{"report_id":"31c4a9ba-9887-4d67-8c37-baa3de210dba","version":0,"status":"done","tags":[],"date":"2026-07-26T12:40:44Z","url":{"schema":"http","addr":"safepal.business","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"safepal.business/","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"title":"Home - Safepal","dom":{"size":155017,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10411)","md5":"ed59a0c5c69ba046315160dd0578655f","sha1":"bb328f4fd697ba8ee09667ad69339e323d60a2a2","sha256":"c4597dc7e4b6ea25281d586fd827726a951e585b6292f4dd161d1ded550ea927","sha512":"2aa96a2b482652c9689fc0396e32a0eb0ded1e85efabbeffe0081e1caab4ed677886de83e0b4e4d81e503a23d3aca5aec93dbf4c4846c34630c5c24399d002c6","ssdeep":"3072:zLFVqngnROZfqOMvMG2Tevnpf4eRlx5ie5vOtn:tgnGOL","tlshash":"79e3c932b2e9107e211b43caa126670d59d2f747ca1546c5b3fc26e4dfface174a3298","dom_hash":"domhash3484072236dd6c8c3b6c7bba573bde9b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"safepal.business","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-30T12:40:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"safepal.business","ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-26T12:40:47.157215Z","last_seen":"2026-07-26T12:40:47.157215Z","alert_count":92,"request_count":92,"received_data":3628233,"sent_data":47564,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"WOW:1.1.3","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"All in One SEO:4.9.9","description":"All in One SEO optimizes a WordPress website and its content for search engines.","website":"https://aioseo.com","common_platform_enumeration":"cpe:2.3:a:aioseo:all_in_one_seo:*:*:*:*:*:wordpress:*:*","icon":"AIOSEO.svg","categories":["SEO","WordPress plugins"]},{"name":"Elementor:4.1.4","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"All in One SEO Pack:4.9.9","description":"All in One SEO plugin optimizes WordPress website and its content for search engines.","website":"https://aioseo.com","common_platform_enumeration":"cpe:2.3:a:aioseo:all_in_one_seo:*:*:*:*:*:wordpress:*:*","icon":"AIOSEO.svg","categories":["SEO","WordPress plugins"]},{"name":"Magnific Popup:1.1.0","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:7.0.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-19T22:19:42.520021Z","alert_count":0,"request_count":7,"received_data":226927,"sent_data":3920,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-19T22:23:13.155676Z","alert_count":0,"request_count":6,"received_data":171933,"sent_data":3690,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"safepal.test","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-26T12:40:47.158801Z","last_seen":"2026-07-26T12:40:47.158801Z","alert_count":0,"request_count":3,"received_data":0,"sent_data":1677,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"safepal.business/module/contact-form-7/includes/js/index.js?ver=6.1.6","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-07-26T21:48:14.880803Z","times_seen":228181,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/js/scrollspy.js?ver=1.0.0","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7aa8b76e807dbaa9d35c4082b69211b","sha1":"ffe295d1335c766c344c4693e667087c9e9c05d8","sha256":"33c1f07c9f75122906550f6e7dc28921ee38e1c49289dea996d2841185fb1586","sha512":"e656eb9d7d4df7579e8c07e84c06de0f7e11b1195630fc4d04b5ed8671e1c2d7010b200a89c81b624b99059320c6c26669f4e278e9271a036d63dcfbbabb1292","ssdeep":"","tlshash":"bef08b5f534050da937273b556771e94f22608e74907b94afc4c0ae02f70c2c40aafa8","size":617,"data":"","first_seen":"2025-10-09T00:47:09.876695Z","last_seen":"2026-07-26T12:41:39.430754Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/js/main.js?ver=1.0.0","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2802f4361e8b2a4311fd92ab486ceeb","sha1":"25114d2568685fb7443b60a728dc168a7deafdba","sha256":"ccf62d219340ae927cd19aeb4450c25ae1eaa184081bf041a02d26234fe0844c","sha512":"c499ccaa901ab78fa64783fe1fc93899025ee0036d41a5f75e138c23e43597b20b6d1c56bb2244ca1c7810a5864dead88240b30be6e6e56b1683e5857c4ed420","ssdeep":"96:Kqi+pqiliOjQdpHfVBCAgcKnivCLo2o5xKNz52wvao5gO4wFoR3LrL/1GIwxlPZ5:hNqiliOjQdNaAgcKniK02IxyUDu","tlshash":"e1320000be4da1be48fbf3ad957dc344ca6cd622c28b0578f4fd44680b845d5266eabd","size":11124,"data":"","first_seen":"2026-07-26T12:40:54.85329Z","last_seen":"2026-07-26T12:41:39.451132Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/wp-includes/js/wp-emoji-release.min.js?ver=7.0.2","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-07-26T21:52:22.040875Z","times_seen":18274,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/module/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","size":8481,"data":"","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-07-26T21:41:52.688389Z","times_seen":145530,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/module/cryco-core/assets/js/editor-script.js?ver=7.0.2","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"175909a23f7d909ab2e6ac6bca4cf7aa","sha1":"61dc9bcc914b7c0bc188719cb384a634496d3c00","sha256":"95c64066bdedbb1cfca0197bdc24fab91e4c04d99d2540d893c07a9c8c205226","sha512":"08bc2be250224447baf3972619487994549f41b260c827444ad63a2685350bd699dd5298ff0c5cbf51f93baa39b77df077642624e832e093d60f80bc0d149411","ssdeep":"96:dlq43v03SLNDkLeyFXFLNWYu2d202WSx23p2R2W4Yi:noKyN1H","tlshash":"b2c15618a06610360877773f2dbfa358e1a2536b40da09773efc46884ff29585599fbc","size":5950,"data":"","first_seen":"2026-07-26T12:40:54.772879Z","last_seen":"2026-07-26T12:41:39.357313Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"55c5129ccd0fa8f383d9de82a91