{"report_id":"3130275a-42a0-47f3-9e67-b59e1ee3400c","version":6,"status":"done","tags":[],"date":"2026-01-24T20:05:33Z","url":{"schema":"https","addr":"check.safeaml.icu/","fqdn":"check.safeaml.icu","domain":"safeaml.icu","tld":"icu"},"ip":{"addr":"172.67.219.166","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"check.safeaml.icu/","fqdn":"check.safeaml.icu","domain":"safeaml.icu","tld":"icu"},"title":"AML Check — Мониторинг криптотранзакций","dom":{"size":15102,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (648)","md5":"6e6898cb7c3b8aace4bf50dfaac83f1e","sha1":"75f7b33bcf1e47a3a7f79b8d41542107d633b3f4","sha256":"d295cce3a3d171cab27aeff7cb96dec2000b770abf8d718e18072592cc2af76b","sha512":"a4581ddfd35b5f47a95be8eeff767b8ff29c1890b4684a50a3ddc1aa269057f5a204816cf30e2850ddf296b08743a1cbcf98707b676f46d4f4afd8602c6ad0c3","ssdeep":"192:KJWm8HeAq1jKa0nbx72ot3KYNuXNu0wIb6:ZmtAAKa0nl2otaZcE6","tlshash":"a5625022a8f620f7508351c55b693baa6fd1e30bd58f190072be47d41fd2caaec1752e","dom_hash":"domhashe4025cf2b0990daad71e62ea6b9a572b","first_seen":"2026-01-24T16:10:01.908986Z","last_seen":"2026-01-24T20:05:34.348107Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"check.safeaml.icu/","fqdn":"check.safeaml.icu","domain":"safeaml.icu","tld":"icu"},"ip":{"addr":"172.67.219.166","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-28T20:05:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-24T20:05:11Z","timestamp":1769285111,"ip_dst":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":35076,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-01-24T20:05:11.824777+0000\",\"flow_id\":876878339997118,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.40\",\"src_port\":35076,\"dest_ip\":\"188.114.96.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"check.safeaml.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2026-01-24T20:05:11.818622+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"check.safeaml.icu","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-14","domain_rank":0,"first_seen":"2026-01-24T16:09:58.130852Z","last_seen":"2026-01-24T16:09:58.130852Z","alert_count":0,"request_count":27,"received_data":349441,"sent_data":12076,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-01-18T22:29:48.020431Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":512,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"check.safeaml.icu/redirect.js","fqdn":"check.safeaml.icu","domain":"safeaml.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e66d81de6e849b83f4d9f0552d05d39","sha1":"6c907a307b088db5a5aa3b4571460f543f7ce7c5","sha256":"aa72d93061bc0c68cf224ee8a4204ffe298dc4f6372732ccb1a65a35253e8f41","sha512":"67377e944909194234a468b68cc06635f35e978b721c8e31fb9c7c4b08f0939a6964d4973b98e4ff3a60904b03a9f771f40592b7276133d38ce976a675c45cb5","ssdeep":"","tlshash":"315125d99d8520c91970c1a39b26341efef3947f3bd29256765c1a2a37e3170813e68e","size":2748,"data":"","first_seen":"2025-11-22T03:54:40.205825Z","last_seen":"2026-01-24T20:05:34.364385Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check.safeaml.icu/assets/app.js","fqdn":"check.safeaml.icu","domain":"safeaml.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d00e9042c9a1ab501085e99e72cc802a","sha1":"1577ad179b46d296d2628fdb0581f4dec3a6c4b9","sha256":"8ce0d6b0bac047c2a82fe874b47d38f68f9567556f535020984ccddeb43ff06f","sha512":"82b8caad137d85bd486418fbbb3e173dd17f67f1da9ee3e69522879178ecd2f37ebbc655b989885a0c0d30f3de81d2163dbddc2fa5c99e92f06d7b427c86e0d6","ssdeep":"384:WmcWifWiydqL8XyABY5MmbLofynx0nshijHua+3S54cA4ce1neP/Mdh3MPj9/gdw:zZiu5gLtABY5MmbLofyxVQHua+3S54cQ","tlshash":"45928236b5ab54ac0046298bdd7d77887958007f3e82f936329cce4c3fe612d86b9634","size":19839,"data":"","first_seen":"2025-09-12T12:26:31.810023Z","last_seen":"2026-01-24T20:05:34.356348Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-08-10T05:01:35.80685Z","times_seen":337643,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"check.safeaml.icu/credits.webp","fqdn":"check.safeaml.icu","domain":"safeaml.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check.safeaml.icu/","date":"2026-01-24T20:05:12.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeaml.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 08:32:04 GMT","end":"Tue, 14 Apr 2026 09:30:27 GMT"},"fingerprint":{"sha1":"03:51:4C:01:E9:67:FB:62:C7:A5:76:D4:45:63:77:16:42:15:A9:C0","sha256":"79:76:EA:CB:6D:CB:A8:C9:37:C0:2C:47:99:3E:B8:2B:ED:91:C3:AC:CE:88:D3:2A:0B:E3:4D:11:93:70:67:01"}}},"request":{"raw":"GET /credits.webp HTTP/1.1\r\nHost: check.safeaml.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check.safeaml.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:05:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7402\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 31 Jan 2026 16:09:37 GMT\r\nlast-modified: Wed, 14 Jan 2026 08:26:42 GMT\r\netag: \"1cea-69675342-57039f4ba1513b56;;;\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\nage: 14134\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q1yq5PAgis2S0sUbLSmMnSHbo700f5ncGzEhLYNFMAmuZE9IMJRI%2FiVe20qded2Axjj%2FjVR7Z2jfMnJOC7bYKvH1xTFPmsFb5izQoDcikw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3224f05ce85690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":7402,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6a53df6d9fd79ede9178041a2ba61da8","sha1":"91e6eb309b3f3e392ed707f6edf28275102e01c1","sha256":"4fc8119fc793f06bb74cefe9f9ef9ae10660a108af5672cc788a1c7e27bbcd27","sha512":"826f3d7590888bf73495592e09f3ac2633bc188c25646cbd275c688361afdd690e63e8998aeeb4af141ff414849677632b2ae9bbe6ee835ece41735e89f81f36","ssdeep":"192:63bfqwKfdI+1gui3KUPYigj12tHYqMys1A6uWr:67qxLCbxo1Gg","tlshash":"33e16e788a5b3beec01e56bd02646ec7078ad2375d74bb6e138c4c9744a33239cd4159","first_seen":"2025-05-30T09:05:59.239627Z","last_seen":"2026-08-10T20:24:29.528029Z","times_seen":178,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check.safeaml.icu/huobi-white.ef112ac0.svg","fqdn":"check.safeaml.icu","domain":"safeaml.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check.safeaml.icu/","date":"2026-01-24T20:05:12.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeaml.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 08:32:04 GMT","end":"Tue, 14 Apr 2026 09:30:27 GMT"},"fingerprint":{"sha1":"03:51:4C:01:E9:67:FB:62:C7:A5:76:D4:45:63:77:16:42:15:A9:C0","sha256":"79:76:EA:CB:6D:CB:A8:C9:37:C0:2C:47:99:3E:B8:2B:ED:91:C3:AC:CE:88:D3:2A:0B:E3:4D:11:93:70:67:01"}}},"request":{"raw":"GET /huobi-white.ef112ac0.svg HTTP/1.1\r\nHost: check.safeaml.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check.safeaml.