acd839c84d7be83c54bdad5a88c65a8","dom_hash":"domhash59f87b99181028814974c309c13ad53a","first_seen":"2026-01-23T12:47:38.481703Z","last_seen":"2026-02-10T16:30:22.413479Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"exodusvault.com","fqdn":"exodusvault.com","domain":"exodusvault.com","tld":"com"},"ip":{"addr":"23.224.25.126","port":0,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-17T16:30:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"exodusvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"exodusvault.com","ip":{"addr":"23.224.25.126","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"domain_registered":"2026-02-09","domain_rank":0,"first_seen":"2026-02-10T16:20:03.558966Z","last_seen":"2026-02-10T16:20:03.558966Z","alert_count":20,"request_count":20,"received_data":5766272,"sent_data":9050,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-02-08T23:22:23.903795Z","alert_count":0,"request_count":8,"received_data":530104,"sent_data":3764,"comment":"","tags":null,"fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"exodusvault.com/common.eba656bd21ed870ceeb3.js","fqdn":"exodusvault.com","domain":"exodusvault.com","tld":"com"},"ip":{"addr":"23.224.25.126","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"011c96d8459121c3f0960b29553fe1f4","sha1":"7c7f1591ea3b6f8e341360eab8604a91c01f1297","sha256":"9c25bc3040cd6b06957321b23ddc441439d7ff8d1f2ce70efdd107811c2ea504","sha512":"51cc32e41ff00c79e3b7ac516379bd669dd43e202d061e9d9cc746b82bb3d18163d63d04c1b4f81bc60983c8160eaaf8dcb17883dedb5edc4a817adce6f54cab","ssdeep":"768:O/1tOuK8lCWErkmZOgzNn8stybUD/OCMumQ1HUG0qyU:i1Q8GkmtZnxybUDGCMzG0qyU","tlshash":"0393e8c8b0c2f09457eb6665413f550bf1bc6d69a86d9c10e25288f0bef69ed8133f29","size":96113,"data":"","first_seen":"2026-01-23T12:47:38.487804Z","last_seen":"2026-02-10T16:30:22.422122Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodusvault.com/common.eba656bd21ed870ceeb3.js","fqdn":"exodusvault.com","domain":"exodusvault.com","tld":"com"},"ip":{"addr":"23.224.25.126","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"011c96d8459121c3f0960b29553fe1f4","sha1":"7c7f1591ea3b6f8e341360eab8604a91c01f1297","sha256":"9c25bc3040cd6b06957321b23ddc441439d7ff8d1f2ce70efdd107811c2ea504","sha512":"51cc32e41ff00c79e3b7ac516379bd669dd43e202d061e9d9cc746b82bb3d18163d63d04c1b4f81bc60983c8160eaaf8dcb17883dedb5edc4a817adce6f54cab","ssdeep":"768:O/1tOuK8lCWErkmZOgzNn8stybUD/OCMumQ1HUG0qyU:i1Q8GkmtZnxybUDGCMzG0qyU","tlshash":"0393e8c8b0c2f09457eb6665413f550bf1bc6d69a86d9c10e25288f0bef69ed8133f29","size":96113,"data":"","first_seen":"2026-01-23T12:47:38.487804Z","last_seen":"2026-02-10T16:30:22.422122Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/react-dom@16/umd/react-dom.production.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5abc87541fe6bb0f43f22af475a8b20","sha1":"3400c2b2e82e89dc7a666197519b3fa88c25c384","sha256":"4949f4e1cff9e8a960b44c9a8be70bc4bb10216eb4d0123ca61753e0908a0f87","sha512":"252817844718b8fe2465f50c64767d22d59d2ae65834f6abd855a33c5e4ce852629146dc3192234f8a8a2991a0968558f83b106053e76b89862b9f60dbfb553f","ssdeep":"1536:SdnEfBUGQfXNd5LZRqB8CbQD6n0ztgB6sMNMjoviotzJtN4r:gnEPQltWb/nstgBCMcg","tlshash":"94c318e97952ea525af211a710df1407733c962bb40c48b1e141eedda8bc06da17ff8e","size":118656,"data":"","first_seen":"2023-03-07T01:10:10Z","last_seen":"2026-08-07T08:29:41.812933Z","times_seen":19551,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodusvault.com/29.eba656bd21ed870ceeb3.js","fqdn":"exodusvault.com","domain":"exodusvault.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"dcad1f6a9cb7b6576502057a6d0597a9","sha1":"393fbb526185d3b1a2104be9c37e1f4d11246490","sha256":"d1cd6d5c5ac1b332c12d5ebf2dba887f7cfb14c184acb7813b393cd49e0824fa","sha512":"bc2c50963f8a89f2dc3db5ffa5f9a5a09d2f11ad6af8f2dec8e0542503ab85bfbcdb906353d1c5af2f204a5147e0ae2ba0927329f2272ddea4b48f36ff3ec551","ssdeep":"","tlshash":"00311088b191f9f245d39256413fa307f0293924203af054f361d9f068b88df84b5f2b","size":1693,"data":"","first_seen":"2026-01-23T12:47:38.496366Z","last_seen":"2026-02-10T16:30:22.425246Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/react@16/umd/react.production.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"63d498e143f421cc44dfb64f22fef270","sha1":"1b4c8b769c3094cf499b3e7072c3776ef39ed02d","sha256":"5cef9367d2bcaba25b74d20e0e139d2cf900e9123e5fde26101aee7f40f6b5cf","sha512":"d98084b80f68e25f5b65de2fa58a3688632b8377c9ff6487acf3e7630a578887a007b8b4780ae82b2865476d23c4f5e19455cf60fcc8c9cd1eda94d6bf6792a4","ssdeep":"384:W97UMSCgItJCmeTfNQUlxwMmerA0NPYeF:agI4SKx7","tlshash":"1c42a5a4b492f0614b7338e2517f610fb23ded6ab84c8d70a191e9d479b41ad512bf0e","size":12463,"data":"","first_seen":"2023-03-07T01:10:10Z","last_seen":"2026-08-07T08:29:41.781379Z","times_seen":19570,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodusvault.com/app.eba656bd21ed870ceeb3.js","fqdn":"exodusvault.com","domain":"exodusvault.com","tld":"com"},"ip":{"addr":"23.224.25.126","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e4c7488d8607d833c97361b5b8407ac","sha1":"895cb17507631b40da72b461b5de43bd197ca126","sha256":"0fac89bd12ca87055aa3170c64543f432bb9a5693d14c873bd5162edc39ba535","sha512":"4ec36f51bf33270161863913794ff9502c3dad407ba2d35e51132878f0f04880ce1c0e321a0171b6167180f2169cef948d86edca17633ea883ee0b8148eb7a59","ssdeep":"12288:SwgxBRp9TuxOk7X23YnLFHl7s/xY3BByp8/OFGtu80FYFyWr+jADi1:SwYBRp9TVhiHm8/OFGtu80FYFyWr+jAm","tlshash":"24c4ae376d4e7aa017742fabd1bf2a0a741de9d2ac51cc44e86d4ec0496db5c318b3ac","size":547058,"data":"","first_seen":"2026-01-23T12:47:38.492933Z","last_seen":"2026-02-10T16:30:22.415624Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodusvault.com/vendor.eba656bd21ed870ceeb3.js","fqdn":"exodusvault.com","domain":"exodusvault.com","tld":"com"},"ip":{"addr":"23.224.25.126","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"08ab0697098616c5718ef9f1f178f3ca","sha1":"53ac63bba665694b3eb093402179a9950ec3b192","sha256":"4710a2da6b7d4799164867cb8461db26a7a3328766335f78e2e3127c4bb7f343","sha512":"ae63cac6f8550ab1ba7690da32174e62e547eb3c3a2e6f0a6887fc839aa0e16a5ce25aa1f1a80d590ec50931c4dadadb1e4744a3b06760c4f0c27ecfc96f23c2","ssdeep":"49152:QdrQoE7bEpHaXS/ScJC3g8VX2T0s8ojMWOm13PR9MwPmFxjpJ+oe9o:iiA6XSHC3g8VX2T0s8ojjo","tlshash":"b2753af97586b09603ab51e6402f191bfb396a27645ec420f166d8e67c78e4cc233f78","size":1664389,"data":"","first_seen":"2026-01-23T12:47:38.502209Z","last_seen":"2026-02-10T16:30:22.426014Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodusvault.com/Market.eba656bd21ed870ceeb3.js","fqdn":"exodusvault.com","domain":"exodusvault.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c54968d2e89352e05e75b6330fe641c","sha1":"e831332de994cec66957661c7ccd4c68e2373b7e","sha256":"5cc84abff9af1d168fb9f33beb35aff16378b8a5b90476bc6457df323da6ab80","sha512":"d117c7c53234bb3cea90985761cceb2c21138dc1d836a09dc27bb6db089bcfb3a2c2ec7848a34a26128b40cb9f84f078c5f9ea1e486c46a01aaa5d270b1a522c","ssdeep":"384:/5PGjx+zgi1j/eGsoFihOYqyTDX6T4xLutNrIDW0LSTsMelkcxySIP2ya:/5PZHj/eGsm5ODqaIkWI8sRlkcgBP1a","tlshash":"a003a559f442b0ac55f5154a823f4f06f3904aacd7ea0c50b379c8e8aaa5edc4537f2d","size":40380,"data":"","first_seen":"2026-01-23T12:47:38.491499Z","last_seen":"2026-02-10T16:30:22.426985Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/react-dom@16/umd/react-dom.production.