{"report_id":"13a6f109-6d47-4a76-a577-499d47311197","version":6,"status":"done","tags":[],"date":"2026-02-03T20:36:27Z","url":{"schema":"https","addr":"safepal.com-ru.shop/","fqdn":"safepal.com-ru.shop","domain":"com-ru.shop","tld":"shop"},"ip":{"addr":"84.21.189.176","port":0,"asn":43350,"as":"NForce Entertainment B.V.","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"safepal.com-ru.shop/","fqdn":"safepal.com-ru.shop","domain":"com-ru.shop","tld":"shop"},"title":"Crypto Wallet Landing","dom":{"size":8223,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"8c43222a9b61b674eb542c77ccff9066","sha1":"ecc3d0a09af73d37142483ef971ed92f87b4460b","sha256":"8fd39fd49fe27210cffcb41dc8ce40ae2fd7d34e4b8948224b88eec76e8a08c7","sha512":"40f011faece7ad8f93a9c81b7d7b109efdddd3af9f05276affe15b63dd679fd750360839c68b26997eca5a87ad0ee7bcff08df416ccee553762da5f692bdd049","ssdeep":"192:Bz9g990CC3bYHqn6ChPqXqnNyfyJmsJHYPnRI:Bz9FLmeBc6cRI","tlshash":"8302631619e7106a6403a03aeff62b083da4c47b974fcea53ddc1959efd26a4c87634c","dom_hash":"domhash7909f31f81388f14c9e9820d7fcf1f80","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"safepal.com-ru.shop/","fqdn":"safepal.com-ru.shop","domain":"com-ru.shop","tld":"shop"},"ip":{"addr":"84.21.189.176","port":0,"asn":43350,"as":"NForce Entertainment B.V.","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-10T20:36:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"safepal.com-ru.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"safepal.com-ru.shop","ip":{"addr":"84.21.189.176","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-03T20:36:27.686463Z","last_seen":"2026-02-03T20:36:27.686464Z","alert_count":4,"request_count":4,"received_data":2454554,"sent_data":1837,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"safepal.com-ru.shop/","fqdn":"safepal.com-ru.shop","domain":"com-ru.shop","tld":"shop"},"ip":{"addr":"84.21.189.176","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"d33c549557750f47e0f44a04e08c1b32","sha1":"9a1ba0a24392c488934378361434963cf82efb63","sha256":"12532c4f21e4991f3aff2fe34007161b0d74b4ff403c3a3cf89c1cdc39d8b78b","sha512":"de417972bf0055019276d5f2fc953386cb4ffc69549a0b215422987f8d3c6b29a06baa747057e9bf8bff5e950648d0859ed6441882e14fe747ff3b15726e1cff","ssdeep":"","tlshash":"cef047e73c8a0039c3b71375377391483439253f744dbc12b50d18522f40e55189750c","size":621,"data":"","first_seen":"2026-02-03T20:36:32.016339Z","last_seen":"2026-02-03T20:36:32.016339Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"safepal.com-ru.shop/images/logo.webp","fqdn":"safepal.com-ru.shop","domain":"com-ru.shop","tld":"shop"},"ip":{"addr":"84.21.189.176","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.com-ru.shop/","date":"2026-02-03T20:36:05.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.com-ru.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 06:38:50 GMT","end":"Wed, 29 Apr 2026 06:38:49 GMT"},"fingerprint":{"sha1":"88:3A:4A:7E:6D:57:18:A7:D4:FF:52:23:2E:11:B2:13:A0:43:70:F3","sha256":"5B:86:96:20:8F:55:F3:8D:31:6C:A9:22:73:2D:4F:CD:E2:B4:5F:63:D9:4E:B8:F4:81:43:BE:61:99:3D:99:80"}}},"request":{"raw":"GET /images/logo.webp HTTP/1.1\r\nHost: safepal.com-ru.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.com-ru.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Tue, 03 Feb 2026 20:36:05 GMT\r\nContent-Type: image/webp\r\nContent-Length: 58380\r\nLast-Modified: Wed, 28 Jan 2026 12:58:43 GMT\r\nConnection: keep-alive\r\nETag: \"697a0803-e40c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58380,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"00c40392b250f155e1d02378e8816ad3","sha1":"70f329cd71ff3fe1fa2f37f7e3bb053f70fd9ea6","sha256":"a1493574e14eb8a6c40b54aadc623ca2b65e2a94bd9ac3f5e52cd628d004070c","sha512":"b041c085f09d2f13688a8a8ded0010728ae69dda3eb6547b2616e7b96fceca2126dfeb0fafd885dd668261ad6573e55c2e4b4dc26e449ea14afa3bf851ca1ec4","ssdeep":"1536:8tLUEelanJL0qRxmBfnabyAQw4/B7RN8N2dzTPxSph:aUEtbKMOBr8NS/xSph","tlshash":"cc4302485834f7cdcad09432ab71b9a391876745f1b266e42ec73ee41f8261a385fb43","first_seen":"2026-02-03T20:36:31.996212Z","last_seen":"2026-02-03T20:36:31.996212Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"safepal.com-ru.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.com-ru.shop/","fqdn":"safepal.com-ru.shop","domain":"com-ru.shop","tld":"shop"},"ip":{"addr":"84.21.189.176","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-03T20:36:05.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.com-ru.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 06:38:50 GMT","end":"Wed, 29 Apr 2026 06:38:49 GMT"},"fingerprint":{"sha1":"88:3A:4A:7E:6D:57:18:A7:D4:FF:52:23:2E:11:B2:13:A0:43:70:F3","sha256":"5B:86:96:20:8F:55:F3:8D:31:6C:A9:22:73:2D:4F:CD:E2:B4:5F:63:D9:4E:B8:F4:81:43:BE:61:99:3D:99:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: safepal.com-ru.