c5877","sha1":"596918015fa62e4f18533b69b0e6822ebee3cb2d","sha256":"cce388fed1a82ebd20ce7d9601e4b6c83a425ea201c333d71b1183ee887cc090","sha512":"956ab39b4bc0577f0ac50a842bc7f71ac1d5b6f7148f9ba9bdb2a84001b96362f077d417144dce171464de8aac71ffd6e639e35ca12da4de2d12fddd660e64a3","ssdeep":"96:lu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:lGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"5ca151c43542b930e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5050,"data":"","first_seen":"2026-07-02T22:01:42.321596Z","last_seen":"2026-07-26T21:48:14.871499Z","times_seen":10569,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/wp-i18n-js-after","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"64f9d72d6fe63028520170f51e215035","sha1":"f4989e34ec8371aa836e7f88504ac8420cddf05f","sha256":"c2e98bc210e88ca0bbe3e261310fcaabe0bacb3ba2b929f53f802b9b64b48279","sha512":"a6713c1636992e306a94dc17f1e89e4ac5ed24a14501e9d9972adb04eb41084457071f0b7f743bdef7600799b189191cbb491843fe7161afc5877e214ba3b1ac","ssdeep":"","tlshash":"7f2112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":1237,"data":"","first_seen":"2025-12-04T10:14:32.429734Z","last_seen":"2026-07-26T12:41:39.454336Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/contact-form-7-js-before","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba124237e99678363ad4e0aa3aa16929","sha1":"c7e6fad91800173d7244d9a8065d624a1776752e","sha256":"6d4d2beacee6a94868b16250a5d16a873a4cd219edbc849c944f560a7a4f0017","sha512":"783e6c276feca6d88cf031668bd7f96848336e4992de8f49663192fc4593b7480babd2b97e5fa916ced9829f9d2b1894d2898c6f804007490006101713559710","ssdeep":"","tlshash":"a8218096d5ac2c5624e6c174057c1310f115a51bca1f5e45f70d008c6fac07ab9142c6","size":1318,"data":"","first_seen":"2026-07-26T12:40:54.878195Z","last_seen":"2026-07-26T12:41:39.455075Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/js/odometer.min.js?ver=0.4.8","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"869c145c351243e6cf5dffaaf48de47b","sha1":"7f89f225c373ee4b7009eddca7ddd939b8c753c3","sha256":"7bd40aff9cb9e93cb586956acd6f2b57a94a6a381060563ff80d87efada91a80","sha512":"7c75549a78bc47713c4eeafef42f09bd7b4b8a2bc95573b1fa76f54047bdaaa116fa941d2487ab25942143aed5f744a1b28e1e083b2dcc25f68dda78004e0ed5","ssdeep":"192:RvPkLkNjcBQiqmchU752Z5m0hJbkHXndKyXmaWZakf0e7ywB:RvakNwBQi35y5m0fk3ndKyXIZak8yB","tlshash":"8d32551563e1263ed207e1b19eef8d44b3799d29a194808fb51cd8e958308384b7eff8","size":11925,"data":"","first_seen":"2025-05-07T16:14:09.817583Z","last_seen":"2026-07-26T12:41:39.3411Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/js/jquery.magnific-popup.min.js?ver=1.1.0","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","size":20216,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-26T21:55:06.268777Z","times_seen":71897,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/js/countdown.js?ver=1.0.0","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"090e95cea03ef7b30ee6c55fbe6d2495","sha1":"6f918a81b922dc02da8d433ec92692b0a6f49e20","sha256":"cd95a6ad9ff6340629938a0f62eaa589b20af50ce49516e30f8fd452e8c7ac3b","sha512":"b698007e5c7ec30a3ebb282603961f39893a20b6c1d4b4debfa81503e5b1d2881ac2f83ca02dac0532b2a2624080e402669cf17ca6750cbae2707e24d86cb7fc","ssdeep":"96:LBXpuplQHIwbeRFMSiM3jG6vrhdynv/2bBqz2eOj28xMxHxqxAxixw3xexbixrxS:kQHnUpxvrhdBqztOj28xMxHxqxAxixwo","tlshash":"7ab1c6ceb3b2139509a5539201ae1106a27bf15be4d7001cb5fceac87a75c9d606fd78","size":5394,"data":"","first_seen":"2024-08-20T11:00:55.627692Z","last_seen":"2026-07-26T12:41:39.450452Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/module/elementor/assets/js/frontend.min.js?ver=4.1.4","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c6aa09d0faf7577c8ae64d43b8241ad","sha1":"9d31e838cc042539556ca9223a635349f6e4af35","sha256":"1842d6e4d3c7399fdb01ab4b0a7dd5c1d9c096110de0532181ed581f14e9e813","sha512":"d754acb067d44f5fd9648cc63b6da0e95166a48d50a25dcfb378a6a5cd8c94334413c4466e598d01830a1cab6b183cf4812ac68500ac8e6d64ceabe45f5c46f3","ssdeep":"768:D1c+6idHZRdzM4ZBOBTmduNFXaz1EfcJR8RjDKv//Dk3iHVgbpMYMLKEnzBc5Gkl:ZcURdzMMBOB0mFrcJR8RjD8/xHVlqEni","tlshash":"0de208523296e866069f48a3f0231119f3775dd9b80af0d5b2bcdce5a471e877362b34","size":32098,"data":"","first_seen":"2026-05-18T18:48:00.243251Z","last_seen":"2026-07-26T21:40:24.895484Z","times_seen":18646,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/js/swiper.min.js?ver=6.7.0","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"719e22b4d2d5bf2a6519135029b10d11","sha1":"4702b30a291fd18432b1448aac2888cc52f53700","sha256":"3fe5e9993bc4afcd8c2e1f7f08d505f1d9189a3732758e990e86cda77d7b6646","sha512":"04768d9f772190f31ac880bd1e2939a89ff9fefc78a72ad0ded0fd1e15fe7ddf2e7efba12d334a04b830380eaf5674f580b28de04f5d19ea3931c066c1015814","ssdeep":"3072:bsoRHlzxaABr3SoMcrOpADH79cVOXj7qWlve:IoR5xNSoMcrOpADH79cVOXj7qWlG","tlshash":"a3e31889b364b2e151e73256539ed10263b65805b80ad1a470768cd7acbde8c03bfefd","size":145415,"data":"","first_seen":"2023-08-17T17:06:37Z","last_seen":"2026-07-26T12:41:39.422534Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/js/appear.js?ver=1.0.0","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b2fc9c1552372b269b85194bf8ff2e8","sha1":"1614ceb23c3cd597b8c73186426cfca84a3d38b1","sha256":"3e4628fe50187cd9d1c919cfae2bbaa7541e08edce51a08208d6b67763d16f59","sha512":"8bc94b8a3506a55a1c2cb5baca27133705add20ad53c585a004c57c93dc1ec3b4ebb747fb119d4cb6de505d07b44593c5c0109b11f2494d26054f59a1550e8a9","ssdeep":"","tlshash":"6d51ac8838436c60283b637eaa2b2108f72646774202866174ed599d3ff1d25e1defdd","size":2975,"data":"","first