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5abc87541fe6bb0f43f22af475a8b20","sha1":"3400c2b2e82e89dc7a666197519b3fa88c25c384","sha256":"4949f4e1cff9e8a960b44c9a8be70bc4bb10216eb4d0123ca61753e0908a0f87","sha512":"252817844718b8fe2465f50c64767d22d59d2ae65834f6abd855a33c5e4ce852629146dc3192234f8a8a2991a0968558f83b106053e76b89862b9f60dbfb553f","ssdeep":"1536:SdnEfBUGQfXNd5LZRqB8CbQD6n0ztgB6sMNMjoviotzJtN4r:gnEPQltWb/nstgBCMcg","tlshash":"94c318e97952ea525af211a710df1407733c962bb40c48b1e141eedda8bc06da17ff8e","size":118656,"data":"","first_seen":"2023-03-07T01:10:10Z","last_seen":"2026-08-07T08:29:41.812933Z","times_seen":19551,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodusvault.com/22.eba656bd21ed870ceeb3.js","fqdn":"exodusvault.com","domain":"exodusvault.com","tld":"com"},"ip":{"addr":"23.224.25.126","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d94f47f2dd8d97bda83d9ef0f8f7c145","sha1":"1fbfe194034e2a587e43e0500af2f1eebd1fa196","sha256":"292ead4e8a4deb0aef60ee5671471512c320bd3637ab1a454ccb33e5a07855e4","sha512":"14a7f01bb4e1b4b1bb9e29fdc371ee51166053425b10e64194b8e4e771ac95c772bd8b562c886ea27d72f75b5f4c3c92d3eaa574b1fdad581a7f93d3f06426d1","ssdeep":"","tlshash":"cd412188b540f9f68aa65252413f670bf1297521313bf050f361e4f069bc9ab8472f07","size":1891,"data":"","first_seen":"2026-01-23T12:47:38.498838Z","last_seen":"2026-02-10T16:30:22.42032Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodusvault.com/SignIn.eba656bd21ed870ceeb3.js","fqdn":"exodusvault.com","domain":"exodusvault.com","tld":"com"},"ip":{"addr":"23.224.25.126","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"94278d7535b0a3f30bc9d3696be115e0","sha1":"270f27aae4ef890c2f770543e38a7aa0dfb0ee33","sha256":"a39924f7c4f0cdacbfda14fbd16a0e38726ab214f46848f9eb0508618da7e975","sha512":"67c2c61f01522e7ce39ff29bf3f8c2bf9fac1af5e34fc5be021992b97189160eec5e92c1cf7768f1d2ffe7f0fa35506e4b4e9ab09dfbdbd4d10a31ba9e826230","ssdeep":"192:YwhXoqax+hs4vXWZBS62bEtyXNSXcBRnrRkYlRdhb5aKV2gT7nas98hqHl:Hh9ZtuZjlt8+c/r3RcKEe7as9rF","tlshash":"8c42da457041b43817e72a6a502b680ff2708a5e4ae57c11b379d6ad7ee9d8cc329f3c","size":12308,"data":"","first_seen":"2026-01-23T12:47:38.500579Z","last_seen":"2026-02-10T16:30:22.42087Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/react@16/umd/react.production.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"63d498e143f421cc44dfb64f22fef270","sha1":"1b4c8b769c3094cf499b3e7072c3776ef39ed02d","sha256":"5cef9367d2bcaba25b74d20e0e139d2cf900e9123e5fde26101aee7f40f6b5cf","sha512":"d98084b80f68e25f5b65de2fa58a3688632b8377c9ff6487acf3e7630a578887a007b8b4780ae82b2865476d23c4f5e19455cf60fcc8c9cd1eda94d6bf6792a4","ssdeep":"384:W97UMSCgItJCmeTfNQUlxwMmerA0NPYeF:agI4SKx7","tlshash":"1c42a5a4b492f0614b7338e2517f610fb23ded6ab84c8d70a191e9d479b41ad512bf0e","size":12463,"data":"","first_seen":"2023-03-07T01:10:10Z","last_seen":"2026-08-07T08:29:41.781379Z","times_seen":19570,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodusvault.com/app.eba656bd21ed870ceeb3.js","fqdn":"exodusvault.com","domain":"exodusvault.com","tld":"com"},"ip":{"addr":"23.224.25.126","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e4c7488d8607d833c97361b5b8407ac","sha1":"895cb17507631b40da72b461b5de43bd197ca126","sha256":"0fac89bd12ca87055aa3170c64543f432bb9a5693d14c873bd5162edc39ba535","sha512":"4ec36f51bf33270161863913794ff9502c3dad407ba2d35e51132878f0f04880ce1c0e321a0171b6167180f2169cef948d86edca17633ea883ee0b8148eb7a59","ssdeep":"12288:SwgxBRp9TuxOk7X23YnLFHl7s/xY3BByp8/OFGtu80FYFyWr+jADi1:SwYBRp9TVhiHm8/OFGtu80FYFyWr+jAm","tlshash":"24c4ae376d4e7aa017742fabd1bf2a0a741de9d2ac51cc44e86d4ec0496db5c318b3ac","size":547058,"data":"","first_seen":"2026-01-23T12:47:38.492933Z","last_seen":"2026-02-10T16:30:22.415624Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodusvault.com/vendor.eba656bd21ed870ceeb3.js","fqdn":"exodusvault.com","domain":"exodusvault.com","tld":"com"},"ip":{"addr":"23.224.25.126","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"08ab0697098616c5718ef9f1f178f3ca","sha1":"53ac63bba665694b3eb093402179a9950ec3b192","sha256":"4710a2da6b7d4799164867cb8461db26a7a3328766335f78e2e3127c4bb7f343","sha512":"ae63cac6f8550ab1ba7690da32174e62e547eb3c3a2e6f0a6887fc839aa0e16a5ce25aa1f1a80d590ec50931c4dadadb1e4744a3b06760c4f0c27ecfc96f23c2","ssdeep":"49152:QdrQoE7bEpHaXS/ScJC3g8VX2T0s8ojMWOm13PR9MwPmFxjpJ+oe9o:iiA6XSHC3g8VX2T0s8ojjo","tlshash":"b2753af97586b09603ab51e6402f191bfb396a27645ec420f166d8e67c78e4cc233f78","size":1664389,"data":"","first_seen":"2026-01-23T12:47:38.502209Z","last_seen":"2026-02-10T16:30:22.426014Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"exodusvault.com/SignIn.eba656bd21ed870ceeb3.css","fqdn":"exodusvault.com","domain":"exodusvault.com","tld":"com"},"ip":{"addr":"23.224.25.126","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exodusvault.com/signin","date":"2026-02-10T16:29:57.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusvault.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 06:34:34 GMT","end":"Sun, 10 May 2026 06:34:33 GMT"},"fingerprint":{"sha1":"DF:CB:DB:BE:7C:E6:47:D7:76:66:00:BA:B2:85:0D:EF:8E:0F:5D:39","sha256":"48:65:EE:F1:6D:1E:6B:5A:C6:22:41:84:3D:33:6C:77:A3:33:EC:DE:6F:11:E8:18:C0:4A:99:15:F9:60:C8:19"}}},"request":{"raw":"GET /SignIn.eba656bd21ed870ceeb3.css HTTP/1.1\r\nHost: exodusvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusvault.com/signin\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 10 Feb 2026 16:29:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 16 Jan 2026 06:30:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6969db1e-13d8\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5080,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5080), with no line terminators","md5":"f3a2425643dbfd34d6857091bd639e14","sha1":"b905ab9e26d26f67eb532068f7d61242bd6c3d26","sha256":"a5b3f1d9236752b3d64eb92197a60a404e7a3a51a76502b661ded030b3cf385e","sha512":"2d7bbbc8dba57f30d80e80d4392c9b681468d3256e18e48c1f9e540c6f643c98c5a0fc77e4b19aaffe60034ce7a9cd2c5617ff356a8ff4039c16dee1ce2035fb","ssdeep":"48:jq/arBQOJ2+2Fhppw2w9w2wrwzwbzwTwcw5wd5xOtqwdhWwdzobwdewd6hRwNRZp:jdazzyOth9iOtyylOinPsQUPpEBRDp","tlshash":"1fa102737803643953367f2ae092ec4b6121cc2e96d2bd4d376ef74346dac510e3a96a","first_seen":"2026-01-23T12:47:38.494582Z","last_seen":"2026-02-10T16:30:22.41473Z","times_seen":4,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"exodusvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusvault.com/app.eba656bd21ed870ceeb3.js","fqdn":"exodusvault.com","domain":"exodusvault.com","tld":"com"},"ip":{"addr":"23.224.25.126","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exodusvault.com/","date":"2026-02-10T16:29:55.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusvault.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 06:34:34 GMT","end":"Sun, 10 May 2026 06:34:33 GMT"},"fingerprint":{"sha1":"DF:CB:DB:BE:7C:E6:47:D7:76:66:00:BA:B2:85:0D:EF:8E:0F:5D:39","sha256":"48:65:EE:F1:6D:1E:6B:5A:C6:22:41:84:3D:33:6C:77:A3:33:EC:DE:6F:11:E8:18:C0:4A:99:15:F9:60:C8:19"}}},"request":{"raw":"GET /app.eba656bd21ed870ceeb3.js HTTP/1.1\r\nHost: exodusvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusvault.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 10 Feb 2026 16:29:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 06:30:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6969db1e-858f2\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":547058,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65519), with no line terminators","md5":"9e4c7488d8607d833c97361b5b8407ac","sha1":"895cb17507631b40da72b461b5de43bd197ca126","sha256":"0fac89bd12ca87055aa3170c64543f432bb9a5693d14c873bd5162edc39ba535","sha512":"4ec36f51bf33270161863913794ff9502c3dad407ba2d35e51132878f0f04880ce1c0e321a0171b6167180f2169cef948d86edca17633ea883ee0b8148eb7a59","ssdeep":"12288:SwgxBRp9TuxOk7X23YnLFHl7s/xY3BByp8/OFGtu80FYFyWr+jADi1:SwYBRp9TVhiHm8/OFGtu80FYFyWr+jAm","tlshash":"24c4ae376d4e7aa017742fabd1bf2a0a741de9d2ac51cc44e86d4ec0496db5c318b3ac","first_seen":"2026-01-23T12:47:38.492933Z","last_seen":"2026-02-10T16:30:22.415624Z","times_seen":4,"resource_available":true,"data":null}},"time_used":624,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":624,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"exodusvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/react@16.14.0/umd/react.production.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exodusvault.com/","date":"2026-02-10T16:29:55.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /react@16.14.0/umd/react.production.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://exodusvault.com\r\nReferer: https://exodusvault.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 10 Feb 2026 16:29:55 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9cbcfcf49e92723c-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 616\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 10 Feb 2027 16:29:55 GMT\r\nlast-modified: Tue, 23 Dec 2025 00:25:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:XO+TZ9K8q6JbdNIODhOdLPkA6RI+X94mEBruf0D2tc8=:\r\nfly-request-id: 01KD49J6XT0NY00MJXKZDMRSKX-fra\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12463,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (574)","md5":"63d498e143f421cc44dfb64f22fef270","sha1":"1b4c8b769c3094cf499b3e7072c3776ef39ed02d","sha256":"5cef9367d2bcaba25b74d20e0e139d2cf900e9123e5fde26101aee7f40f6b5cf","sha512":"d98084b80f68e25f5b65de2fa58a3688632b8377c9ff6487acf3e7630a578887a007b8b4780ae82b2865476d23c4f5e19455cf60fcc8c9cd1eda94d6bf6792a4","ssdeep":"384:W97UMSCgItJCmeTfNQUlxwMmerA0NPYeF:agI4SKx7","tlshash":"1c42a5a4b492f0614b7338e2517f610fb23ded6ab84c8d70a191e9d479b41ad512bf0e","first_seen":"2023-03-07T01:10:10Z","last_seen":"2026-08-07T08:29:41.781379Z","times_seen":19570,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodusvault.com/80a34075b43fc1d48913da08e22fc6a6.png","fqdn":"exodusvault.com","domain":"exodusvault.com","tld":"com"},"ip":{"addr":"23.224.25.126","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodusvault.com/","date":"2026-02-10T16:29:56.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusvault.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 06:34:34 GMT","end":"Sun, 10 May 2026 06:34:33 GMT"},"fingerprint":{"sha1":"DF:CB:DB:BE:7C:E6:47:D7:76:66:00:BA:B2:85:0D:EF:8E:0F:5D:39","sha256":"48:65:EE:F1:6D:1E:6B:5A:C6:22:41:84:3D:33:6C:77:A3:33:EC:DE:6F:11:E8:18:C0:4A:99:15:F9:60:C8:19"}}},"request":{"raw":"GET /80a34075b43fc1d48913da08e22fc6a6.png HTTP/1.1\r\nHost: exodusvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusvault.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 10 Feb 2026 16:29:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 11453\r\nlast-modified: Fri, 16 Jan 2026 06:30:54 GMT\r\netag: \"6969db1e-2cbd\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11453,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"80a34075b43fc1d48913da08e22fc6a6","sha1":"ce03c20fbbe700c609e98a85acb3986576dd3072","sha256":"66831eacd7d07a8221cce9636c568439713db9a76c21084d91518c308d1fc81f","sha512":"9fde43e076c80463b2664bf2015a4ddbbe03e0f509f821e9fc61d3f486204bc11a7c53244271fa8b30a87dfbc77b8724a20a29682d8fe4e20d2ea7026eeeb41f","ssdeep":"192:vxxk81OWxuWh3XKFuHldW0brHMBifNj/RebsJUWTEFXg0:vxxk81OWl360HlJrNLwsJFIFw0","tlshash":"5032d0e391c1633fd36656a6a4acf46b60c0bc8fe49cdd80024a34b75f0461ad8d2fd5","first_seen":"2026-01-14T20:50:26.068803Z","last_seen":"2026-02-10T16:30:22.416958Z","times_seen":7,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":157,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"exodusvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusvault.com/signin","fqdn":"exodusvault.com","domain":"exodusvault.com","tld":"com"},"ip":{"addr":"23.224.25.126","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-10T16:29:56.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusvault.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 06:34:34 GMT","end":"Sun, 10 May 2026 06:34:33 GMT"},"fingerprint":{"sha1":"DF:CB:DB:BE:7C:E6:47:D7:76:66:00:BA:B2:85:0D:EF:8E:0F:5D:39","sha256":"48:65:EE:F1:6D:1E:6B:5A:C6:22:41:84:3D:33:6C:77:A3:33:EC:DE:6F:11:E8:18:C0:4A:99:15:F9:60:C8:19"}}},"request":{"raw":"GET /signin HTTP/1.1\r\nHost: exodusvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusvault.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 10 Feb 2026 16:29:56 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 16 Jan 2026 06:30:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6969db1e-569\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1385,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (485)","md5":"69f189699e87301a9a1c24ba4529b0b9","sha1":"1d700b3b74efa6c330687c0a026b17a7f2f0c5e0","sha256":"ad62af859255dc840f5ed4d362fb0cd6337899c519287d713743afb0c61b4593","sha512":"3d35508e40d68446860500411a2c888931c7097a0dc54b914a2eea2d0580db6c37d573ec7d15b7d6271f50edf551bb05e7639c7d5d8fb6719830903a46bbc3af","ssdeep":"","tlshash":"5421239f9c10e85d961347e7e4f3f82cb4a93a0c9618dcd0a5da482d1e5cfcd4d26d98","first_seen":"2026-01-23T12:47:38.483668Z","last_seen":"2026-02-10T16:30:22.417703Z","times_seen":4,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"exodusvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/react-dom@16/umd/react-dom.production.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exodusvault.com/","date":"2026-02-10T16:29:55.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /react-dom@16/umd/react-dom.production.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://exodusvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusvault.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 10 Feb 2026 16:29:55 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 65\r\ncf-ray: 9cbcfcf41ce8723c-OSL\r\nlocation: /react-dom@16.14.0/umd/react-dom.production.min.