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:05:12 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1289\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 31 Jan 2026 16:09:37 GMT\r\nlast-modified: Wed, 14 Jan 2026 08:26:43 GMT\r\netag: \"be8-69675343-4c7ce0357ccae6b;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\nage: 14134\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BpPizKzOhIGtCp7kdzs00X%2FPfFSAaYf9oJd91g1VNrEaQ9MS5Y%2BCOhHHjNsheCIelgf%2Bn9EnVSQTxUlFsCniedwKldodwkwWS4aZ3nUa7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3224f05ced5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3048,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"65924fc0d138c205eaadba4f53d04a61","sha1":"b0d1f59feba8f4c981f4d1845351c7ea664ec3b1","sha256":"054f78aea65883bc1f1b67f1508030a4f8522581918cfedc80a541db00058fa1","sha512":"6160b0ad4757125920803bc20b91f6480629603a0c879882b46d5a63fb9d9cc45cebb49d805bbcdb8d4d5e6fabbe51aa4531937a1325871a1a57c16e7688f745","ssdeep":"","tlshash":"575194c993cc93f8e805b3f40124947a263725f17a63c16883dc2ea5fd4615fc98cac8","first_seen":"2025-06-28T19:36:09.234114Z","last_seen":"2026-08-08T19:23:42.288267Z","times_seen":110,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check.safeaml.icu/iso-27001-white.1f882c82.svg","fqdn":"check.safeaml.icu","domain":"safeaml.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check.safeaml.icu/","date":"2026-01-24T20:05:12.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeaml.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 08:32:04 GMT","end":"Tue, 14 Apr 2026 09:30:27 GMT"},"fingerprint":{"sha1":"03:51:4C:01:E9:67:FB:62:C7:A5:76:D4:45:63:77:16:42:15:A9:C0","sha256":"79:76:EA:CB:6D:CB:A8:C9:37:C0:2C:47:99:3E:B8:2B:ED:91:C3:AC:CE:88:D3:2A:0B:E3:4D:11:93:70:67:01"}}},"request":{"raw":"GET /iso-27001-white.1f882c82.svg HTTP/1.1\r\nHost: check.safeaml.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check.safeaml.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:05:12 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 7821\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 31 Jan 2026 16:09:37 GMT\r\nlast-modified: Wed, 14 Jan 2026 08:26:43 GMT\r\netag: \"548b-69675343-dd88eb0636a9589d;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\nage: 14134\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CzfvO5HZBzonu4feeVwPkAWAYShHZvkOeanbUNElYt5koH%2BQNvLTycwS5aCKrfUEil4vvd7YD6f2KMg0m9hz%2FSvVkgbF%2F0q6V%2BVSH%2F1L5w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3224f05cf05690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21643,"size_decoded":0,"mime_type":"image/svg+xml","magic":"ASCII text, with very long lines (8650)","md5":"ca72c146bba307efa8a3b610279f274a","sha1":"4a4d65bfcaa142f9fb0318e515995e7ccf8c37a3","sha256":"4193243281b7c1e17f1927dbfc555aec6a223429a1b9240577dc504584f2a601","sha512":"8e93ceb852b80d1e5f5ef053163cedc4267b8f0d3ee2a6c9b6427ada5d2f70acf188048ea57ebe69f9a3322fab57116437bc33ef07f405c4d6d45831368acd71","ssdeep":"384:o7cpO289Sz8vXuD4VWKwveEwhzu1ukHDKPCP/VZAWtFGYngcPyq9uCGsGi3:tp3eNuSWKwAqRKqPIW6hcaqQCGsT","tlshash":"94a2c8c41376c7f5bd02f7fc85293052bd1a24ea7a5085f8fa8e8d51fa255dd08a88e3","first_seen":"2025-08-04T04:08:43.170897Z","last_seen":"2026-07-13T03:13:12.537368Z","times_seen":24,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check.safeaml.icu/assets/app.js","fqdn":"check.safeaml.icu","domain":"safeaml.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check.safeaml.icu/","date":"2026-01-24T20:05:12.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeaml.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 08:32:04 GMT","end":"Tue, 14 Apr 2026 09:30:27 GMT"},"fingerprint":{"sha1":"03:51:4C:01:E9:67:FB:62:C7:A5:76:D4:45:63:77:16:42:15:A9:C0","sha256":"79:76:EA:CB:6D:CB:A8:C9:37:C0:2C:47:99:3E:B8:2B:ED:91:C3:AC:CE:88:D3:2A:0B:E3:4D:11:93:70:67:01"}}},"request":{"raw":"GET /assets/app.js HTTP/1.1\r\nHost: check.safeaml.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check.safeaml.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:05:12 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 6854\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 31 Jan 2026 16:09:37 GMT\r\nlast-modified: Wed, 14 Jan 2026 08:26:44 GMT\r\netag: \"4f70-69675344-16d92bbb1fb556c;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\nage: 14134\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u%2FuofBWJMvGyLtlAfN6qK5kCLLDROigyoTjANGlMTNze19m5eCJ5l8ZUUox%2BWe6849evyXXDiA46MZsw5RMGpthXiiHCSO%2BCZngjvfJQmw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3224f05cf15690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20336,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d00e9042c9a1ab501085e99e72cc802a","sha1":"1577ad179b46d296d2628fdb0581f4dec3a6c4b9","sha256":"8ce0d6b0bac047c2a82fe874b47d38f68f9567556f535020984ccddeb43ff06f","sha512":"82b8caad137d85bd486418fbbb3e173dd17f67f1da9ee3e69522879178ecd2f37ebbc655b989885a0c0d30f3de81d2163dbddc2fa5c99e92f06d7b427c86e0d6","ssdeep":"384:WmcWifWiydqL8XyABY5MmbLofynx0nshijHua+3S54cA4ce1neP/Mdh3MPj9/gdw:zZiu5gLtABY5MmbLofyxVQHua+3S54cQ","tlshash":"45928236b5ab54ac0046298bdd7d77887958007f3e82f936329cce4c3fe612d86b9634","first_seen":"2025-09-12T12:26:31.810023Z","last_seen":"2026-01-24T20:05:34.356348Z","times_seen":4,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check.safeaml.icu/cover.webp","fqdn":"check.safeaml.icu","domain":"safeaml.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://check.safeaml.icu/","date":"2026-01-24T20:05:12.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeaml.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 08:32:04 GMT","end":"Tue, 14 Apr 2026 09:30:27 GMT"},"fingerprint":{"sha1":"03:51:4C:01:E9:67:FB:62:C7:A5:76:D4:45:63:77:16:42:15:A9:C0","sha256":"79:76:EA:CB:6D:CB:A8:C9:37:C0:2C:47:99:3E:B8:2B:ED:91:C3:AC:CE:88:D3:2A:0B:E3:4D:11:93:70:67:01"}}},"request":{"raw":"GET /cover.webp HTTP/1.1\r\nHost: check.safeaml.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check.safeaml.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:05:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17562\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 31 Jan 2026 16:09:38 GMT\r\nlast-modified: Wed, 14 Jan 2026 08:26:42 GMT\r\netag: \"449a-69675342-5dde055f821c6446;;;\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\nage: 14134\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ofrDSbdZqs7l0FMMHCdEfJbDJyjpVB73HDBeJh9PpiAB%2FI8hJX94v1uBcnS51Eqe9%2FO6xNHNYumxFzlt6rB%2FXGA9QNSSGbMElXkhnyPdEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3224f11da55690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17562,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1089x864, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"72e15631a7eeaca2863f725a1df8d160","sha1":"e9a03722c59e0c0a3c2d2a3f573daf5e144b0ea0","sha256":"d31b37cd7803ccd297467ba37c0bdcf45afbdd81c0480673064e7acc01141d27","sha512":"f4418ffbcc018b25b0892254ad75679de36887030127a64651c91fa0bb7b672a89f8e265d9b6d0df682e9d9dbac4d30559db2b4dc4bcdd73e18eaa6da7b37829","ssdeep":"384:gs/1N4qXYtVrBWFELkEt44HmGqRNNNHtuTSxuRbMSqTbjGnUb:JPBXycFEr4OmpDXuRbITOnUb","tlshash":"da72cf93c6d3093e873eb44234185a70ee157451c235de17169ae02fe6c6e788dbb3b5","first_seen":"2025-06-28T19:37:20.474064Z","last_seen":"2026-01-24T20:05:34.357155Z","times_seen":5,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check.safeaml.icu/icons8-verified-50.png","fqdn":"check.safeaml.icu","domain":"safeaml.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check.safeaml.icu/","date":"2026-01-24T20:05:12.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeaml.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 08:32:04 GMT","end":"Tue, 14 Apr 2026 09:30:27 GMT"},"fingerprint":{"sha1":"03:51:4C:01:E9:67:FB:62:C7:A5:76:D4:45:63:77:16:42:15:A9:C0","sha256":"79:76:EA:CB:6D:CB:A8:C9:37:C0:2C:47:99:3E:B8:2B:ED:91:C3:AC:CE:88:D3:2A:0B:E3:4D:11:93:70:67:01"}}},"request":{"raw":"GET /icons8-verified-50.png HTTP/1.1\r\nHost: check.safeaml.