_seen":"2023-03-11T23:21:20Z","last_seen":"2026-07-26T12:41:39.40566Z","times_seen":316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb723d749493893fef00de4a102d5b14","sha1":"83e4d476c5ce53d9fd2a5f07a72db8395c5be20e","sha256":"5025f2112d7c4786e6cdd0d8becf512b1a989a81c5f37fa072c3ca944ca9211e","sha512":"bac6e6754071aa4499cda15909e69619377a5f862a69a99ad4b5577143b8bcadac6ddafbd243f0754f6602063c5bc3c629027c5f767c90d71861b7952764d479","ssdeep":"","tlshash":"c411ccf3b7dd907fba9e6d66593402cd5a1d90735c110a5bfeac3575cc8442534b1d40","size":913,"data":"","first_seen":"2024-04-17T16:07:41Z","last_seen":"2026-07-26T21:43:09.834595Z","times_seen":32937,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c749255f0c7603b90f6196e3087ad6","sha1":"87ca6ed12bb4d899eb515fcbf1b06cd77bfecf35","sha256":"6c91320d2a35084146720e73b9eb506f8f042d304770136f76fdb279d3e82c90","sha512":"17c60dcf3f92c9719372b169ccdad70f329b88e816784043bc83bab6fae403aecab83deda08b8a8c2727ad201d11b2641646e45548d69e9accdadeb0566a3038","ssdeep":"","tlshash":"02b0128b74a73d50828fc7b44d23ba014510208782afc50875e59d3096718c0b4c352f","size":97,"data":"","first_seen":"2025-12-03T09:23:15.289558Z","last_seen":"2026-07-26T21:48:14.912335Z","times_seen":33676,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"7f9896a11fc4295be76b939ec31b6e5b","sha1":"413376a113b90ff844be14e6ddee90d63257a391","sha256":"de31a88840c85bdc71db5c2b1bbf37430dd5842e8c84196016b252cafdf8a611","sha512":"f1a2ea1f9bfbf1f7e3e91ba2bda90c571d6cfdc16ae5273dbd9c8fc1a27b6289e26141da1b9d048c9f6f7a5b4fcad4665c7ecd93abcd2e3793edb74795afbaa2","ssdeep":"","tlshash":"89c0809694ac2c5624e6c144017c1310f115a517ca1f1e45f70d008c6f6c07ab9142c6","size":173,"data":"","first_seen":"2026-07-26T12:40:54.87062Z","last_seen":"2026-07-26T12:41:39.457982Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"ee793161838959947caabc1db7d521e2","sha1":"bd0a1a5dfd017b51c4e28ea6975e41ac58bb0123","sha256":"9bc440a57f5241496d347ad15674eea47cbe47b87f15d8bd3f70f015176cc867","sha512":"7747aa2a88f795e268a25c883b36bd413a510a5f0232a2cbec130bc2e69dc0b790cadc7c2461b743b90185f047864ed764e078e279f3bb3ea94a044a2e524949","ssdeep":"","tlshash":"9551732175452e7f86d797813927bf07693c0527904078a6f8fc48ad10ba96a3307ea7","size":2873,"data":"","first_seen":"2026-07-26T12:40:54.872169Z","last_seen":"2026-07-26T12:41:39.459037Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"12ebec1b36678eb1da4412af6c65751a","sha1":"4cb5d87353d9a06fde067063787a4beed692ba77","sha256":"558ae0ec83cc88de0929fde86b87c231246aafa9c961ebffb3257b05f62ca5cf","sha512":"a1bbd93277a59086bf27da7dcc60434b717ac521bce0618aef7c914789497a22cf56441a7f300f1bb7a6de56ca624226883d048f6eadbcc049dc717338189bb6","ssdeep":"96:IE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:3hgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"fdc1a7c975daf056235910a594afb005e134be2870debc00aae0c4957eb44cdb2b7fba","size":5732,"data":"","first_seen":"2026-07-02T22:01:42.315643Z","last_seen":"2026-07-26T21:48:14.886001Z","times_seen":10339,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/module/contact-form-7/includes/swv/js/index.js?ver=6.1.6","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-07-26T21:48:14.86803Z","times_seen":220630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/module/elementor/assets/js/webpack.runtime.min.js?ver=4.1.4","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d490d1bad7e9038b5741f77a7bcee6c","sha1":"64f3096d6f0121949d2b88ef19d4b9adcf38fd89","sha256":"8dd3674bae946e2e04bc962443f0994d736a761bb28e816c20aee6391ef242ed","sha512":"9860efe572a0bda18b274965bc81ae0f513a1c826eeaf9b67cc7b6cec2b78164a67ee15f586e63905cf6b8cc520b00039ff7e9e1460b32dd0977dc4a85cd24b2","ssdeep":"96:+nsL0Z9Z4JfrjqyWiNDy9XOWZp5Rm4leN8EVrzLyVx2UlKBKGarNcl8/2:WsLGyrjiiNWZ5RmHFJW6x7G/2","tlshash":"1cc161941a54fd2b21e139d8e01ba775253ec0373c1af981fa32eced54e4ed087aa531","size":5819,"data":"","first_seen":"2026-05-12T16:52:28.591446Z","last_seen":"2026-07-26T21:40:24.894936Z","times_seen":17801,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/module/elementor/assets/js/frontend-modules.min.js?ver=4.1.4","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3543601e9c09c9b8554ec6f6c8a2174","sha1":"8b05f21356996037f9d17fd012f43393238ac53c","sha256":"c66f47147d5fe3cceeaa47a93ff7440a328f859b049deec2f9d8f414e9137474","sha512":"3b5d80182a9b187171ceb59b4d384ad6b5e59dc0f5890cbdc0fb01109423a3ed847cfa88d67a0db8c84ed163985fb035b069f0530cf9b7a579c4ed47e67f56e9","ssdeep":"1536:yCyQ5RSSYeAjA6c9CST+I83Fy0K4cR8+yhiA2pXSz2faNQAzeLHeBHmjkVziNT:s+uhIAu","tlshash":"7633d9853652f4b70beb45da902f440af25718a8a40df4d5bfe9dce194b0d8e133ab78","size":50602,"data":"","first_seen":"2026-03-23T23:03:30.149895Z","last_seen":"2026-07-26T21:41:52.641109Z","times_seen":53207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-26T21:48:14.860725Z","times_seen":909606,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/js/bootstrap.bundle.min.js?ver=5.0.0","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"a447ac8d6eb2d76167d66fb729494682","sha1":"d2bdc99858793e0bb5408c75ca6efd39606b72ae","sha256":"f200de74197ce4d398afa19a632d72c0b41d8c7396b229b64744a9a4b88897eb","sha512":"ab05c1fef188af937c5435a81684a0135c180575a86f69c232bfb44ce4ab4392eaffd5be34135ed9e73637c7e9ba3db731a69b26fc4b885c534ea6fc9683e765","ssdeep":"1536:7mwziELO+TBR2t472RirWyKsVfK5GEfy3YJtCRv/45wZbqbXZTbYWUZ7P:awmza3YCl45wZODZTbYRP","tlshash":"4e73c5593244b4730ada85b68037430bf3265998b24b812cb57cadde2a7dcc67277f78","size":80619,"data":"","first_seen":"2023-11-23T08:24:53Z","last_seen":"2026-07-26T12:41:39.42723Z","times_