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Tue, 03 Feb 2026 20:36:05 GMT\r\nContent-Type: text/html; charset=utf-8\r\nLast-Modified: Thu, 29 Jan 2026 08:03:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"697b1466-1fdf\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8159,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"5a49217a2d050b5d6656821e8f01b046","sha1":"a41e8a3d40722734ea775634c435f4791edd70b1","sha256":"66b5b800228cddc8293bcf5f0803e373f47b20fc23b1ffb6a7f113871c8bfc03","sha512":"3f6b39f476c4708af9bc1a31d8e0ea10b55d8ae8910e554e68f454e378d24f87521a512e1309185b3b2a54129dba8c2f58406bcbe3a0b163f27ae17e3b9c7b6a","ssdeep":"192:Xz9g990CC3bYHqn6ChPqXqnNyfyJmsJHYPnRm:Xz9FLmeBc6cRm","tlshash":"c2f1531619e7106a5403a03aaff62b083da4c47b974fcea53ddc2559efd26a4c87634c","first_seen":"2026-02-03T20:36:32.001755Z","last_seen":"2026-02-03T20:36:32.001755Z","times_seen":1,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":96,"dns":55,"connect":20,"send":0,"wait":21,"receive":1,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"safepal.com-ru.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.com-ru.shop/images/coin.png","fqdn":"safepal.com-ru.shop","domain":"com-ru.shop","tld":"shop"},"ip":{"addr":"84.21.189.176","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.com-ru.shop/","date":"2026-02-03T20:36:05.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.com-ru.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 06:38:50 GMT","end":"Wed, 29 Apr 2026 06:38:49 GMT"},"fingerprint":{"sha1":"88:3A:4A:7E:6D:57:18:A7:D4:FF:52:23:2E:11:B2:13:A0:43:70:F3","sha256":"5B:86:96:20:8F:55:F3:8D:31:6C:A9:22:73:2D:4F:CD:E2:B4:5F:63:D9:4E:B8:F4:81:43:BE:61:99:3D:99:80"}}},"request":{"raw":"GET /images/coin.png HTTP/1.1\r\nHost: safepal.com-ru.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.com-ru.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Tue, 03 Feb 2026 20:36:05 GMT\r\nContent-Type: image/png\r\nLast-Modified: Wed, 28 Jan 2026 12:11:39 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6979fcfb-129bff\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1219583,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 1113, 8-bit/color RGBA, non-interlaced","md5":"ae940bef018dc30d088ed1464a51f012","sha1":"0f7d2d3d26e5edc33dbf2b3d6a2a231a6fdcd83c","sha256":"22f66104d35bd9e499c164ee1b892f27177402c936937bf5ac690603d619d40b","sha512":"1bdf11f3f91ca138ef696c970fdc903faea6c2ebca13111764783c9d7b61fdd0eba45d4983d62295dd51ec8a94b68503f42d11849bbb10695adbf7620ca18fa0","ssdeep":"24576:LayXbE+2IGlJQBR6VLcIQichmWEXdg222rOBId4k4:LPLR2IGl6+LcIQicIWEFCPf","tlshash":"4b2533d0da8583b8d027ade14ec536dce122227206dd07171a7dab266372bc5e671fce","first_seen":"2026-02-03T20:36:32.009467Z","last_seen":"2026-02-03T20:36:32.009467Z","times_seen":1,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"safepal.com-ru.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.com-ru.shop/images/phone.png","fqdn":"safepal.com-ru.shop","domain":"com-ru.shop","tld":"shop"},"ip":{"addr":"84.21.189.176","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.com-ru.shop/","date":"2026-02-03T20:36:05.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.com-ru.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 06:38:50 GMT","end":"Wed, 29 Apr 2026 06:38:49 GMT"},"fingerprint":{"sha1":"88:3A:4A:7E:6D:57:18:A7:D4:FF:52:23:2E:11:B2:13:A0:43:70:F3","sha256":"5B:86:96:20:8F:55:F3:8D:31:6C:A9:22:73:2D:4F:CD:E2:B4:5F:63:D9:4E:B8:F4:81:43:BE:61:99:3D:99:80"}}},"request":{"raw":"GET /images/phone.png HTTP/1.1\r\nHost: safepal.com-ru.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.com-ru.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Tue, 03 Feb 2026 20:36:05 GMT\r\nContent-Type: image/png\r\nLast-Modified: Wed, 28 Jan 2026 12:15:23 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6979fddb-11d03d\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1167421,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 1078, 8-bit/color RGBA, non-interlaced","md5":"dea3396c4d4b2d9f292c5abf268ebe23","sha1":"3f00d358ca0eeba8a02243bf54d27fc4b77bba72","sha256":"194b792ea0161ecfac937cbb8790e12e840244b119dc58d1954f654934989732","sha512":"b6e52b17687a42dd39818e202414db30cfd395f428c8b1b1e2d48c846fee834b790f0dafe30a70acbdbcc58f0503da9e76f8094d1454245726e65564f5097218","ssdeep":"24576:bK6I+I3cK0bVxNhcFW5BkG5OIlZJ/Z6p7EodSOP96Jo2:9y3cRnXcFW5BkGB6p7Zc","tlshash":"962523aad6d437bfded3d2b98e660d283b5280a90b11af30cf7ca54d310a3a71c53955","first_seen":"2026-02-03T20:36:32.012311Z","last_seen":"2026-02-03T20:36:32.012311Z","times_seen":1,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":42,"dns":1,"connect":20,"send":0,"wait":39,"receive":145,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"safepal.com-ru.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}