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check.safeaml.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:05:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 1079\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 31 Jan 2026 16:09:37 GMT\r\nlast-modified: Wed, 14 Jan 2026 08:26:43 GMT\r\netag: \"437-69675343-5db64587a3441534;;;\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\nage: 14134\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BotrzVxRgXyTtMPc4dkzNHmrU8X%2FULrj1dG%2B002R%2BL2%2B1sXVcQ2Cr7Swl96bVeC2DljRgOqdymSXaXJGj6MbFY%2B96aZl2YjFkWwEpZAiKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3224f04ccd5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1079,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"9675132f2ad4e4250d78f4b762a20c43","sha1":"211189bc76b01394f12d9478845747955b249492","sha256":"d2adb241b43ad535fba0127a6ea90a9c6206c3b2f3ec5d5c2fcabb67dae966c5","sha512":"3fa1944d7f29be11b267d4a4f513053ffb3eca50094e0aa3f019ff4d55ce900a5d082b906208ac0aa9fca8a66d18259d14f71f6bbcb3aefab1761238aff77a45","ssdeep":"","tlshash":"4711b98df3f23d7f857a65984d5815d111931f0054196ce6f5fc1354f2035a09e457d8","first_seen":"2026-01-24T16:10:01.943947Z","last_seen":"2026-01-24T20:05:34.357863Z","times_seen":3,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check.safeaml.icu/INATBA.webp","fqdn":"check.safeaml.icu","domain":"safeaml.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check.safeaml.icu/","date":"2026-01-24T20:05:12.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeaml.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 08:32:04 GMT","end":"Tue, 14 Apr 2026 09:30:27 GMT"},"fingerprint":{"sha1":"03:51:4C:01:E9:67:FB:62:C7:A5:76:D4:45:63:77:16:42:15:A9:C0","sha256":"79:76:EA:CB:6D:CB:A8:C9:37:C0:2C:47:99:3E:B8:2B:ED:91:C3:AC:CE:88:D3:2A:0B:E3:4D:11:93:70:67:01"}}},"request":{"raw":"GET /INATBA.webp HTTP/1.1\r\nHost: check.safeaml.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check.safeaml.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:05:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1344\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 31 Jan 2026 16:09:37 GMT\r\nlast-modified: Wed, 14 Jan 2026 08:26:43 GMT\r\netag: \"540-69675343-537bf8e89da6b446;;;\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\nage: 14134\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T9YfddK5IHWAgQvuSxcsWA7Io%2Fju6zqgInvG8t5iMrOQ8uMQpJoK32%2BemTn6%2FwqXSg2C1JHa%2BHYz0xp7%2FzXkMhT39j81HuL7oAqK9gmfMQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3224f04cce5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1344,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"60d4656a7d1bc12c60606058b2124a59","sha1":"824f8b49aefff47bcdeb4e9ccf49129f08390417","sha256":"8302c8ef063a754348dbbc97f205405a57abea755e8c2b781e387114a6ce6601","sha512":"45054af57b6d4eb7947c55d55680a709d4ab823e9dedbfc79865949fb0b8304e6e5b2a471649ca728dd7c7955a95cdc84bbc51025e0e64cab626f52f72618bcb","ssdeep":"","tlshash":"39212b44013c5c80ed4da91e6100a191aa1b79db8f5dceac73a020f298ed3f22bc0d71","first_seen":"2025-07-15T16:37:15.362838Z","last_seen":"2026-08-07T09:24:33.795093Z","times_seen":70,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check.safeaml.icu/CDA.webp","fqdn":"check.safeaml.icu","domain":"safeaml.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check.safeaml.icu/","date":"2026-01-24T20:05:12.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeaml.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 08:32:04 GMT","end":"Tue, 14 Apr 2026 09:30:27 GMT"},"fingerprint":{"sha1":"03:51:4C:01:E9:67:FB:62:C7:A5:76:D4:45:63:77:16:42:15:A9:C0","sha256":"79:76:EA:CB:6D:CB:A8:C9:37:C0:2C:47:99:3E:B8:2B:ED:91:C3:AC:CE:88:D3:2A:0B:E3:4D:11:93:70:67:01"}}},"request":{"raw":"GET /CDA.webp HTTP/1.1\r\nHost: check.safeaml.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check.safeaml.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:05:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1464\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 31 Jan 2026 16:09:37 GMT\r\nlast-modified: Wed, 14 Jan 2026 08:26:42 GMT\r\netag: \"5b8-69675342-17bd852e7dc4a83d;;;\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\nage: 14134\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F%2F9aLiriK8ZKX69zAff3mSBJjOwq4HAlKBJfwhMNuadWseal%2FXamW4TTV2Dk2XoV04kjoTby4uO6pwXaAqb1Qay2HZ6pRX1qNenJCkrUCA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3224f04cd35690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1464,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b073fd6159828af449f66e5b33f20299","sha1":"36f76562f8e2aea9f0e64cbed88b29bd6d7bbdb8","sha256":"59714149a9299095ca9ead1b5d62fe91698b786302774761362a7d2b56ffdbd3","sha512":"970858de8207fcf89c03190913003257bc5012126375bf48335f89dff1d54db951c50bb0fc771da2dd2086a4c3b404af6ed98ccd6000925cb25bc9e956e1e41a","ssdeep":"","tlshash":"50311948423db0a08b8a2706155d89053a257d941d786e36033c01bd04af7f49dd60bf","first_seen":"2025-07-15T16:37:15.343411Z","last_seen":"2026-08-07T09:24:33.808834Z","times_seen":69,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check.safeaml.icu/ATII.webp","fqdn":"check.safeaml.icu","domain":"safeaml.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check.safeaml.icu/","date":"2026-01-24T20:05:12.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeaml.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 08:32:04 GMT","end":"Tue, 14 Apr 2026 09:30:27 GMT"},"fingerprint":{"sha1":"03:51:4C:01:E9:67:FB:62:C7:A5:76:D4:45:63:77:16:42:15:A9:C0","sha256":"79:76:EA:CB:6D:CB:A8:C9:37:C0:2C:47:99:3E:B8:2B:ED:91:C3:AC:CE:88:D3:2A:0B:E3:4D:11:93:70:67:01"}}},"request":{"raw":"GET /ATII.webp HTTP/1.1\r\nHost: check.safeaml.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check.safeaml.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:05:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2486\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 31 Jan 2026 16:09:37 GMT\r\nlast-modified: Wed, 14 Jan 2026 08:26:42 GMT\r\netag: \"9b6-69675342-24e3330fc7ec4491;;;\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\nage: 14134\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5YGZ5jUu3BlvspL3TefxHc8dgK8XqdrtiD9YZD7MLrApQ2ZAUBIEb1gDXSDpbq%2BNtjx%2BdpiSXXTeWopklH473SC7MkODcNNG6Poh68Jhiw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3224f04cd45690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2486,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"da0d31a8dd42682de2b0042f31b970b9","sha1":"51309b7378e766b68564f464c2c0c63dcc0286e5","sha256":"2e7abb9e9486931335205b86f933c63d7af87fc1cdb9478ff2e087eddaca0543","sha512":"626a3cd9ace3f351c001a4c279749f96e1fa48565ee4bd71d89ffb1eb2354f6b894b20aacdd17642ae38ff92adf83b70759419456c478f9a6fbf3f3a1b75f5ca","ssdeep":"","tlshash":"a2511c5943e9839759110535a5f8fe44b583b4faf502b400711eb5b2dc4bdd1b68b930","first_seen":"2025-07-15T16:37:15.37126Z","last_seen":"2026-08-07T09:24:33.801371Z","times_seen":70,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check.safeaml.icu/FTAHK.webp","fqdn":"check.safeaml.icu","domain":"safeaml.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check.safeaml.icu/","date":"2026-01-24T20:05:12.