seen":290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/js/wow.min.js?ver=1.1.3","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"7649aad001712a85c1158eddd81b449f","sha1":"f746c9a26c5ec2e5a87c7f279cc14a4c5a9092d0","sha256":"fbdad539deb41318f96d4dd7226ac8036f5ceba505947ebfa40f75d235982d25","sha512":"a4dd940ebb72013cea4ba0d7bbc1622cd87f7d10d8c3bf2e77cdf5aa652c847118dac769119b92d01c984f72f724c17fdb0a501df5d9c9c051cb1e19c8434390","ssdeep":"96:DrZgL1xvPV6GqKgR6TYLWHFMLJA6pOROVEE1fosvGeaMozHImBaoqb5v:Dry9PVfIFrlAJROVEEdos+eatzHILoKv","tlshash":"b00267c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","size":8420,"data":"","first_seen":"2023-03-08T16:45:12Z","last_seen":"2026-07-26T12:41:39.358894Z","times_seen":228,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/wp-includes/js/wp-emoji-loader.min.js","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"96091e5121005b11c30a0536a8eba343","sha1":"0a6bf4b76952227a4c4fb311b3d97fae1e856425","sha256":"e1d2b9ae5d1360e171959f970da04044158b5e1d4a4925749aeaf64a0271d726","sha512":"b7237e436746c6cb63759751a1d0ebd8321ecf2b2f2265f486d21b2d15093de8af2a92ec59b7a9d920bef133d073cc4655b5d39bfed0176657df5b2edb8e10ae","ssdeep":"96:8vcHtHRA5NTDXnM2E0+1lfYsPHgRhR3S6:ZN0LE0+1lfYsvS1","tlshash":"5f81759ae77a38dbb2f900f2697a0d47eb614435e6c8d438c9bda31418b5893c274b46","size":4144,"data":"","first_seen":"2026-07-26T12:40:54.874881Z","last_seen":"2026-07-26T12:41:39.453215Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/js/easing.min.js?ver=1.0.0","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9f891207023a4902eea3ded4de657f3","sha1":"9e4984541d1436d1e7ef70294c28e0e20ef5b051","sha256":"0e11138578b1352be499728784cdc9e623aa8bc4a75f0580c0d04eb953835c9d","sha512":"c2d706a0658d347860085709a4e91f7621fccb70fc3c9888bcb83853a9e0bd50cba9e937eb06fff11cfed92a2fbc97a126deff42ef10dae7823af1f02759dd43","ssdeep":"96:8gWRsXW5cT1Z1PkRD3b9zkZOkHQXZLifQ19YynPxX3sles/1bOO35hQTvyW3N+Lp:8zOZTX1s9ZMF2x6Q3PPBwDx53WqWd+IE","tlshash":"d2916e5435de780f5396776051378006e2bdfa22c85da53c984ccc9839e0a2797abfac","size":4465,"data":"","first_seen":"2025-05-07T16:14:09.924001Z","last_seen":"2026-07-26T12:41:39.349652Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-07-26T21:48:14.863549Z","times_seen":333008,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/elementor-frontend-js-before","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"129e8fb9be12a0793032d5b94057fb76","sha1":"3d480d98ff696842719ec7aaaa2d4db466f79eba","sha256":"e9c183083395c77134e26ac99e0cc05dd8a670d97da8b3e6510d3fa927ec1df8","sha512":"791ea13d042ccd32b22eb60ad205f7e4cb922ffd173a837d5dc8f099739417b9e363b51e915601b942ac5172be3d25a82e7cf7e7b56424bf8a6455c7b4d67713","ssdeep":"","tlshash":"f7816321f5452d7f86d797b13917bf07693c0527d04078a5f4bc48ad10ba96a2307e97","size":4042,"data":"","first_seen":"2026-07-26T12:40:54.876618Z","last_seen":"2026-07-26T12:41:39.452182Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-26T21:48:14.84476Z","times_seen":991987,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/js/parallax-scroll.js?ver=1.0.0","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"369b22d32401862c344eea378209fedc","sha1":"040eeced817193c5f4143530e620d151d82f0cc6","sha256":"a6da22b5197f335ad60ed6edbde2828564109bc3bf253b64403e3f4e2d257564","sha512":"ce466f73be6e2bd7ea68a04c8dbed80748067f1a3f42a46a7a1508d27dfd36eb02c13564e8f717e3b18f0b55c6017345dfa6cef6863d53efbe39271b64a10cfa","ssdeep":"96:NzpxwQT23ldKp+1z6oOFCs6nOCsgkCXCs52WtQTJQKKHXkOj7YCb1eD3bCCjmb/:NFxj23nKLl6nOlgkWlkWtMQrYSO3bCCG","tlshash":"06b12141f1110976d2fe7132811d135bab3e7a5be215847cf34e9e9c4b80a30a3de62b","size":5485,"data":"","first_seen":"2026-07-26T12:40:54.807425Z","last_seen":"2026-07-26T12:41:39.394639Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/module/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b272ececde530e5621637a7e529abc8b","sha1":"a3fedafc836049d71aa3b1d9ddc1debcd6f73dd2","sha256":"4543f55b0b8bc8fe912da8ddd1da7b07d0e8d3e77a824295a6bccd90d4f8aa13","sha512":"d2efaf6be07605e855c348a6fd5aad58520f20912188578a3711de8840a9cd29e41860b49b36d3d7a72082077c9dcdfe8571e0279985a771cac102a520f7b020","ssdeep":"","tlshash":"f62112b371a2dded48df148a34522d16f2574d5db8caa01ef5aa08df24b2e843362634","size":1348,"data":"","first_seen":"2025-10-22T21:27:55.827503Z","last_seen":"2026-07-26T21:41:52.662658Z","times_seen":123870,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://safepal.business/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"safepal.business/content/uploads/2024/04/feature-icon2.png","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.475Z","timestamp":1785069616475,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2024/04/feature-icon2.png HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:45:18 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 13526\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13526,"size_decoded":13778,"mime_type":"image/png","magic":"PNG image data, 98 x 97, 8-bit/color RGBA, non-interlaced","md5":"022340e079a2db7acc58a9deae3a5e21","sha1":"b9a1b7e5b2ab1536c46079e1a920cbc7f680e13f","sha256":"1d67d5214428a61cf364d76f6ebdebf9bd279f9951cf4679aa8f510f53c439ae","sha512":"6b6b60d270a26f8f1db1d31dddcd7648a37942bdae54f5c808df9fa0a73a6afa4e72ae65de4475b0b2a794a7bb57cb7ed25272757cada71dca432fc7bf33581c","ssdeep":"384:BDKeC2gjyy1Ki5M0c15yyPEsRdhiR//tP5DWmvcU2Mh29:NKeC2grxM0cfrPE+iZ/t1vcU2MI9","tlshash":"fd52d06e1c0a10adfa786df42935db454ad962bcc263631d1e5feb468a23437c62e406","first_seen":"2025-08-11T12:46:19.261094Z","last_seen":"2026-07-26T12:41:39.42182Z","times_seen":8,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/2024/04/partner_14.png","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.571Z","timestamp":1785069616571,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2024/04/partner_14.png HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:45:16 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 2427\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2427,"size_decoded":2678,"mime_type":"image/png","magic":"PNG image data, 106 x 32, 8-bit/color RGBA, non-interlaced","md5":"6a23490589d34728051de9a96534fec9","sha1":"6c51725ab651d2240baf43811b6df9a9be6a46dd","sha256":"98201a706be020edb3e60e5924d749619eef71aba23d4688f5f3b577fb1011a6","sha512":"7d4f00ea8ffbd29aacf3e7f3c4dee4978e9d65f16c6f840f8c0a3aa288e26268752372aa29dbf0b6ccf930d15b70162a77f542a92e6e4e44c48c8e1ccd7502ac","ssdeep":"","tlshash":"c7413b9a6fb9126b25237c7f32df8264799318ac9111a588bc2171d81608f602b7b7b9","first_seen":"2025-08-11T12:46:19.36769Z","last_seen":"2026-07-26T12:41:39.434917Z","times_seen":9,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/2024/04/partner_09.png","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.580Z","timestamp":1785069616580,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2024/04/partner_09.png HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:45:14 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 1073\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1073,"size_decoded":1324,"mime_type":"image/png","magic":"PNG image data, 91 x 27, 8-bit/color RGBA, non-interlaced","md5":"ae1bdc6807e219522c6d64a9e894f336","sha1":"aa24771839115d772bef2acf72614468b14badab","sha256":"79cf3e561ab6db4f479637ee5642883b0bd88ddb1d1fc9544a5013cbdc097d64","sha512":"865a1d4f99724d4afb5f1cea2d12c31604d8e536287b91037519009f93be8740eae87c503a0bff3a0ced4c7225e366ae63592c8bee40e2c207d37c5a6ebea806","ssdeep":"","tlshash":"281186ce7b5f6a3cde4d193b69528becc05734f052eb3824ad10db02ec41949259b76e","first_seen":"2025-08-11T12:46:19.333376Z","last_seen":"2026-07-26T12:41:39.356319Z","times_seen":8,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/2026/06/stars-5.svg","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.584Z","timestamp":1785069616584,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2026/06/stars-5.svg HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 22:30:54 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 902\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2362,"size_decoded":1181,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"95bb1f359b12b83ac119b8fd3286ea8f","sha1":"77ab6bfb74d601011e0f11952703c5a4b8e4a315","sha256":"05b6c15d1574c6c8d4c05e523cd7df0f866eb02f1b47ae89bab414747a6fd2e5","sha512":"cbe949e8c7aa01b37d287afae1b1e580d8d7fc4a9d20c6564c4fccd1be535f1c2572888531a5fb52ea644a79a8507854ab5bf4b7079cf4f481957780afe4c554","ssdeep":"","tlshash":"184180d4b4b434068ba853c087ff4dd6c56db2aba395018f737ca5d515248deab4fa04","first_seen":"2026-07-26T12:40:54.755932Z","last_seen":"2026-07-26T12:41:39.347254Z","times_seen":3,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/module/contact-form-7/includes/js/index.js?ver=6.1.6","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.654Z","timestamp":1785069615654,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /module/contact-form-7/includes/js/index.js?ver=6.1.6 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:40:54 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13452,"size_decoded":4606,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-07-26T21:48:14.880803Z","times_seen":228181,"resource_available":true,"data":null}},"time_used":581,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/js/bootstrap.bundle.min.js?ver=5.0.0","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.655Z","timestamp":1785069615655,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /template/assets/js/bootstrap.bundle.min.js?ver=5.0.0 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:20:42 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":80619,"size_decoded":25044,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"a447ac8d6eb2d76167d66fb729494682","sha1":"d2bdc99858793e0bb5408c75ca6efd39606b72ae","sha256":"f200de74197ce4d398afa19a632d72c0b41d8c7396b229b64744a9a4b88897eb","sha512":"ab05c1fef188af937c5435a81684a0135c180575a86f69c232bfb44ce4ab4392eaffd5be34135ed9e73637c7e9ba3db731a69b26fc4b885c534ea6fc9683e765","ssdeep":"1536:7mwziELO+TBR2t472RirWyKsVfK5GEfy3YJtCRv/45wZbqbXZTbYWUZ7P:awmza3YCl45wZODZTbYRP","tlshash":"4e73c5593244b4730ada85b68037430bf3265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2023-11-23T08:24:53Z","last_seen":"2026-07-26T12:41:39.42723Z","times_seen":290,"resource_available":true,"data":null}},"time_used":634,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":634,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/js/wow.min.js?ver=1.1.3","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.658Z","timestamp":1785069615658,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /template/assets/js/wow.min.js?ver=1.1.3 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:20:42 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 2798\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8420,"size_decoded":3080,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8385), with CRLF line