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":118656,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T15:07:13.570573Z","times_seen":17763367,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":20,"dns":2,"connect":1,"send":0,"wait":155,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/react-dom@16.14.0/umd/react-dom.production.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exodusvault.com/","date":"2026-02-10T16:29:55.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /react-dom@16.14.0/umd/react-dom.production.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://exodusvault.com\r\nReferer: https://exodusvault.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 10 Feb 2026 16:29:55 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9cbcfcf51ffa723c-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 616\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 10 Feb 2027 16:29:55 GMT\r\nlast-modified: Wed, 04 Feb 2026 17:27:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:SUn04c/56KlgtEyai+cLxLsQIW600BI8phdT4JCKD4c=:\r\nfly-request-id: 01KGMV40K0X1PMK30A2VEWS9ET-arn\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118656,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (682)","md5":"c5abc87541fe6bb0f43f22af475a8b20","sha1":"3400c2b2e82e89dc7a666197519b3fa88c25c384","sha256":"4949f4e1cff9e8a960b44c9a8be70bc4bb10216eb4d0123ca61753e0908a0f87","sha512":"252817844718b8fe2465f50c64767d22d59d2ae65834f6abd855a33c5e4ce852629146dc3192234f8a8a2991a0968558f83b106053e76b89862b9f60dbfb553f","ssdeep":"1536:SdnEfBUGQfXNd5LZRqB8CbQD6n0ztgB6sMNMjoviotzJtN4r:gnEPQltWb/nstgBCMcg","tlshash":"94c318e97952ea525af211a710df1407733c962bb40c48b1e141eedda8bc06da17ff8e","first_seen":"2023-03-07T01:10:10Z","last_seen":"2026-08-07T08:29:41.812933Z","times_seen":19551,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodusvault.com/app.eba656bd21ed870ceeb3.css","fqdn":"exodusvault.com","domain":"exodusvault.com","tld":"com"},"ip":{"addr":"23.224.25.126","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exodusvault.com/signin","date":"2026-02-10T16:29:56.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusvault.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 06:34:34 GMT","end":"Sun, 10 May 2026 06:34:33 GMT"},"fingerprint":{"sha1":"DF:CB:DB:BE:7C:E6:47:D7:76:66:00:BA:B2:85:0D:EF:8E:0F:5D:39","sha256":"48:65:EE:F1:6D:1E:6B:5A:C6:22:41:84:3D:33:6C:77:A3:33:EC:DE:6F:11:E8:18:C0:4A:99:15:F9:60:C8:19"}}},"request":{"raw":"GET /app.eba656bd21ed870ceeb3.css HTTP/1.1\r\nHost: exodusvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusvault.com/signin\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 10 Feb 2026 16:29:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 16 Jan 2026 06:30:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6969db1e-6b99\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27545,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27545), with no line terminators","md5":"2b40d7f923e7aa4653f28a01fe349c16","sha1":"78afb3cf394adf613299c6fd4a2a69c3ae10601b","sha256":"bac4607df57b5a8fbc1b55ae11cb98bb567fade9fc80ab3d5e581c8d6036f6a1","sha512":"1f83832d9d13d5f84e2b655540ab59121ac71fe3a0d15fd7ffd3f2e535a4970a7c33311aa49fa2db4316130c1b711e84175b669741303e4e0d7bb90e4276f658","ssdeep":"384:0ax/cEbfrwqn1WRzlb9+QwqYRjP+uYj6Zp/Zv8ExF9fF/toewWv:xd+66lbcQwHRjP+ujzUExbFFos","tlshash":"cdc2a7355a19382965b92cbbd3b73ccf2584d392cca782c4f55f18eacafb50e110a5d8","first_seen":"2026-01-14T20:50:26.059383Z","last_seen":"2026-02-10T16:30:22.419224Z","times_seen":7,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"exodusvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusvault.com/app.eba656bd21ed870ceeb3.js","fqdn":"exodusvault.com","domain":"exodusvault.com","tld":"com"},"ip":{"addr":"23.224.25.126","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exodusvault.com/signin","date":"2026-02-10T16:29:56.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusvault.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 06:34:34 GMT","end":"Sun, 10 May 2026 06:34:33 GMT"},"fingerprint":{"sha1":"DF:CB:DB:BE:7C:E6:47:D7:76:66:00:BA:B2:85:0D:EF:8E:0F:5D:39","sha256":"48:65:EE:F1:6D:1E:6B:5A:C6:22:41:84:3D:33:6C:77:A3:33:EC:DE:6F:11:E8:18:C0:4A:99:15:F9:60:C8:19"}}},"request":{"raw":"GET /app.eba656bd21ed870ceeb3.js HTTP/1.1\r\nHost: exodusvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusvault.com/signin\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 10 Feb 2026 16:29:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 06:30:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6969db1e-858f2\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":547058,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65519), with no line terminators","md5":"9e4c7488d8607d833c97361b5b8407ac","sha1":"895cb17507631b40da72b461b5de43bd197ca126","sha256":"0fac89bd12ca87055aa3170c64543f432bb9a5693d14c873bd5162edc39ba535","sha512":"4ec36f51bf33270161863913794ff9502c3dad407ba2d35e51132878f0f04880ce1c0e321a0171b6167180f2169cef948d86edca17633ea883ee0b8148eb7a59","ssdeep":"12288:SwgxBRp9TuxOk7X23YnLFHl7s/xY3BByp8/OFGtu80FYFyWr+jADi1:SwYBRp9TVhiHm8/OFGtu80FYFyWr+jAm","tlshash":"24c4ae376d4e7aa017742fabd1bf2a0a741de9d2ac51cc44e86d4ec0496db5c318b3ac","first_seen":"2026-01-23T12:47:38.492933Z","last_seen":"2026-02-10T16:30:22.415624Z","times_seen":4,"resource_available":true,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"exodusvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusvault.com/vendor.eba656bd21ed870ceeb3.css","fqdn":"exodusvault.com","domain":"exodusvault.com","tld":"com"},"ip":{"addr":"23.224.25.126","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exodusvault.com/","date":"2026-02-10T16:29:55.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusvault.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 06:34:34 GMT","end":"Sun, 10 May 2026 06:34:33 GMT"},"fingerprint":{"sha1":"DF:CB:DB:BE:7C:E6:47:D7:76:66:00:BA:B2:85:0D:EF:8E:0F:5D:39","sha256":"48:65:EE:F1:6D:1E:6B:5A:C6:22:41:84:3D:33:6C:77:A3:33:EC:DE:6F:11:E8:18:C0:4A:99:15:F9:60:C8:19"}}},"request":{"raw":"GET /vendor.eba656bd21ed870ceeb3.css HTTP/1.1\r\nHost: exodusvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusvault.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 10 Feb 2026 16:29:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 16 Jan 2026 06:30:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6969db1e-884d8\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":558296,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65433)","md5":"0b2c69b7d9879697631da514796c2270","sha1":"341e90a5637f7fa3865b58968af8b629a24aa6be","sha256":"d5b1e8335beffa726d5c5e27034c1e9ac481eafeb1fe70a552fe1e464aedbbba","sha512":"08e224225f6710f36bffbceb8745f5b25753454c3194b972a45db257300f1964c00d94fb222c4cdb8cd9abf82e7fad82e1e262abd002691c4a7bd5cfabe8ec41","ssdeep":"6144:3KcRlJyjJzsDNaQ0yLGlQoguiK0orZ/Pa8cta:3x8OI","tlshash":"20c4b8586b41206ed1ebc33b64e0f9695d318903d67f8a6ff3f17a184f4968e41a3e06","first_seen":"2026-01-14T20:50:26.063114Z","last_seen":"2026-02-10T16:30:22.419815Z","times_seen":7,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"exodusvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/react-dom@16/umd/react-dom.production.