{"report_id":"f38886ac-41c2-4687-8e04-406cadb30d18","version":6,"status":"done","tags":[],"date":"2026-05-19T19:33:24Z","url":{"schema":"http","addr":"exodus-recovery.info","fqdn":"exodus-recovery.info","domain":"exodus-recovery.info","tld":"info"},"ip":{"addr":"138.226.236.169","port":0,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"final":{"url":{"schema":"https","addr":"exodus-recovery.info/","fqdn":"exodus-recovery.info","domain":"exodus-recovery.info","tld":"info"},"title":"Exodus","dom":{"size":29610,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1616)","md5":"6abff6df26bb563a4abe5ba5a5841036","sha1":"51537e1e02aaf10f42d763af1e303968e1c1c12d","sha256":"daef097c33e934450513d863bf5e250e059fc50794bd4a9a9f2c8dabf667d9ea","sha512":"94d5c6f4a8f438b0ee20125f7ac0d1446260f592565e20b0c063b8a26ae1aa439b1432fe7d53ab1c5c5054bcd8f99b9a3cf0c7cb300ed795e0e9132d7cd89b07","ssdeep":"768:AHjWttttgU++atr7t5wytdtdmKmbve2TT67LwtGHjiGH7GHgGHXtGHqGHhGHUGH1:xQDyJgfslMrzAHsU","tlshash":"34d2b42212e42506a15bacd4eba2af1b736881178a0754f839cf3b59cfcfcd245e761d","dom_hash":"domhash88e25ba3afd21a3d0508f136473850b8","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"exodus-recovery.info","fqdn":"exodus-recovery.info","domain":"exodus-recovery.info","tld":"info"},"ip":{"addr":"138.226.236.169","port":0,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-23T19:33:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"exodus-recovery.info","ip":{"addr":"104.21.93.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-19T19:33:24.295384Z","last_seen":"2026-05-19T19:33:24.295384Z","alert_count":0,"request_count":2,"received_data":31780,"sent_data":943,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"exodus-recovery.info/","fqdn":"exodus-recovery.info","domain":"exodus-recovery.info","tld":"info"},"ip":{"addr":"104.21.93.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1638c5d21111d1315e307bd98dfee1ac","sha1":"ab91c14095c442150d26da2fd7ba7ffbcb307e83","sha256":"0f086aa1f67f36475fa8a7ccc69e370dc542a5b9d56ec527533976022ffbc8b4","sha512":"8ed110328e30d47743044a5057ca226d88e2dbf988a75f28b9b2d1bf58a33b694b2e7d90d345597fb3ef5c3476c14964b4c698ddb3a5a3b6dc30df701a96cb1e","ssdeep":"","tlshash":"5201812f2df740802d1bb13dab97e204392595079355fd51bd4e6b540f08d7468d27e4","size":710,"data":"","first_seen":"2026-05-19T19:33:28.216593Z","last_seen":"2026-05-19T19:33:28.216593Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"exodus-recovery.info/","fqdn":"exodus-recovery.info","domain":"exodus-recovery.info","tld":"info"},"ip":{"addr":"104.21.93.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-19T19:33:02.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-recovery.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 18:12:10 GMT","end":"Mon, 17 Aug 2026 18:12:09 GMT"},"fingerprint":{"sha1":"D2:2F:59:D9:F3:22:D9:5D:64:87:EE:A5:22:59:91:3A:36:E0:51:39","sha256":"06:23:1F:1A:A2:3B:CA:32:0E:3F:FE:41:F5:13:1D:E5:2D:B9:AE:E6:B1:29:79:CF:67:AF:FF:A9:AA:9C:3C:BB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: exodus-recovery.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 May 2026 19:33:02 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 19 May 2026 18:48:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-powered-by: PleskLin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fBK1hArFnNIbUag0EvQ4yvLfHohsKZ5X%2BKm6vj0NBbHyUsTEpNedH1mSQ1VpJncaCLd8wffW%2FxhUGd9C6G6fwv3hdPWvr5FRf6AnxhI4WgzjZ%2BI5rnq%2B5Mdma1SWQmaOqQGYpmT7Yg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9fe587f27c690b06-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":29627,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1616)","md5":"735b08b04a433472107664f9e399176e","sha1":"243464ad4075181f7fb1f4b4c0f37aeafbddb24b","sha256":"2cf7f2d733c294aaa6d778d03a6c4c89c6b082e368a5dd4726bbf21ceabb530f","sha512":"8795d2b4c65fe9176be4710ba10bb6274cfee9995aeed7c129a4d426d72dbea1095d6c614be29d8ee583aacae97ff65c7440304cd844ce045a0a4f11f5768047","ssdeep":"768:MHjWttttgU++atr7t5wytdtdmKmbve2TT67bwtGHjiGH7GHgGHXtGHqGHhGHUGHb:9eDyJgfslMrzAfsi","tlshash":"c5d2b42212e42506a15bacd4eba2af1b736881178a0754b839cf3b59cfcfcd245e771d","first_seen":"2026-05-19T19:33:28.211981Z","last_seen":"2026-05-19T19:33:28.211981Z","times_seen":1,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":34,"dns":13,"connect":1,"send":0,"wait":123,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodus-recovery.info/Folder/favicon.ico","fqdn":"exodus-recovery.info","domain":"exodus-recovery.info","tld":"info"},"ip":{"addr":"104.21.93.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exodus-recovery.info/","date":"2026-05-19T19:33:02.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exodus-recovery.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 18:12:10 GMT","end":"Mon, 17 Aug 2026 18:12:09 GMT"},"fingerprint":{"sha1":"D2:2F:59:D9:F3:22:D9:5D:64:87:EE:A5:22:59:91:3A:36:E0:51:39","sha256":"06:23:1F:1A:A2:3B:CA:32:0E:3F:FE:41:F5:13:1D:E5:2D:B9:AE:E6:B1:29:79:CF:67:AF:FF:A9:AA:9C:3C:BB"}}},"request":{"raw":"GET /Folder/favicon.ico HTTP/1.1\r\nHost: exodus-recovery.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exodus-recovery.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Tue, 19 May 2026 19:33:02 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 14 May 2026 16:47:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zHzOr0H4fviNT6qoEe2AyWxcPem4PPSU0GxH5g5I5Y02QF6pv16bCd5Swvb3p15pN8lgfV6zfpCA%2FVZadk0IPjpVdujmzaURX%2BgOmV8uQa8yOHrh0Yb%2Fe0hlkTrrXwBLTP%2FALsUDyw%3D%3D\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9fe587f48e85b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-05-20T20:19:28.489093Z","times_seen":36973,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}