terminators","md5":"7649aad001712a85c1158eddd81b449f","sha1":"f746c9a26c5ec2e5a87c7f279cc14a4c5a9092d0","sha256":"fbdad539deb41318f96d4dd7226ac8036f5ceba505947ebfa40f75d235982d25","sha512":"a4dd940ebb72013cea4ba0d7bbc1622cd87f7d10d8c3bf2e77cdf5aa652c847118dac769119b92d01c984f72f724c17fdb0a501df5d9c9c051cb1e19c8434390","ssdeep":"96:DrZgL1xvPV6GqKgR6TYLWHFMLJA6pOROVEE1fosvGeaMozHImBaoqb5v:Dry9PVfIFrlAJROVEEdos+eatzHILoKv","tlshash":"b00267c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","first_seen":"2023-03-08T16:45:12Z","last_seen":"2026-07-26T12:41:39.358894Z","times_seen":228,"resource_available":true,"data":null}},"time_used":629,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":628,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/module/elementor/assets/js/frontend.min.js?ver=4.1.4","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.679Z","timestamp":1785069615679,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /module/elementor/assets/js/frontend.min.js?ver=4.1.4 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Sun, 05 Jul 2026 23:18:11 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":32098,"size_decoded":11042,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32098), with no line terminators","md5":"1c6aa09d0faf7577c8ae64d43b8241ad","sha1":"9d31e838cc042539556ca9223a635349f6e4af35","sha256":"1842d6e4d3c7399fdb01ab4b0a7dd5c1d9c096110de0532181ed581f14e9e813","sha512":"d754acb067d44f5fd9648cc63b6da0e95166a48d50a25dcfb378a6a5cd8c94334413c4466e598d01830a1cab6b183cf4812ac68500ac8e6d64ceabe45f5c46f3","ssdeep":"768:D1c+6idHZRdzM4ZBOBTmduNFXaz1EfcJR8RjDKv//Dk3iHVgbpMYMLKEnzBc5Gkl:ZcURdzMMBOB0mFrcJR8RjD8/xHVlqEni","tlshash":"0de208523296e866069f48a3f0231119f3775dd9b80af0d5b2bcdce5a471e877362b34","first_seen":"2026-05-18T18:48:00.243251Z","last_seen":"2026-07-26T21:40:24.895484Z","times_seen":18646,"resource_available":true,"data":null}},"time_used":849,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":849,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.388Z","timestamp":1785069616388,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://safepal.business\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 26 Jul 2026 10:13:59 GMT\r\nexpires: Mon, 26 Jul 2027 10:13:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 8777\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24836,"size_decoded":25647,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-07-26T21:51:05.17092Z","times_seen":35771,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":51,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/module/contact-form-7/includes/css/styles.css?ver=6.1.6","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.386Z","timestamp":1785069615386,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /module/contact-form-7/includes/css/styles.css?ver=6.1.6 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Sun, 26 Jul 2026 12:40:15 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:40:54 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 1065\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2979,"size_decoded":1340,"mime_type":"text/css","magic":"ASCII text","md5":"b2b463a5bdb73833be2a6afbc1843ddd","sha1":"ade55e90dd7694b7974edd336b555e765967e702","sha256":"a3b9f5df6bf638a4cb583480bed6e18a84ad7141cc3d75b81094f91dd7b82f32","sha512":"431fcb88c720bc2ee3cd950772bbf03194b28f5a00c602287ea4877829ed377f0742dcff523e88e07dd4a7968ea8618fae59b883617d9112d61feee5167ae191","ssdeep":"","tlshash":"aa510264660028504bff92db6eaddb047b6e7481cd1faf97b0c21a7c57782851223e5e","first_seen":"2026-05-15T04:06:26.038056Z","last_seen":"2026-07-26T21:48:14.889683Z","times_seen":17097,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/css/main.css?ver=1.0.0","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.585Z","timestamp":1785069615585,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /template/assets/css/main.css?ver=1.0.0 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Sun, 26 Jul 2026 12:40:15 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:20:42 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":233430,"size_decoded":36663,"mime_type":"text/css","magic":"ASCII text, with very long lines (334), with CRLF line terminators","md5":"5f663db6059100bb5f933b7e5e09d4cc","sha1":"dba6fe382d8bedc07ee0f882e4c450ae4b4eb2b4","sha256":"77e03c13fb4108e90317f16b50556228e7cf0af7d35cbb45b93a0fda5bc6a332","sha512":"445c92d52ceed1a92244623df316947a863574facd347cc57f0aaa8dc1dea09431d4f88abe5f2036a8711b2a1d98361d9d4dd45ec0372f0935c6c1f240000b86","ssdeep":"1536:kGNPRvCkSv799Y31hpsvzWdGowwA8dL43UiKMT87oXIQxMUWoIljlwfYu:fjpsvzWdGowwA8dL43HKMY7oXYwYu","tlshash":"9c3463579e0510486137e378e7e78b54fb38502397021aaeb7cc254adfb979c01a9f8e","first_seen":"2026-07-26T12:40:54.832023Z","last_seen":"2026-07-26T12:41:39.384661Z","times_seen":3,"resource_available":false,"data":null}},"time_used":469,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":469,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/elementor/css/post-8.css?ver=1784797837","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.591Z","timestamp":1785069615591,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/elementor/css/post-8.css?ver=1784797837 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Thu, 23 Jul 2026 09:10:37 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 380\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1168,"size_decoded":654,"mime_type":"text/css","magic":"ASCII text, with very long lines (1168), with no line