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeaml.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 08:32:04 GMT","end":"Tue, 14 Apr 2026 09:30:27 GMT"},"fingerprint":{"sha1":"03:51:4C:01:E9:67:FB:62:C7:A5:76:D4:45:63:77:16:42:15:A9:C0","sha256":"79:76:EA:CB:6D:CB:A8:C9:37:C0:2C:47:99:3E:B8:2B:ED:91:C3:AC:CE:88:D3:2A:0B:E3:4D:11:93:70:67:01"}}},"request":{"raw":"GET /FTAHK.webp HTTP/1.1\r\nHost: check.safeaml.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check.safeaml.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:05:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5216\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 31 Jan 2026 16:09:37 GMT\r\nlast-modified: Wed, 14 Jan 2026 08:26:43 GMT\r\netag: \"1460-69675343-2c3463075ba0d743;;;\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\nage: 14134\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1q8iijkmD2b89vWLWfwQIaUIwwvAhRNo8j6RxPm6S0Xw19UVeVZnD7lOZRpg7StoyYFNkuWNAg67c3kZ%2F0OBF1ZzQB2tHLHVvjCp7D1yQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3224f04cd75690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5216,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e3566bf48385350d928e338894b58b5c","sha1":"a6a52b5878861b65147325f20fa5b907b341c7e1","sha256":"8a93feab169ff81033fc22627c52b3aa06a8da399a5d437e08556a3274958b51","sha512":"e4a7e595192141f1f565827b7825926d980ec8246c8a3ce43f55459a52c5f6ad8baf40ed2abe2d40b6fae66fa075d6052ed102a76bb075ad6cce4addd3ef73f5","ssdeep":"96:N6ZcRs6wgRgLLaZpKsa3jmvAFaJvq8eZoOFk1BMHnxUGJuOydfOkxZLz:N6ZcRsNLq3a3jpaoFPS1BQxUGEOAdxZX","tlshash":"3db17d82d7d2be62d20c8c220bd8153955c8f11b54ba6ef78f554202e276e3a5c4abb2","first_seen":"2025-05-30T09:05:59.233731Z","last_seen":"2026-08-08T19:27:59.49747Z","times_seen":96,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check.safeaml.icu/icons/aml.svg","fqdn":"check.safeaml.icu","domain":"safeaml.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check.safeaml.icu/","date":"2026-01-24T20:05:12.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeaml.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 08:32:04 GMT","end":"Tue, 14 Apr 2026 09:30:27 GMT"},"fingerprint":{"sha1":"03:51:4C:01:E9:67:FB:62:C7:A5:76:D4:45:63:77:16:42:15:A9:C0","sha256":"79:76:EA:CB:6D:CB:A8:C9:37:C0:2C:47:99:3E:B8:2B:ED:91:C3:AC:CE:88:D3:2A:0B:E3:4D:11:93:70:67:01"}}},"request":{"raw":"GET /icons/aml.svg HTTP/1.1\r\nHost: check.safeaml.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check.safeaml.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:05:12 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 655\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 31 Jan 2026 16:09:37 GMT\r\nlast-modified: Wed, 14 Jan 2026 08:26:44 GMT\r\netag: \"5ec-69675344-184d5a3d1423cf86;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\nage: 14134\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DYFvDehZpIcrLnRDd2QAhcMuMQTAajTsU4B5BuOgDJNouPp5mmmZk62gLy7Q3IZSlay0yqb41iTtBeNRwM9Q2OXSC9FfbhvUUpkbsQX2ag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3224f17e0f5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1516,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b91395d33df1799abaa6c9724ae03604","sha1":"6684343f93d43fe560d3aed52c45bb10cae615c9","sha256":"7376c9903f77c0d03f7eacf5ff5a40f264016c0410245dfba0f728620e844c0e","sha512":"83fbada53cfe0a60c0dc815a544d5c6f19e62c8d39867f9b8c09544c15e91f03e315b622bc3d21847c80a16808d1baa551f7a4e4b72e4c5f8811b59f60095828","ssdeep":"","tlshash":"cb3132b12ab970ae5dd68134e77958920f6eb1f1b10241cebc5e263190179cbf14ba24","first_seen":"2025-09-12T12:26:31.820587Z","last_seen":"2026-01-24T20:05:34.361176Z","times_seen":5,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check.safeaml.icu/assets/styles.css","fqdn":"check.safeaml.icu","domain":"safeaml.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://check.safeaml.icu/","date":"2026-01-24T20:05:12.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeaml.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 08:32:04 GMT","end":"Tue, 14 Apr 2026 09:30:27 GMT"},"fingerprint":{"sha1":"03:51:4C:01:E9:67:FB:62:C7:A5:76:D4:45:63:77:16:42:15:A9:C0","sha256":"79:76:EA:CB:6D:CB:A8:C9:37:C0:2C:47:99:3E:B8:2B:ED:91:C3:AC:CE:88:D3:2A:0B:E3:4D:11:93:70:67:01"}}},"request":{"raw":"GET /assets/styles.css HTTP/1.1\r\nHost: check.safeaml.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check.safeaml.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:05:12 GMT\r\ncontent-type: text/css\r\ncontent-length: 3385\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 31 Jan 2026 16:09:37 GMT\r\nlast-modified: Wed, 14 Jan 2026 08:26:44 GMT\r\netag: \"3d98-69675344-31aa07946f8fa3a7;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\nage: 14134\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xH8mBg02ydI5xko8AXEB4o140jJqVT1yCiaONbxRTgsQX5KUMdEcQWa4X1etWJVt0KwqSLXNPvhy4S0Sx7MNkFQTEEQXUiHagrrwcDJzwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3224f04cca5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":15768,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"cad6e86604f4ee73b8add1e86c4cfa42","sha1":"e8310b4975ee6b48c6dd6a58dd3406bd3e79a853","sha256":"3616db45ff1bda95313c64aef06fe8a3deed881802faf04f780f54e4a725e19b","sha512":"541f72d2db038f166c0b9e4ed51476b4a0b97575e93f8aadb56ddad6baa4a6e216e2895d331d77506fd10a5a4884d4339255d5376f380d0bcde495065b612972","ssdeep":"192:Bq970gq9ED9FoFiL/SVNXsZUTalNVN/414cIZn4S4f2xGmfeP63xhE4UCbCojgiI:G7jFoFUskUTalN7Con9imYem/l1d5","tlshash":"5f6275d63bb42a54b917d9a8ed811b56b35cd003820eec7d3be8105ceec92c999f274d","first_seen":"2025-09-12T12:26:31.828076Z","last_seen":"2026-01-24T20:05:34.361804Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check.safeaml.icu/LSW3.webp","fqdn":"check.safeaml.icu","domain":"safeaml.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check.safeaml.icu/","date":"2026-01-24T20:05:12.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeaml.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 08:32:04 GMT","end":"Tue, 14 Apr 2026 09:30:27 GMT"},"fingerprint":{"sha1":"03:51:4C:01:E9:67:FB:62:C7:A5:76:D4:45:63:77:16:42:15:A9:C0","sha256":"79:76:EA:CB:6D:CB:A8:C9:37:C0:2C:47:99:3E:B8:2B:ED:91:C3:AC:CE:88:D3:2A:0B:E3:4D:11:93:70:67:01"}}},"request":{"raw":"GET /LSW3.webp HTTP/1.1\r\nHost: check.safeaml.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check.safeaml.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:05:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1220\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 31 Jan 2026 16:09:37 GMT\r\nlast-modified: Wed, 14 Jan 2026 08:26:43 GMT\r\netag: \"4c4-69675343-e1ac99636a3b4090;;;\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\nage: 14134\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FlPi079puVboO4SgJtbIyBauuPa7qMM97agj1SofG3EB0zFkAydH%2Fe1O9N705NJ4N4lNbMmzwS73sD%2FrSYD3WoSe3GokJ92tCI6LgMJ0PA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3224f04cd55690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1220,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2adb81a6fb04686d4d9c4b06a0f8dc76","sha1":"b45e11677efaf36c0f4e1ba7302b8d8b83873dd0","sha256":"1306203ef8d31cc712fac68dcfcbc3e4773c74ff0aee6912fc303fc0988de12b","sha512":"8604ddfcdbaa4d35404d1ea980f26a506cd693e6d542ecca8cd40f8f839e8cc54cdee7cabe9f63d15903ab5252768d31af4f6d8dc64d42c3a646694f29dea292","ssdeep":"","tlshash":"7021da4c4369915aebc63a8fe3d871053704b4d90e68f31c9904091358acfd633464ab","first_seen":"2025-07-15T16:37:15.327163Z","last_seen":"2026-08-07T09:24:33.806803Z","times_seen":70,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check.safeaml.icu/gateio.webp","fqdn":"check.safeaml.icu","domain":"safeaml.