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exodusvault.com/signin","date":"2026-02-10T16:29:56.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /react-dom@16/umd/react-dom.production.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://exodusvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusvault.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Tue, 10 Feb 2026 16:29:57 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 65\r\ncf-ray: 9cbcfcfebc0fa0f0-OSL\r\nlocation: /react-dom@16.14.0/umd/react-dom.production.min.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":118656,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T15:07:13.570573Z","times_seen":17763367,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodusvault.com/vendor.eba656bd21ed870ceeb3.css","fqdn":"exodusvault.com","domain":"exodusvault.com","tld":"com"},"ip":{"addr":"23.224.25.126","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exodusvault.com/signin","date":"2026-02-10T16:29:56.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusvault.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 06:34:34 GMT","end":"Sun, 10 May 2026 06:34:33 GMT"},"fingerprint":{"sha1":"DF:CB:DB:BE:7C:E6:47:D7:76:66:00:BA:B2:85:0D:EF:8E:0F:5D:39","sha256":"48:65:EE:F1:6D:1E:6B:5A:C6:22:41:84:3D:33:6C:77:A3:33:EC:DE:6F:11:E8:18:C0:4A:99:15:F9:60:C8:19"}}},"request":{"raw":"GET /vendor.eba656bd21ed870ceeb3.css HTTP/1.1\r\nHost: exodusvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusvault.com/signin\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 10 Feb 2026 16:29:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 16 Jan 2026 06:30:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6969db1e-884d8\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":558296,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65433)","md5":"0b2c69b7d9879697631da514796c2270","sha1":"341e90a5637f7fa3865b58968af8b629a24aa6be","sha256":"d5b1e8335beffa726d5c5e27034c1e9ac481eafeb1fe70a552fe1e464aedbbba","sha512":"08e224225f6710f36bffbceb8745f5b25753454c3194b972a45db257300f1964c00d94fb222c4cdb8cd9abf82e7fad82e1e262abd002691c4a7bd5cfabe8ec41","ssdeep":"6144:3KcRlJyjJzsDNaQ0yLGlQoguiK0orZ/Pa8cta:3x8OI","tlshash":"20c4b8586b41206ed1ebc33b64e0f9695d318903d67f8a6ff3f17a184f4968e41a3e06","first_seen":"2026-01-14T20:50:26.063114Z","last_seen":"2026-02-10T16:30:22.419815Z","times_seen":7,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"exodusvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/react-dom@16.14.0/umd/react-dom.production.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exodusvault.com/signin","date":"2026-02-10T16:29:57.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /react-dom@16.14.0/umd/react-dom.production.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://exodusvault.com\r\nReferer: https://exodusvault.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Feb 2026 16:29:57 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9cbcfd002ffea0f0-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 618\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 10 Feb 2027 16:29:57 GMT\r\nlast-modified: Wed, 04 Feb 2026 17:27:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:SUn04c/56KlgtEyai+cLxLsQIW600BI8phdT4JCKD4c=:\r\nfly-request-id: 01KGMV40K0X1PMK30A2VEWS9ET-arn\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":118656,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (682)","md5":"c5abc87541fe6bb0f43f22af475a8b20","sha1":"3400c2b2e82e89dc7a666197519b3fa88c25c384","sha256":"4949f4e1cff9e8a960b44c9a8be70bc4bb10216eb4d0123ca61753e0908a0f87","sha512":"252817844718b8fe2465f50c64767d22d59d2ae65834f6abd855a33c5e4ce852629146dc3192234f8a8a2991a0968558f83b106053e76b89862b9f60dbfb553f","ssdeep":"1536:SdnEfBUGQfXNd5LZRqB8CbQD6n0ztgB6sMNMjoviotzJtN4r:gnEPQltWb/nstgBCMcg","tlshash":"94c318e97952ea525af211a710df1407733c962bb40c48b1e141eedda8bc06da17ff8e","first_seen":"2023-03-07T01:10:10Z","last_seen":"2026-08-07T08:29:41.812933Z","times_seen":19551,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodusvault.com/22.eba656bd21ed870ceeb3.js","fqdn":"exodusvault.com","domain":"exodusvault.com","tld":"com"},"ip":{"addr":"23.224.25.126","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exodusvault.com/signin","date":"2026-02-10T16:29:57.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusvault.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 06:34:34 GMT","end":"Sun, 10 May 2026 06:34:33 GMT"},"fingerprint":{"sha1":"DF:CB:DB:BE:7C:E6:47:D7:76:66:00:BA:B2:85:0D:EF:8E:0F:5D:39","sha256":"48:65:EE:F1:6D:1E:6B:5A:C6:22:41:84:3D:33:6C:77:A3:33:EC:DE:6F:11:E8:18:C0:4A:99:15:F9:60:C8:19"}}},"request":{"raw":"GET /22.eba656bd21ed870ceeb3.js HTTP/1.1\r\nHost: exodusvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusvault.com/signin\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 10 Feb 2026 16:29:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 06:30:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6969db1e-763\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1891,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1839)","md5":"d94f47f2dd8d97bda83d9ef0f8f7c145","sha1":"1fbfe194034e2a587e43e0500af2f1eebd1fa196","sha256":"292ead4e8a4deb0aef60ee5671471512c320bd3637ab1a454ccb33e5a07855e4","sha512":"14a7f01bb4e1b4b1bb9e29fdc371ee51166053425b10e64194b8e4e771ac95c772bd8b562c886ea27d72f75b5f4c3c92d3eaa574b1fdad581a7f93d3f06426d1","ssdeep":"","tlshash":"cd412188b540f9f68aa65252413f670bf1297521313bf050f361e4f069bc9ab8472f07","first_seen":"2026-01-23T12:47:38.498838Z","last_seen":"2026-02-10T16:30:22.42032Z","times_seen":4,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"exodusvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusvault.com/SignIn.eba656bd21ed870ceeb3.js","fqdn":"exodusvault.com","domain":"exodusvault.com","tld":"com"},"ip":{"addr":"23.224.25.126","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exodusvault.com/signin","date":"2026-02-10T16:29:57.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusvault.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 06:34:34 GMT","end":"Sun, 10 May 2026 06:34:33 GMT"},"fingerprint":{"sha1":"DF:CB:DB:BE:7C:E6:47:D7:76:66:00:BA:B2:85:0D:EF:8E:0F:5D:39","sha256":"48:65:EE:F1:6D:1E:6B:5A:C6:22:41:84:3D:33:6C:77:A3:33:EC:DE:6F:11:E8:18:C0:4A:99:15:F9:60:C8:19"}}},"request":{"raw":"GET /SignIn.eba656bd21ed870ceeb3.js HTTP/1.1\r\nHost: exodusvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusvault.com/signin\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 10 Feb 2026 16:29:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 06:30:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6969db1e-3014\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12308,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11554)","md5":"94278d7535b0a3f30bc9d3696be115e0","sha1":"270f27aae4ef890c2f770543e38a7aa0dfb0ee33","sha256":"a39924f7c4f0cdacbfda14fbd16a0e38726ab214f46848f9eb0508618da7e975","sha512":"67c2c61f01522e7ce39ff29bf3f8c2bf9fac1af5e34fc5be021992b97189160eec5e92c1cf7768f1d2ffe7f0fa35506e4b4e9ab09dfbdbd4d10a31ba9e826230","ssdeep":"192:YwhXoqax+hs4vXWZBS62bEtyXNSXcBRnrRkYlRdhb5aKV2gT7nas98hqHl:Hh9ZtuZjlt8+c/r3RcKEe7as9rF","tlshash":"8c42da457041b43817e72a6a502b680ff2708a5e4ae57c11b379d6ad7ee9d8cc329f3c","first_seen":"2026-01-23T12:47:38.500579Z","last_seen":"2026-02-10T16:30:22.42087Z","times_seen":4,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"exodusvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusvault.com/favicon.ico","fqdn":"exodusvault.com","domain":"exodusvault.com","tld":"com"},"ip":{"addr":"23.224.25.126","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodusvault.com/signin","date":"2026-02-10T16:29:57.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusvault.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 06:34:34 GMT","end":"Sun, 10 May 2026 06:34:33 GMT"},"fingerprint":{"sha1":"DF:CB:DB:BE:7C:E6:47:D7:76:66:00:BA:B2:85:0D:EF:8E:0F:5D:39","sha256":"48:65:EE:F1:6D:1E:6B:5A:C6:22:41:84:3D:33:6C:77:A3:33:EC:DE:6F:11:E8:18:C0:4A:99:15:F9:60:C8:19"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: exodusvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusvault.com/signin\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 10 Feb 2026 16:29:57 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15406\r\nlast-modified: Fri, 16 Jan 2026 06:30:54 GMT\r\netag: \"6969db1e-3c2e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"736687263ce8498bf71a5a78dabc6742","sha1":"2c68d37591345d9661c7ad6030c65f3a42942155","sha256":"3fbb53da16c19c3f81af5aacf02a927621479b4e53e0c2d274ca5c89de1dfa34","sha512":"5a468142d66af64c5bce2d4ad48857518045974e7fb8d9636214c5054c8cdf466054162585bc49bc61ce41049427cc4ffd0be8abb3ef9af177c52a2774a3bffb","ssdeep":"192:isyBkbDi1WigRB50J2KAD41LahKKKKKKKvH2wUMYAmiHYpq7LcY:vIgPPWJznh1H2APH6qvcY","tlshash":"a7621a1a7d46a59eceb016312227e7c65fb6587ee9a10483dbdcaf3b500f81e9877007","first_seen":"2026-01-14T20:50:26.061411Z","last_seen":"2026-02-10T16:30:22.421517Z","times_seen":7,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":157,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"exodusvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusvault.com/","fqdn":"exodusvault.com","domain":"exodusvault.com","tld":"com"},"ip":{"addr":"23.224.25.126","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-10T16:29:54.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusvault.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 06:34:34 GMT","end":"Sun, 10 May 2026 06:34:33 GMT"},"fingerprint":{"sha1":"DF:CB:DB:BE:7C:E6:47:D7:76:66:00:BA:B2:85:0D:EF:8E:0F:5D:39","sha256":"48:65:EE:F1:6D:1E:6B:5A:C6:22:41:84:3D:33:6C:77:A3:33:EC:DE:6F:11:E8:18:C0:4A:99:15:F9:60:C8:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: exodusvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 10 Feb 2026 16:29:54 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 16 Jan 2026 06:30:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6969db1e-569\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}],"data":{"size":1385,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (485)","md5":"69f189699e87301a9a1c24ba4529b0b9","sha1":"1d700b3b74efa6c330687c0a026b17a7f2f0c5e0","sha256":"ad62af859255dc840f5ed4d362fb0cd6337899c519287d713743afb0c61b4593","sha512":"3d35508e40d68446860500411a2c888931c7097a0dc54b914a2eea2d0580db6c37d573ec7d15b7d6271f50edf551bb05e7639c7d5d8fb6719830903a46bbc3af","ssdeep":"","tlshash":"5421239f9c10e85d961347e7e4f3f82cb4a93a0c9618dcd0a5da482d1e5cfcd4d26d98","first_seen":"2026-01-23T12:47:38.483668Z","last_seen":"2026-02-10T16:30:22.417703Z","times_seen":4,"resource_available":false,"data":null}},"time_used":797,"timings":{"blocked":321,"dns":1,"connect":155,"send":0,"wait":155,"receive":0,"ssl":163},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"exodusvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusvault.com/app.eba656bd21ed870ceeb3.css","fqdn":"exodusvault.com","domain":"exodusvault.com","tld":"com"},"ip":{"addr":"23.224.25.126","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exodusvault.com/","date":"2026-02-10T16:29:55.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusvault.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 06:34:34 GMT","end":"Sun, 10 May 2026 06:34:33 GMT"},"fingerprint":{"sha1":"DF:CB:DB:BE:7C:E6:47:D7:76:66:00:BA:B2:85:0D:EF:8E:0F:5D:39","sha256":"48:65:EE:F1:6D:1E:6B:5A:C6:22:41:84:3D:33:6C:77:A3:33:EC:DE:6F:11:E8:18:C0:4A:99:15:F9:60:C8:19"}}},"request":{"raw":"GET /app.eba656bd21ed870ceeb3.css HTTP/1.1\r\nHost: exodusvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusvault.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 10 Feb 2026 16:29:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 16 Jan 2026 06:30:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6969db1e-6b99\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27545,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27545), with no line terminators","md5":"2b40d7f923e7aa4653f28a01fe349c16","sha1":"78afb3cf394adf613299c6fd4a2a69c3ae10601b","sha256":"bac4607df57b5a8fbc1b55ae11cb98bb567fade9fc80ab3d5e581c8d6036f6a1","sha512":"1f83832d9d13d5f84e2b655540ab59121ac71fe3a0d15fd7ffd3f2e535a4970a7c33311aa49fa2db4316130c1b711e84175b669741303e4e0d7bb90e4276f658","ssdeep":"384:0ax/cEbfrwqn1WRzlb9+QwqYRjP+uYj6Zp/Zv8ExF9fF/toewWv:xd+66lbcQwHRjP+ujzUExbFFos","tlshash":"cdc2a7355a19382965b92cbbd3b73ccf2584d392cca782c4f55f18eacafb50e110a5d8","first_seen":"2026-01-14T20:50:26.059383Z","last_seen":"2026-02-10T16:30:22.419224Z","times_seen":7,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":478,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"exodusvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusvault.com/80a34075b43fc1d48913da08e22fc6a6.png","fqdn":"exodusvault.com","domain":"exodusvault.com","tld":"com"},"ip":{"addr":"23.224.25.126","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodusvault.com/signin","date":"2026-02-10T16:29:57.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusvault.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 06:34:34 GMT","end":"Sun, 10 May 2026 06:34:33 GMT"},"fingerprint":{"sha1":"DF:CB:DB:BE:7C:E6:47:D7:76:66:00:BA:B2:85:0D:EF:8E:0F:5D:39","sha256":"48:65:EE:F1:6D:1E:6B:5A:C6:22:41:84:3D:33:6C:77:A3:33:EC:DE:6F:11:E8:18:C0:4A:99:15:F9:60:C8:19"}}},"request":{"raw":"GET /80a34075b43fc1d48913da08e22fc6a6.png HTTP/1.1\r\nHost: exodusvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusvault.com/signin\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 10 Feb 2026 16:29:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 11453\r\nlast-modified: Fri, 16 Jan 2026 06:30:54 GMT\r\netag: \"6969db1e-2cbd\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11453,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"80a34075b43fc1d48913da08e22fc6a6","sha1":"ce03c20fbbe700c609e98a85acb3986576dd3072","sha256":"66831eacd7d07a8221cce9636c568439713db9a76c21084d91518c308d1fc81f","sha512":"9fde43e076c80463b2664bf2015a4ddbbe03e0f509f821e9fc61d3f486204bc11a7c53244271fa8b30a87dfbc77b8724a20a29682d8fe4e20d2ea7026eeeb41f","ssdeep":"192:vxxk81OWxuWh3XKFuHldW0brHMBifNj/RebsJUWTEFXg0:vxxk81OWl360HlJrNLwsJFIFw0","tlshash":"5032d0e391c1633fd36656a6a4acf46b60c0bc8fe49cdd80024a34b75f0461ad8d2fd5","first_seen":"2026-01-14T20:50:26.068803Z","last_seen":"2026-02-10T16:30:22.416958Z","times_seen":7,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":156,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"exodusvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/react@16/umd/react.production.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exodusvault.com/","date":"2026-02-10T16:29:55.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /react@16/umd/react.production.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://exodusvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusvault.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 10 Feb 2026 16:29:55 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 57\r\ncf-ray: 9cbcfcf40cdb723c-OSL\r\nlocation: /react@16.14.0/umd/react.production.min.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12463,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T15:07:13.570573Z","times_seen":17763367,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":19,"dns":1,"connect":1,"send":0,"wait":83,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/react@16.14.0/umd/react.production.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exodusvault.com/signin","date":"2026-02-10T16:29:57.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /react@16.14.0/umd/react.production.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://exodusvault.com\r\nReferer: https://exodusvault.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Feb 2026 16:29:57 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9cbcfcff7e23a0f0-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 618\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 10 Feb 2027 16:29:57 GMT\r\nlast-modified: Tue, 23 Dec 2025 00:25:52 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:XO+TZ9K8q6JbdNIODhOdLPkA6RI+X94mEBruf0D2tc8=:\r\nfly-request-id: 01KD49J6XT0NY00MJXKZDMRSKX-fra\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12463,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (574)","md5":"63d498e143f421cc44dfb64f22fef270","sha1":"1b4c8b769c3094cf499b3e7072c3776ef39ed02d","sha256":"5cef9367d2bcaba25b74d20e0e139d2cf900e9123e5fde26101aee7f40f6b5cf","sha512":"d98084b80f68e25f5b65de2fa58a3688632b8377c9ff6487acf3e7630a578887a007b8b4780ae82b2865476d23c4f5e19455cf60fcc8c9cd1eda94d6bf6792a4","ssdeep":"384:W97UMSCgItJCmeTfNQUlxwMmerA0NPYeF:agI4SKx7","tlshash":"1c42a5a4b492f0614b7338e2517f610fb23ded6ab84c8d70a191e9d479b41ad512bf0e","first_seen":"2023-03-07T01:10:10Z","last_seen":"2026-08-07T08:29:41.781379Z","times_seen":19570,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodusvault.com/common.eba656bd21ed870ceeb3.js","fqdn":"exodusvault.com","domain":"exodusvault.com","tld":"com"},"ip":{"addr":"23.224.25.126","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exodusvault.com/signin","date":"2026-02-10T16:29:57.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusvault.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 06:34:34 GMT","end":"Sun, 10 May 2026 06:34:33 GMT"},"fingerprint":{"sha1":"DF:CB:DB:BE:7C:E6:47:D7:76:66:00:BA:B2:85:0D:EF:8E:0F:5D:39","sha256":"48:65:EE:F1:6D:1E:6B:5A:C6:22:41:84:3D:33:6C:77:A3:33:EC:DE:6F:11:E8:18:C0:4A:99:15:F9:60:C8:19"}}},"request":{"raw":"GET /common.eba656bd21ed870ceeb3.js HTTP/1.1\r\nHost: exodusvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusvault.com/signin\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 10 Feb 2026 16:29:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 06:30:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6969db1e-17771\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96113,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64369), with no line terminators","md5":"011c96d8459121c3f0960b29553fe1f4","sha1":"7c7f1591ea3b6f8e341360eab8604a91c01f1297","sha256":"9c25bc3040cd6b06957321b23ddc441439d7ff8d1f2ce70efdd107811c2ea504","sha512":"51cc32e41ff00c79e3b7ac516379bd669dd43e202d061e9d9cc746b82bb3d18163d63d04c1b4f81bc60983c8160eaaf8dcb17883dedb5edc4a817adce6f54cab","ssdeep":"768:O/1tOuK8lCWErkmZOgzNn8stybUD/OCMumQ1HUG0qyU:i1Q8GkmtZnxybUDGCMzG0qyU","tlshash":"0393e8c8b0c2f09457eb6665413f550bf1bc6d69a86d9c10e25288f0bef69ed8133f29","first_seen":"2026-01-23T12:47:38.487804Z","last_seen":"2026-02-10T16:30:22.422122Z","times_seen":4,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"exodusvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusvault.com/__webpack_hmr","fqdn":"exodusvault.com","domain":"exodusvault.com","tld":"com"},"ip":{"addr":"23.224.25.126","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exodusvault.com/signin","date":"2026-02-10T16:29:57.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusvault.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 06:34:34 GMT","end":"Sun, 10 May 2026 06:34:33 GMT"},"fingerprint":{"sha1":"DF:CB:DB:BE:7C:E6:47:D7:76:66:00:BA:B2:85:0D:EF:8E:0F:5D:39","sha256":"48:65:EE:F1:6D:1E:6B:5A:C6:22:41:84:3D:33:6C:77:A3:33:EC:DE:6F:11:E8:18:C0:4A:99:15:F9:60:C8:19"}}},"request":{"raw":"GET /__webpack_hmr HTTP/1.1\r\nHost: exodusvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/event-stream\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusvault.com/signin\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 10 Feb 2026 16:29:57 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 16 Jan 2026 06:30:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6969db1e-569\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}],"data":{"size":1385,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (485)","md5":"69f189699e87301a9a1c24ba4529b0b9","sha1":"1d700b3b74efa6c330687c0a026b17a7f2f0c5e0","sha256":"ad62af859255dc840f5ed4d362fb0cd6337899c519287d713743afb0c61b4593","sha512":"3d35508e40d68446860500411a2c888931c7097a0dc54b914a2eea2d0580db6c37d573ec7d15b7d6271f50edf551bb05e7639c7d5d8fb6719830903a46bbc3af","ssdeep":"","tlshash":"5421239f9c10e85d961347e7e4f3f82cb4a93a0c9618dcd0a5da482d1e5cfcd4d26d98","first_seen":"2026-01-23T12:47:38.483668Z","last_seen":"2026-02-10T16:30:22.417703Z","times_seen":4,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"exodusvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusvault.com/vendor.eba656bd21ed870ceeb3.js","fqdn":"exodusvault.com","domain":"exodusvault.com","tld":"com"},"ip":{"addr":"23.224.25.126","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exodusvault.com/","date":"2026-02-10T16:29:55.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusvault.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 06:34:34 GMT","end":"Sun, 10 May 2026 06:34:33 GMT"},"fingerprint":{"sha1":"DF:CB:DB:BE:7C:E6:47:D7:76:66:00:BA:B2:85:0D:EF:8E:0F:5D:39","sha256":"48:65:EE:F1:6D:1E:6B:5A:C6:22:41:84:3D:33:6C:77:A3:33:EC:DE:6F:11:E8:18:C0:4A:99:15:F9:60:C8:19"}}},"request":{"raw":"GET /vendor.eba656bd21ed870ceeb3.js HTTP/1.1\r\nHost: exodusvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusvault.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 10 Feb 2026 16:29:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 06:30:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6969db1e-196585\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1664389,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (57130)","md5":"6cc02a651deaeaad2702431874af933a","sha1":"7d306e184331c2d3f6f5327ab163340a60834b6c","sha256":"775b18aea3cd4d47ceee6f7f60f9f72b49d99f56d5a64b0800c78df9ded52ee1","sha512":"6de1b46abfd70135dbf3e09a231891aab6687b3cd8025121f6312cba72fd765cf82ec5a5a8c504ee8e015801371592c6de08b46aae9d300b0cad50992b3a0e10","ssdeep":"24576:QdrQoE7bETlHas/GLS/SvFXswC3g8VX2T0M:QdrQoE7bEpHaXS/SNJC3g8VX2T0M","tlshash":"be351acd7185f0a243a752e1406f152ff23aaa29685dc820f562d8e67c7d99c4233fbd","first_seen":"2026-02-10T16:30:22.422659Z","last_seen":"2026-02-10T16:30:22.422659Z","times_seen":1,"resource_available":false,"data":null}},"time_used":628,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":628,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"exodusvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusvault.com/vendor.eba656bd21ed870ceeb3.js","fqdn":"exodusvault.com","domain":"exodusvault.com","tld":"com"},"ip":{"addr":"23.224.25.126","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exodusvault.com/signin","date":"2026-02-10T16:29:56.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusvault.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 06:34:34 GMT","end":"Sun, 10 May 2026 06:34:33 GMT"},"fingerprint":{"sha1":"DF:CB:DB:BE:7C:E6:47:D7:76:66:00:BA:B2:85:0D:EF:8E:0F:5D:39","sha256":"48:65:EE:F1:6D:1E:6B:5A:C6:22:41:84:3D:33:6C:77:A3:33:EC:DE:6F:11:E8:18:C0:4A:99:15:F9:60:C8:19"}}},"request":{"raw":"GET /vendor.eba656bd21ed870ceeb3.js HTTP/1.1\r\nHost: exodusvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusvault.com/signin\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 10 Feb 2026 16:29:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 06:30:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6969db1e-196585\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1664389,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (57130)","md5":"9c455eef36ac66dbdbf5df45bdfacb38","sha1":"c81e1aee8c9cac7a8ae79411420118eb5d9ebc42","sha256":"06133448add492173b125adb863fdfb7ff1792ffdd11979c6c35467953f2451c","sha512":"bdc0698df2a67059cd106cb77a92c5ca941e71c9d5df6b5f08c9b6481391671caa9b61d9cca792b2106ade5da39a9ccef2151f5af3c555114f616c1576eb4caa","ssdeep":"24576:QdrQoE7bETlHas/GLS/Sv0XswC3g8VX2T0sn:QdrQoE7bEpHaXS/ScJC3g8VX2T0sn","tlshash":"b1351acd7585f0a253a711e2402f152ff23a7a69685dc820f562d8e67c78d9c8233fad","first_seen":"2026-01-14T20:50:26.07053Z","last_seen":"2026-02-10T16:30:22.423399Z","times_seen":7,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"exodusvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exodusvault.com/common.eba656bd21ed870ceeb3.css","fqdn":"exodusvault.com","domain":"exodusvault.com","tld":"com"},"ip":{"addr":"23.224.25.126","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exodusvault.com/","date":"2026-02-10T16:29:56.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusvault.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 06:34:34 GMT","end":"Sun, 10 May 2026 06:34:33 GMT"},"fingerprint":{"sha1":"DF:CB:DB:BE:7C:E6:47:D7:76:66:00:BA:B2:85:0D:EF:8E:0F:5D:39","sha256":"48:65:EE:F1:6D:1E:6B:5A:C6:22:41:84:3D:33:6C:77:A3:33:EC:DE:6F:11:E8:18:C0:4A:99:15:F9:60:C8:19"}}},"request":{"raw":"GET /common.eba656bd21ed870ceeb3.css HTTP/1.1\r\nHost: exodusvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusvault.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 10 Feb 2026 16:29:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 16 Jan 2026 06:30:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6969db1e-1fc9\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T15:07:13.570573Z","times_seen":17763367,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"exodusvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/react@16/umd/react.production.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exodusvault.com/signin","date":"2026-02-10T16:29:56.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /react@16/umd/react.production.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://exodusvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusvault.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Tue, 10 Feb 2026 16:29:57 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 57\r\ncf-ray: 9cbcfcfebc0ea0f0-OSL\r\nlocation: /react@16.14.0/umd/react.production.min.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12463,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T15:07:13.570573Z","times_seen":17763367,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodusvault.com/common.eba656bd21ed870ceeb3.css","fqdn":"exodusvault.com","domain":"exodusvault.com","tld":"com"},"ip":{"addr":"23.224.25.126","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exodusvault.com/signin","date":"2026-02-10T16:29:57.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodusvault.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 06:34:34 GMT","end":"Sun, 10 May 2026 06:34:33 GMT"},"fingerprint":{"sha1":"DF:CB:DB:BE:7C:E6:47:D7:76:66:00:BA:B2:85:0D:EF:8E:0F:5D:39","sha256":"48:65:EE:F1:6D:1E:6B:5A:C6:22:41:84:3D:33:6C:77:A3:33:EC:DE:6F:11:E8:18:C0:4A:99:15:F9:60:C8:19"}}},"request":{"raw":"GET /common.eba656bd21ed870ceeb3.css HTTP/1.1\r\nHost: exodusvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exodusvault.com/signin\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 10 Feb 2026 16:29:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 16 Jan 2026 06:30:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6969db1e-1fc9\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8137,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8137), with no line terminators","md5":"6393d463e65e88ef8509dc82fec5548e","sha1":"a38fa79d7bb034d822fc76a424eb25d7ed85f05d","sha256":"09e49f2fc7719b1e9e17aa61d82ccd51b844a945757f999b83ccf46a1c451673","sha512":"8eb2cc4dfc77572b7726b46e7dd68426df140781735b7f4d47718049e708d9f7efab73ff543da4db21c80afea0d2ae9b63793aec2b2bdd81b4460fbcf623a2b7","ssdeep":"96:RE+fX7VIx+hEnpGIH3l69YMBw61s6ejlR5RcRGR63uuzyF:TVIxBsrfBw61s6ejlR5RcRGR+XyF","tlshash":"daf1acf28601291a64ea7856a3757d0bb4d0c834cdf3d5e55603aece8bcb15f56222fc","first_seen":"2026-01-14T20:50:26.047123Z","last_seen":"2026-02-10T16:30:22.424159Z","times_seen":7,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"exodusvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}