terminators","md5":"1775b4ac7b8b56908d9aa599a8b4550a","sha1":"d2207238acbb328097b88f1b0997fba5984de5e0","sha256":"cb940e53a5ae591f123d3c14f65dd7acd091ae5c0904aeecc7f6d6f5908cf405","sha512":"3cd941ecb5f9f106f38bf76adcca756a67967f2def24c346f6fa351013633cc81dcd9597d68d2197d1e07842223d29938768e48af03a77e1cf5fdf0967b876d3","ssdeep":"","tlshash":"e62125457a23d432e17b093f91c3b02c112cd46fa25f8adff41c9649f9bea462228647","first_seen":"2025-07-20T15:36:03.499438Z","last_seen":"2026-07-26T12:41:39.418946Z","times_seen":499,"resource_available":false,"data":null}},"time_used":496,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":496,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.600Z","timestamp":1785069615600,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css?family=Roboto:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 26 Jul 2026 12:40:15 GMT\r\ndate: Sun, 26 Jul 2026 12:40:15 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100764,"size_decoded":3497,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"9e6b9ba92c3c07c25c3a64a82c98afc3","sha1":"3ddff674c5f9cd149de491cf5df81c1074eaf397","sha256":"3d675aa2a0daa5e5b0080f14f3335f2d7a15275badcc418deba1e740a5ea55ab","sha512":"097289d7ac1a663cb14fa54e87356c82d88f82ae9574fa4cdd23333e1a98d3e9241d11fbb3d3cf34b52bfa7aac3d625d2bccefeb40fae26970f0e20d0b4751ab","ssdeep":"768:yDdD9DADNDgBDUKD7DnDdAgTQgUUhaWWHncXgLUahdPuOJ+gaULUIIV1ClghUULD:GZQDSVUvWtALyl83uRf","tlshash":"e2a30e91041b5440ab834ce223cebf35fe1f92507141d0b9abfc9b6baddbca6526835c","first_seen":"2026-02-19T22:36:20.76028Z","last_seen":"2026-07-26T21:03:28.637236Z","times_seen":16458,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":50,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.607Z","timestamp":1785069615607,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Fri, 09 Jun 2023 11:49:24 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":5246,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-26T21:48:14.860725Z","times_seen":909606,"resource_available":true,"data":null}},"time_used":518,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":518,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/2026/05/pngtree-cyber-security-golden-shield-protecting-world-globe-from-threats-png-image_18103190.webp","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.627Z","timestamp":1785069615627,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2026/05/pngtree-cyber-security-golden-shield-protecting-world-globe-from-threats-png-image_18103190.webp HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/webp\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 03:10:36 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 13996\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13996,"size_decoded":14249,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d9a8df81864c7d8e8e8408ac52920a8a","sha1":"a4b8477f8a8076e3439f3bb2414c12d4fa157243","sha256":"9ec50d716fbff67405e65159d1aa688033a6f8600502bb86a40540b29b160274","sha512":"64de6d8917533a6824476757d3fb6e7ed19820366429cf04e0793b5f7be5f9cc611b0951cc9f9ae0e035722c9eeeaa925cce687727e0281a7ecd3eebfa5c0685","ssdeep":"384:qu0gUDOW4fzMOb3OIEYYPbUCOFnLPcCBo3WLpL/YrmllNVY+XrqJAI:qu0zOWozzb3OIEFNOZLfBnLhBlXVYaON","tlshash":"8f52c0809839e697fb370960bbaf0b0871e2a5a3436d0c92159a08544de3bf0fbd0d0b","first_seen":"2026-07-26T12:40:54.718446Z","last_seen":"2026-07-26T12:41:39.393493Z","times_seen":3,"resource_available":false,"data":null}},"time_used":610,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":609,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/js/scrollspy.js?ver=1.0.0","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.670Z","timestamp":1785069615670,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /template/assets/js/scrollspy.js?ver=1.0.0 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:20:42 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 350\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":617,"size_decoded":631,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"e7aa8b76e807dbaa9d35c4082b69211b","sha1":"ffe295d1335c766c344c4693e667087c9e9c05d8","sha256":"33c1f07c9f75122906550f6e7dc28921ee38e1c49289dea996d2841185fb1586","sha512":"e656eb9d7d4df7579e8c07e84c06de0f7e11b1195630fc4d04b5ed8671e1c2d7010b200a89c81b624b99059320c6c26669f4e278e9271a036d63dcfbbabb1292","ssdeep":"","tlshash":"bef08b5f534050da937273b556771e94f22608e74907b94afc4c0ae02f70c2c40aafa8","first_seen":"2025-10-09T00:47:09.876695Z","last_seen":"2026-07-26T12:41:39.430754Z","times_seen":13,"resource_available":true,"data":null}},"time_used":783,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":783,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.test/wp-content/uploads/2026/06/1.png","fqdn":"safepal.test","domain":"safepal.test","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.302Z","timestamp":1785069616302,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2026/06/1.png HTTP/1.1\r\nHost: safepal.test\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T21:50:45.967557Z","times_seen":17550659,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Outfit%3A300%2C400%2C500%2C600%2C700%7CManrope%3A300%2C400%2C500%2C600%2C700%2C800\u0026subset=latin%2Clatin-ext","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.572Z","timestamp":1785069615572,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css?family=Outfit%3A300%2C400%2C500%2C600%2C700%7CManrope%3A300%2C400%2C500%2C600%2C700%2C800\u0026subset=latin%2Clatin-ext HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 26 Jul 2026 12:40:15 GMT\r\ndate: Sun, 26 Jul 2026 12:40:15 