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check.safeaml.icu/","date":"2026-01-24T20:05:12.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeaml.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 08:32:04 GMT","end":"Tue, 14 Apr 2026 09:30:27 GMT"},"fingerprint":{"sha1":"03:51:4C:01:E9:67:FB:62:C7:A5:76:D4:45:63:77:16:42:15:A9:C0","sha256":"79:76:EA:CB:6D:CB:A8:C9:37:C0:2C:47:99:3E:B8:2B:ED:91:C3:AC:CE:88:D3:2A:0B:E3:4D:11:93:70:67:01"}}},"request":{"raw":"GET /gateio.webp HTTP/1.1\r\nHost: check.safeaml.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check.safeaml.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:05:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2424\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 31 Jan 2026 16:09:37 GMT\r\nlast-modified: Wed, 14 Jan 2026 08:26:43 GMT\r\netag: \"978-69675343-fb19582fa63c4652;;;\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\nage: 14134\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6yhn%2B%2Bb0RB3A68%2FNMQYYLBAAbPgsSeei19ysExO33bHd81cU3f2oMoavd6l3AKfv59WJvyF0PaUZMxy1R0phW1te5lwYnNrxeyubURzaxQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3224f05ce05690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":2424,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"db46eb6f3bc974c066784fc584ddee5d","sha1":"6fa1850da7b1c1928c88d6015fbd17446fd96063","sha256":"fd1e6edc292b582b9ac513d480239ca96b193b84d29305e9744d6b4df58ad6c8","sha512":"141721771142408b8eb8064e6c5f8e2fca4e8428d937181fada5ff1376b52f9fc9797ee22293a09a7fcde6af9db14a30736471307d07e27ca7e0d092bf2c85c6","ssdeep":"","tlshash":"94416b902130049a8d081a096e3a81d16a573f89f345c3097bf8ccff3bcac1b2c221be","first_seen":"2025-05-30T09:05:59.266696Z","last_seen":"2026-08-04T05:04:09.333725Z","times_seen":61,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check.safeaml.icu/okx-white.32ece2b9.svg","fqdn":"check.safeaml.icu","domain":"safeaml.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check.safeaml.icu/","date":"2026-01-24T20:05:12.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeaml.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 08:32:04 GMT","end":"Tue, 14 Apr 2026 09:30:27 GMT"},"fingerprint":{"sha1":"03:51:4C:01:E9:67:FB:62:C7:A5:76:D4:45:63:77:16:42:15:A9:C0","sha256":"79:76:EA:CB:6D:CB:A8:C9:37:C0:2C:47:99:3E:B8:2B:ED:91:C3:AC:CE:88:D3:2A:0B:E3:4D:11:93:70:67:01"}}},"request":{"raw":"GET /okx-white.32ece2b9.svg HTTP/1.1\r\nHost: check.safeaml.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check.safeaml.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:05:12 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1168\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 31 Jan 2026 16:09:37 GMT\r\nlast-modified: Wed, 14 Jan 2026 08:26:44 GMT\r\netag: \"e2b-69675344-a26afde8a256dedd;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\nage: 14134\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J5fPwynAr9z1RiOsh%2BoiJ7C%2FFHSfBPqy1DX2iaiPJVSZ%2B9PlYp8%2BctB8ew8iXf1rVAH05JBHYleuEP8Tp1fInm3DCUyKHBZfDYiWfjVSkg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3224f05ceb5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3627,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c0c53aa999c88a232bf00d8d50dd8548","sha1":"07bf1f375a55a841b03a5f131efc62e2f9a8da7a","sha256":"e9b72ee47d139385ae90d6a8b4a1e0baccd2ea7697f75736b4fbf911cd3314d9","sha512":"da17d076133f4844a097c298e99a7a79d0c9983384b38778e09086362615fbc92e501107138ba5606f43ba82fc0c47d4b7eb7e92549de92911dd99ea9d70d7f0","ssdeep":"","tlshash":"1d71648597dcd1909343aff4c3247475aeb328e8db214a50c790ddbaf82549ecc89dc1","first_seen":"2025-06-28T19:36:09.240132Z","last_seen":"2026-08-08T19:23:42.312075Z","times_seen":112,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check.safeaml.icu/redirect.js","fqdn":"check.safeaml.icu","domain":"safeaml.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check.safeaml.icu/","date":"2026-01-24T20:05:12.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeaml.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 08:32:04 GMT","end":"Tue, 14 Apr 2026 09:30:27 GMT"},"fingerprint":{"sha1":"03:51:4C:01:E9:67:FB:62:C7:A5:76:D4:45:63:77:16:42:15:A9:C0","sha256":"79:76:EA:CB:6D:CB:A8:C9:37:C0:2C:47:99:3E:B8:2B:ED:91:C3:AC:CE:88:D3:2A:0B:E3:4D:11:93:70:67:01"}}},"request":{"raw":"GET /redirect.js HTTP/1.1\r\nHost: check.safeaml.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check.safeaml.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:05:12 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 1118\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 31 Jan 2026 16:09:37 GMT\r\nlast-modified: Wed, 14 Jan 2026 08:26:44 GMT\r\netag: \"abc-69675344-de9d3be5cdd805d6;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\nage: 14134\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cXRs1tUqCELKTQ%2B0%2Fks3D%2BNL0dgt9zHg8jAn%2FwNUOBesYxTSSgkt1cPac33eYGRb0eQwTDmnDTcqYZB%2FsICcFdGkhbeVgufwbZcPZ6qMuA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3224f05cf35690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2748,"size_decoded":0,"mime_type":"application/x-javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"5e66d81de6e849b83f4d9f0552d05d39","sha1":"6c907a307b088db5a5aa3b4571460f543f7ce7c5","sha256":"aa72d93061bc0c68cf224ee8a4204ffe298dc4f6372732ccb1a65a35253e8f41","sha512":"67377e944909194234a468b68cc06635f35e978b721c8e31fb9c7c4b08f0939a6964d4973b98e4ff3a60904b03a9f771f40592b7276133d38ce976a675c45cb5","ssdeep":"","tlshash":"315125d99d8520c91970c1a39b26341efef3947f3bd29256765c1a2a37e3170813e68e","first_seen":"2025-11-22T03:54:40.205825Z","last_seen":"2026-01-24T20:05:34.364385Z","times_seen":7,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check.safeaml.icu/cdn-cgi/rum?","fqdn":"check.safeaml.icu","domain":"safeaml.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://check.safeaml.icu/","date":"2026-01-24T20:05:12.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeaml.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 08:32:04 GMT","end":"Tue, 14 Apr 2026 09:30:27 GMT"},"fingerprint":{"sha1":"03:51:4C:01:E9:67:FB:62:C7:A5:76:D4:45:63:77:16:42:15:A9:C0","sha256":"79:76:EA:CB:6D:CB:A8:C9:37:C0:2C:47:99:3E:B8:2B:ED:91:C3:AC:CE:88:D3:2A:0B:E3:4D:11:93:70:67:01"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: check.safeaml.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1017\r\nOrigin: https://check.safeaml.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check.safeaml.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1017,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":697,\"startTime\":1769285111717,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2024.6.1\",\"timings\":2},\"pageloadId\":\"50efc1a9-4595-4921-871f-d1a3c8704c1f\",\"location\":\"https://check.safeaml.icu/\",\"nt\":\"navigate\",\"timingsV2\":{\"unloadEventStart\":0,\"unloadEventEnd\":0,\"domInteractive\":778,\"domContentLoadedEventStart\":814,\"domContentLoadedEventEnd\":819,\"domComplete\":820,\"loadEventStart\":820,\"loadEventEnd\":820,\"type\":\"navigate\",\"redirectCount\":0,\"initiatorType\":\"navigation\",\"nextHopProtocol\":\"h2\",\"workerStart\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":1,\"domainLookupStart\":10,\"domainLookupEnd\":101,\"connectStart\":101,\"connectEnd\":117,\"secureConnectionStart\":104,\"requestStart\":117,\"responseStart\":525,\"responseEnd\":525,\"transferSize\":5406,\"encodedBodySize\":4548,\"decodedBodySize\":15725,\"name\":\"https://check.safeaml.icu/\",\"entryType\":\"navigation\",\"startTime\":0,\"duration\":820},\"siteToken\":\"96b392adc7b9473aa8f6ab2c29e03c53\",\"st\":2}"}},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Sat, 24 Jan 2026 20:05:12 GMT\r\ncontent-type: text/plain\r\naccess-control-allow-origin: https://check.safeaml.icu\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4LS8UK7Uicf%2B9RCRpEI%2B2nyxOoAMF3lS1YfxCcv9UWCgkOA7nU8iAiQkpYFi4mLcydhWZBSRJmINNUNmuwPhZGNQAKZ%2Bw1VPGQxUinw1TA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9c3224f16dfc5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T03:57:29.375322Z","times_seen":17829662,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check.safeaml.icu/","fqdn":"check.safeaml.icu","domain":"safeaml.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T20:05:11.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeaml.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 08:32:04 GMT","end":"Tue, 14 Apr 2026 09:30:27 GMT"},"fingerprint":{"sha1":"03:51:4C:01:E9:67:FB:62:C7:A5:76:D4:45:63:77:16:42:15:A9:C0","sha256":"79:76:EA:CB:6D:CB:A8:C9:37:C0:2C:47:99:3E:B8:2B:ED:91:C3:AC:CE:88:D3:2A:0B:E3:4D:11:93:70:67:01"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: check.safeaml.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 20:05:12 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VyyrNQiscaossDCrWpHruuUv8d1nEE2wnP9eooaPGy2YWfxhABSP%2BBAmsA1hTVbGmslMo1%2BzSchMDnb2rUfu8Y3K6cPvk3iNadbAAiWClTHU\"}]}\r\nlast-modified: Wed, 14 Jan 2026 08:26:43 GMT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=6,cfOrigin;dur=397\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c3224ecfb30dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":15725,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (505)","md5":"c2f84b4c9c7c0838b04a8528752d87d6","sha1":"0ecb03d4948c5e64afaef80175ffbec27c3c428e","sha256":"35caa06d74d33cdca65b94c25983a191f74d4023985221ca2fc34d9362e0c4cd","sha512":"3c293439540efdb981f7a5f9a6d18458de4d197087a94902c29d8543100321e73a4a8749d9d3e8be27f93346d33f52fd3b08a8b6a1d568d2565606d1bd5f8d67","ssdeep":"192:qJbcmC2HeTq1ja+NZOBotrUx+Tyzg0z7dx0:TmCLTADNZwotokWkU0","tlshash":"52623135a8f620ab508395ca9a087b4a3fd0e21fc98f191132fd1ad92fd3c99dd1751e","first_seen":"2026-01-24T16:10:01.912512Z","last_seen":"2026-01-24T20:05:34.365741Z","times_seen":3,"resource_available":false,"data":null}},"time_used":618,"timings":{"blocked":103,"dns":91,"connect":1,"send":0,"wait":408,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check.safeaml.icu/cryptopnl.webp","fqdn":"check.safeaml.icu","domain":"safeaml.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check.safeaml.icu/","date":"2026-01-24T20:05:12.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeaml.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 08:32:04 GMT","end":"Tue, 14 Apr 2026 09:30:27 GMT"},"fingerprint":{"sha1":"03:51:4C:01:E9:67:FB:62:C7:A5:76:D4:45:63:77:16:42:15:A9:C0","sha256":"79:76:EA:CB:6D:CB:A8:C9:37:C0:2C:47:99:3E:B8:2B:ED:91:C3:AC:CE:88:D3:2A:0B:E3:4D:11:93:70:67:01"}}},"request":{"raw":"GET /cryptopnl.webp HTTP/1.1\r\nHost: check.safeaml.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check.safeaml.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:05:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2402\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 31 Jan 2026 16:09:37 GMT\r\nlast-modified: Wed, 14 Jan 2026 08:26:42 GMT\r\netag: \"962-69675342-6910b5d9986ee9e6;;;\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\nage: 14134\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GVwq%2B317PhpmC2%2BpK9lzVgSmR%2BPApEdC5jUGKXnU3znSZgoAE5VIfmZs%2FwUb1%2BmBh3r8rSY%2FaHb5CsW7mPGAVxxOVfdutNy1YRUruPllDA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3224f05cde5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":2402,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"770b2a2be55ec2a99aa407eac37b722d","sha1":"c8e55f8f6e7c0d6052a58f68ca9a3dc462afedb6","sha256":"d91833cac40d348ec66a4d26e282260cc802d125f942f54a21b0c6ecac84039c","sha512":"91ab9b96d41e758dd840d15755a51bb9f9cb6cac2a68b31e374fc4e5137bbcb671ac829bbd5a2cf6db436b6b49e6862d8b37341df5004a167476926a12ec5d81","ssdeep":"","tlshash":"ac415b625f724d97b32bc8fc2f4172a7e1b10931ca29ee11735a57f4086af0650b3c46","first_seen":"2025-05-30T09:05:59.272357Z","last_seen":"2026-08-04T05:04:09.321518Z","times_seen":61,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check.safeaml.icu/safe3.webp","fqdn":"check.safeaml.icu","domain":"safeaml.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check.safeaml.icu/","date":"2026-01-24T20:05:12.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeaml.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 08:32:04 GMT","end":"Tue, 14 Apr 2026 09:30:27 GMT"},"fingerprint":{"sha1":"03:51:4C:01:E9:67:FB:62:C7:A5:76:D4:45:63:77:16:42:15:A9:C0","sha256":"79:76:EA:CB:6D:CB:A8:C9:37:C0:2C:47:99:3E:B8:2B:ED:91:C3:AC:CE:88:D3:2A:0B:E3:4D:11:93:70:67:01"}}},"request":{"raw":"GET /safe3.webp HTTP/1.1\r\nHost: check.safeaml.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check.safeaml.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:05:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2602\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 31 Jan 2026 16:09:37 GMT\r\nlast-modified: Wed, 14 Jan 2026 08:26:44 GMT\r\netag: \"a2a-69675344-8943b6cabfecc836;;;\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\nage: 14134\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZkELyPzjsRXRjSCisbrMI2Sxw2dVR6hwmkR5u6pMaJKzRGxlbFU8I8%2B89Eoz8YIZw5IfHA6E%2FY2j0o1TUQRJadEqZIrvNwudRPyXSWHZRg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3224f05ce15690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2602,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"186e963314d0538e867ce526fb9855d8","sha1":"bfc6211238211318021bcac851c9f8bf3ddd7f54","sha256":"2b72f9be51e71ba407fef40ada21df31bf7713c64f3dfef576bbc899e31a51d7","sha512":"d22c717552229c7ee34c8e6a429c9c31f46b5476fe231828000f5f682420ee305a2638de9572ad69a759ab03c279017244871af1df3bc2e0b7fae411123963e5","ssdeep":"","tlshash":"b8513dab4103a2682ff7402a1480049321ddafaf25bbcea5861e553df750779dbd014f","first_seen":"2025-05-30T09:05:59.244518Z","last_seen":"2026-08-04T05:04:09.309691Z","times_seen":60,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check.safeaml.icu/purefi.webp","fqdn":"check.safeaml.icu","domain":"safeaml.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check.safeaml.icu/","date":"2026-01-24T20:05:12.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeaml.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 08:32:04 GMT","end":"Tue, 14 Apr 2026 09:30:27 GMT"},"fingerprint":{"sha1":"03:51:4C:01:E9:67:FB:62:C7:A5:76:D4:45:63:77:16:42:15:A9:C0","sha256":"79:76:EA:CB:6D:CB:A8:C9:37:C0:2C:47:99:3E:B8:2B:ED:91:C3:AC:CE:88:D3:2A:0B:E3:4D:11:93:70:67:01"}}},"request":{"raw":"GET /purefi.webp HTTP/1.1\r\nHost: check.safeaml.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check.safeaml.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:05:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2846\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 31 Jan 2026 16:09:37 GMT\r\nlast-modified: Wed, 14 Jan 2026 08:26:44 GMT\r\netag: \"b1e-69675344-4787ed8842cc1f29;;;\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\nage: 14134\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KkuxIMAuzmCPE5opNKIcpzFxstjZK2JZruOMGoSzSexMIZ%2F2uCms25TyNY%2FSAYEGYeA%2FoKMeW%2FDpxz85EgIBW4kyxTO6fmTWvm6zIf%2FmOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3224f05ce35690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2846,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1946ddb4ccc7e54f38c2d6744c347609","sha1":"b01181b8dbe5a2ee8f2c537666a407d364135e92","sha256":"e0f01c6542d3e1dda96710f281529de1d69fe76303886c4ed8a9e7b2af99b963","sha512":"9abc175e917a64afbe1cfb117b658859a1d5f21af2ef38f5a91c0ff305af2fe3aaea3e736f0a689f0fe06164905ff9630fa43d072f596e40e135113902cbb067","ssdeep":"","tlshash":"9a516b52293e28057b67e3785273513beb80e20f75b0484147e969534d4bf66f2e0a4c","first_seen":"2025-05-30T09:05:59.238411Z","last_seen":"2026-08-04T05:04:09.314375Z","times_seen":53,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check.safeaml.icu/comistar.webp","fqdn":"check.safeaml.icu","domain":"safeaml.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check.safeaml.icu/","date":"2026-01-24T20:05:12.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeaml.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 08:32:04 GMT","end":"Tue, 14 Apr 2026 09:30:27 GMT"},"fingerprint":{"sha1":"03:51:4C:01:E9:67:FB:62:C7:A5:76:D4:45:63:77:16:42:15:A9:C0","sha256":"79:76:EA:CB:6D:CB:A8:C9:37:C0:2C:47:99:3E:B8:2B:ED:91:C3:AC:CE:88:D3:2A:0B:E3:4D:11:93:70:67:01"}}},"request":{"raw":"GET /comistar.webp HTTP/1.1\r\nHost: check.safeaml.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check.safeaml.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:05:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17968\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 31 Jan 2026 16:09:37 GMT\r\nlast-modified: Wed, 14 Jan 2026 08:26:42 GMT\r\netag: \"4630-69675342-deaf2205b6bc6e74;;;\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\nage: 14134\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9YGCIDzjTxlQB9x8%2FECTct67xJNaIknvSB3MN9ZTAnoI%2F0h%2BUCDxnEiwyFU0gY6ihQE41jHBGgG8Gj%2BFwPof1henYahjlSFZykh4s8jhzQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3224f05ce45690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":17968,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3d3722efefed42cdcbaa90a8b964b9d1","sha1":"8514e462c3251717c43bd756a6ddbfcf0fe53787","sha256":"816bb854ca5c01e5881a3609f1b66a356e3c9c4ed1137ee1cf74814891082eaa","sha512":"61efb0b90d8aaa54cd9b37e7f89038d2fee952e82a6365b1ce556a35213c114aee059b013804628be609d535a119c96a66cab07305bb44afca18c7da6943e273","ssdeep":"192:cJhK2CsxwyHNkdkD64IvPouMew+Slt4zgrB/Ofi1AYreMDBsmgsqLDjtrzkoLwkB:TCNwUIXos4gibreMDBALDNzki8zyIRs","tlshash":"b682d03c6e81191ff3879425d620d0d051bb8ad58f132e9b1662ec941970bf8dee0e0f","first_seen":"2025-09-08T07:14:17.220026Z","last_seen":"2026-03-13T02:52:38.460711Z","times_seen":12,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check.safeaml.icu/binance-white.aed1452d.svg","fqdn":"check.safeaml.icu","domain":"safeaml.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check.safeaml.icu/","date":"2026-01-24T20:05:12.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeaml.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 08:32:04 GMT","end":"Tue, 14 Apr 2026 09:30:27 GMT"},"fingerprint":{"sha1":"03:51:4C:01:E9:67:FB:62:C7:A5:76:D4:45:63:77:16:42:15:A9:C0","sha256":"79:76:EA:CB:6D:CB:A8:C9:37:C0:2C:47:99:3E:B8:2B:ED:91:C3:AC:CE:88:D3:2A:0B:E3:4D:11:93:70:67:01"}}},"request":{"raw":"GET /binance-white.aed1452d.svg HTTP/1.1\r\nHost: check.safeaml.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check.safeaml.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:05:12 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1789\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 31 Jan 2026 16:09:37 GMT\r\nlast-modified: Wed, 14 Jan 2026 08:26:42 GMT\r\netag: \"1096-69675342-3e02086f6f28046;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\nage: 14134\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CM1t7NczUgjFfp5%2F1YGAAcDQByAmMy9josVH%2B6%2FOWt%2BbHOJNWLzJ3J0ieTfcJVpWwKvrvzTM4WGpraJ8v8537eBzGoptCrdbmT57731Niw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3224f05cea5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4246,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4c476922d1280fbf708b441a94631de0","sha1":"c07b648faaf8fd519f06e28684f75066537a40b0","sha256":"4873562ac2ffd2ddfc86ed3daa0674640414fcc1393aac0637abe443c66a7a0a","sha512":"a7d8e7ee55d2988241f1fa7e8801a8b50e3b8d0bbb75eea3519b05cd35d8054f205720d680b5e4bf27acb39ed135b2d59f66b516bc365c84ed1758f98ffa7b9e","ssdeep":"96:d+hJ940X5BHxFsfY4LcIddQ5IP+xGsft660wd2:dWfX5lLswUk6P+Us0wd2","tlshash":"a291a5da63dca1a0c447e7756707107bbe2b6cf9be2ac790465a5c9ebe1009e4c9dcc0","first_seen":"2025-06-28T19:36:09.204961Z","last_seen":"2026-08-08T19:23:42.310735Z","times_seen":137,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check.safeaml.icu/iso-9001-white.7dccc3d9.svg","fqdn":"check.safeaml.icu","domain":"safeaml.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check.safeaml.icu/","date":"2026-01-24T20:05:12.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeaml.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 08:32:04 GMT","end":"Tue, 14 Apr 2026 09:30:27 GMT"},"fingerprint":{"sha1":"03:51:4C:01:E9:67:FB:62:C7:A5:76:D4:45:63:77:16:42:15:A9:C0","sha256":"79:76:EA:CB:6D:CB:A8:C9:37:C0:2C:47:99:3E:B8:2B:ED:91:C3:AC:CE:88:D3:2A:0B:E3:4D:11:93:70:67:01"}}},"request":{"raw":"GET /iso-9001-white.7dccc3d9.svg HTTP/1.1\r\nHost: check.safeaml.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check.safeaml.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:05:12 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 8130\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 31 Jan 2026 16:09:37 GMT\r\nlast-modified: Wed, 14 Jan 2026 08:26:43 GMT\r\netag: \"4cdd-69675343-8ce0e660e5e968ea;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\nage: 14134\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5m3Ufxf5wnEmuUmxbmdKMske5tDVdqI9gFvyz2HQD0SJgXNkFw3CtTBuu8G9FDsVbZb9u1EV3Ihn8CEmKB6XSm6yuYz17XkUNGV8d6fRCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3224f05cee5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19677,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8c28f4bd77984f2c06acbc445f1682f4","sha1":"03a9804194719fd78dcff292d11f84122e4c2854","sha256":"eb4dd200961b89839c60364b7dc9bdc5607fd8573554d35ea277ed40af6ecb65","sha512":"2e83c1452c6ef94c0b654e7137d5de22d23f9d68b68ec06e7c736ea5d737df4dd791a17fcccb0dd218bd27687726f25ca87acc137fde9500db6a16fe819a02e4","ssdeep":"384:d2an7eUPM0UOJApWQn5WINHcaeH/kWmydydYtow20Wen6:oan7dbhAX5WIN8a9W7dMYt1Wp","tlshash":"6292a39833bae3f8f001f3f8c62664a9bf5e28d5b741d5b4c7912d12a44306dec958d2","first_seen":"2025-07-16T16:35:39.213828Z","last_seen":"2026-08-04T05:04:09.317979Z","times_seen":50,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check.safeaml.icu/","date":"2026-01-24T20:05:12.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 10:36:27 GMT","end":"Fri, 20 Mar 2026 11:36:07 GMT"},"fingerprint":{"sha1":"C6:6A:71:84:C2:40:13:D1:A4:B7:DF:C4:1C:E1:54:F3:76:97:EF:6B","sha256":"EC:09:93:3E:E8:5D:9E:7A:B0:D9:7C:6D:85:49:92:10:89:9F:C8:FF:A5:1B:90:BB:AB:86:7E:D9:BA:0A:1C:4E"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://check.safeaml.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check.safeaml.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 20:05:12 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 22 Jan 2026 17:06:04 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9c3224f08c68a0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-08-10T05:01:35.80685Z","times_seen":337643,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":13,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check.safeaml.icu/icons/aml.svg","fqdn":"check.safeaml.icu","domain":"safeaml.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check.safeaml.icu/","date":"2026-01-24T20:05:12.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeaml.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 08:32:04 GMT","end":"Tue, 14 Apr 2026 09:30:27 GMT"},"fingerprint":{"sha1":"03:51:4C:01:E9:67:FB:62:C7:A5:76:D4:45:63:77:16:42:15:A9:C0","sha256":"79:76:EA:CB:6D:CB:A8:C9:37:C0:2C:47:99:3E:B8:2B:ED:91:C3:AC:CE:88:D3:2A:0B:E3:4D:11:93:70:67:01"}}},"request":{"raw":"GET /icons/aml.svg HTTP/1.1\r\nHost: check.safeaml.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check.safeaml.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:05:12 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 655\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 31 Jan 2026 16:09:37 GMT\r\nlast-modified: Wed, 14 Jan 2026 08:26:44 GMT\r\netag: \"5ec-69675344-184d5a3d1423cf86;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\nage: 14134\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XT8qU6RTOil6HvlebuY00CaDmcLjSdHE5e15LHqiSyk0n50btZmpAYZ5eGGg9YI1g3tAFfiUVi9mEfGPYA0hqqEuvmUXs2uDYnEo1bobaw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3224f04ccb5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1516,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b91395d33df1799abaa6c9724ae03604","sha1":"6684343f93d43fe560d3aed52c45bb10cae615c9","sha256":"7376c9903f77c0d03f7eacf5ff5a40f264016c0410245dfba0f728620e844c0e","sha512":"83fbada53cfe0a60c0dc815a544d5c6f19e62c8d39867f9b8c09544c15e91f03e315b622bc3d21847c80a16808d1baa551f7a4e4b72e4c5f8811b59f60095828","ssdeep":"","tlshash":"cb3132b12ab970ae5dd68134e77958920f6eb1f1b10241cebc5e263190179cbf14ba24","first_seen":"2025-09-12T12:26:31.820587Z","last_seen":"2026-01-24T20:05:34.361176Z","times_seen":5,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check.safeaml.icu/images/home-image-gzJaQJ7U.png","fqdn":"check.safeaml.icu","domain":"safeaml.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check.safeaml.icu/","date":"2026-01-24T20:05:12.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeaml.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 08:32:04 GMT","end":"Tue, 14 Apr 2026 09:30:27 GMT"},"fingerprint":{"sha1":"03:51:4C:01:E9:67:FB:62:C7:A5:76:D4:45:63:77:16:42:15:A9:C0","sha256":"79:76:EA:CB:6D:CB:A8:C9:37:C0:2C:47:99:3E:B8:2B:ED:91:C3:AC:CE:88:D3:2A:0B:E3:4D:11:93:70:67:01"}}},"request":{"raw":"GET /images/home-image-gzJaQJ7U.png HTTP/1.1\r\nHost: check.safeaml.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check.safeaml.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:05:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 146551\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 31 Jan 2026 16:09:37 GMT\r\nlast-modified: Wed, 14 Jan 2026 08:26:46 GMT\r\netag: \"23c77-69675346-118d0d5091745433;;;\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\nage: 14134\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mOndBmYk3iZcFPz6S9MU3QzEe6cJvdcpEKlM8kG8Lp4PnQMVJVQzTrwPKhLXuWHZLMj39KlTmXOp3nAGbxq6m0YJ3XmFMw0dKtFiSmOIxg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3224f04ccc5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146551,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1512 x 2130, 8-bit/color RGBA, non-interlaced","md5":"9cad99dbdf29233a3e18fae89cbcdd56","sha1":"05d9639f849359af23082e722dd8bae99bfdf560","sha256":"b005f5a6875b15ca7957b90dbae8cf52e6ff1645b327d4b7ef90892401ffcff5","sha512":"9ab249cc09967d21d5a3cf2b75250c3bcc0305d5c0c693d9c7b55e62dcd0de734950c55f5ec6dcb3b5d091ff6d193892b5b27de3cb6a06065df1f7df84223665","ssdeep":"3072:GaDBLdkD1Y5RW69+1cVOA0gi52BytVMTSqXQfjo/n7:lDBLqqW6NV1+52BytVMuaqc","tlshash":"6fe3e058250b5d6ac84d86358beb4fb5f76c8ad94598fe1b0bb40276bcf7319cc83881","first_seen":"2025-04-08T20:33:55.226246Z","last_seen":"2026-08-05T21:27:26.066036Z","times_seen":479,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check.safeaml.icu/EBA.webp","fqdn":"check.safeaml.icu","domain":"safeaml.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check.safeaml.icu/","date":"2026-01-24T20:05:12.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeaml.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 08:32:04 GMT","end":"Tue, 14 Apr 2026 09:30:27 GMT"},"fingerprint":{"sha1":"03:51:4C:01:E9:67:FB:62:C7:A5:76:D4:45:63:77:16:42:15:A9:C0","sha256":"79:76:EA:CB:6D:CB:A8:C9:37:C0:2C:47:99:3E:B8:2B:ED:91:C3:AC:CE:88:D3:2A:0B:E3:4D:11:93:70:67:01"}}},"request":{"raw":"GET /EBA.webp HTTP/1.1\r\nHost: check.safeaml.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check.safeaml.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 20:05:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1792\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 31 Jan 2026 16:09:37 GMT\r\nlast-modified: Wed, 14 Jan 2026 08:26:43 GMT\r\netag: \"700-69675343-3e55f9d4f853228c;;;\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\nage: 14134\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=meTo19Gl5g6v9uO9n1rjZdEzycCdQ85nvfSAxboG%2FrE%2BNJbF%2BvwcjOr7zNm8ge6kyNvYMQ0XsX7iw0rFajSHx%2B4JiaL%2BLYwCcbE9BneBhQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3224f04cd65690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1792,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d1822014877c2090873360b1ca4fc55a","sha1":"5487e92bec14c4adcee960c36b4609ce18678dbe","sha256":"c6b90fce3fc8b7e2043f5ee4388cb23fe3bc3fdfa7b68130fdeca3397706ceb6","sha512":"35887a25df1fc25be45a29028f71ac301196df123844695f80bf09dbf66a2f7fa9f63a53c40f84f2d84416bb1f593e743a395ac38b549e742125dc0ebd1712d0","ssdeep":"","tlshash":"4c31e9c541b54a55eb8dbe6f0321b00b160169e452dcd44c628583f023e8be273e9a2f","first_seen":"2025-07-15T16:37:15.345082Z","last_seen":"2026-08-07T09:24:33.797957Z","times_seen":69,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}