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16087,"size_decoded":1553,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ee5287480b51a35c3d0482db9c3b14d8","sha1":"f21e11b5f70f4429b1d6404a8dba99fb375a8754","sha256":"0da5f99b2f5f39039341369f7a4a1a427066d2718d8ae326ec88cd1b6c089789","sha512":"1b1b63217a3015ef9db7a23bbd1185d9ead80ec18b885da79a61fdd9948adeb45232c22a924c19ea6074217fcd97ca5c350cd22e9398b3d901597ee98459dd7a","ssdeep":"192:4JorV3dd8yoJx2V3888fzJ+pV3nn80KJ3kV3uu85tJMPV3hh8GEJFqV3QQ8jJh5l:K2sIQ2ksAmEoe","tlshash":"9572dca1002be804ab870cd673ce3d359e4f62457081d8769bfe1c9cadabd27636175e","first_seen":"2026-07-26T12:40:54.84224Z","last_seen":"2026-07-26T12:41:39.343039Z","times_seen":3,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":32,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/module/elementor/assets/css/widget-image.min.css?ver=4.1.4","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.593Z","timestamp":1785069615593,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /module/elementor/assets/css/widget-image.min.css?ver=4.1.4 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/css\r\ndate: Sun, 26 Jul 2026 12:40:15 GMT\r\nlast-modified: Sun, 05 Jul 2026 23:18:10 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 214\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":214,"size_decoded":463,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"12045858d487a8ae56337b554a5ee03c","sha1":"f002d465c77cc210b1a049da21d2d8dfb4bba080","sha256":"fb8690e594b2f9b841585895d811e8cb839667a1a63963d1a1cdea11e2aa2abb","sha512":"2d50371adad63f2b9b384b10b87546b85344fe46560b65f9321100515c257e6a147e1353946f8ef5c4300827a41ce6641c3cedc82c9f63847874c3aae39485ac","ssdeep":"","tlshash":"b2d0c901792783c6302f896926ab669e39d01dddf246db90aca166165abecc82772160","first_seen":"2025-01-03T10:53:39.937643Z","last_seen":"2026-07-26T21:41:08.042601Z","times_seen":114513,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.606Z","timestamp":1785069615606,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sun, 26 Jul 2026 12:40:15 GMT\r\nlast-modified: Mon, 28 Aug 2023 23:14:22 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":31860,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-26T21:48:14.84476Z","times_seen":991987,"resource_available":true,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":466,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/img/contact-call.svg","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.333Z","timestamp":1785069616333,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /template/assets/img/contact-call.svg HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/template/assets/css/main.css?ver=1.0.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:20:42 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 986\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2298,"size_decoded":1265,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c3c633e829fcdaf77332dbcc6871398e","sha1":"b4b25537aafd163ecd26e5501718dc3eed1a4e16","sha256":"4d3e4276de2201f97cdea9665a563558f34e51c664f2f07cb38d64f6637a2969","sha512":"e74b840d9e9f7d53cbfdf3e854f7df3ad374e700a235717bb2f7f55e820c6e2b70cd06b0e5fd46c8506347ee63ba6609e14e5f071086d16146b3c186a115b9d8","ssdeep":"","tlshash":"5041f29e5111def4238aefd4fd23553e68fe38392f8e328482d1d660f4192ad8899d40","first_seen":"2025-12-09T04:03:38.986665Z","last_seen":"2026-07-26T12:41:39.390424Z","times_seen":4,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/2024/04/shape-color1.png","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.467Z","timestamp":1785069616467,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2024/04/shape-color1.png HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:45:10 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 385305\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":385305,"size_decoded":385558,"mime_type":"image/png","magic":"PNG image data, 1845 x 2483, 8-bit colormap, non-interlaced","md5":"42ee0604e9cd5b40b83cbcc48ccb4ebd","sha1":"a389a770d73cfe79fcaf7a4113a5b2fbb8f2fc5f","sha256":"0b289007a4c0f78221f67852974b4abf1e0d2a55d0233785998609c1932a3ed5","sha512":"3badf4af7bdcb6fe7bc8ba9b6658bf352735300a50d80c0a7eec314da1c51d2609dea0fe21aca1f2fb80378ec63cded64b3f97a543a03bb95703fc227bf8c247","ssdeep":"6144:RSuC0uvi5Nwq3pnfew0gj9bFSD38s5kct20oGhz5edsJ1j6xSHg8fdrT6jYpO0+m:RSR0f9nWw0ghb3s5tWsJx0Snfdrmkcfm","tlshash":"7084232497dbaa70f39e4d6afacdde94c6c9e0c2d7c39eca4add0c314e919cb0615160","first_seen":"2025-08-11T12:46:19.288214Z","last_seen":"2026-07-26T12:41:39.388922Z","times_seen":10,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/2024/04/partner_16.png","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.574Z","timestamp":1785069616574,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2024/04/partner_16.png HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:45:18 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 1118\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1118,"size_decoded":1369,"mime_type":"image/png","magic":"PNG image data, 108 x 23, 8-bit/color RGBA, non-interlaced","md5":"278091f1fe4d61377a97db86b309fc2a","sha1":"58e3bab31b71c318e34f7ced426b671cf9723cf0","sha256":"a2d13a6ba2fef17d64d3d931ca5d690e626146f364992f554e9d0314fa2de46f","sha512":"d4bac5feff923da7a947bbb38f87e7ea8b39bd5ee5436af2fb534d486626e77f0bc2ed937898062a363caee3cba4e2e38005ec6b37a449d159f5374f7f993cb7","ssdeep":"","tlshash":"e621c68e91c500f3ed966a8642d2112df417207c45b1f9d6698838f38a0222c6e99982","first_seen":"2025-08-11T12:46:19.242197Z","last_seen":"2026-07-26T12:41:39.442767Z","times_seen":8,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/2026/06/profile-picture-5.png","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.583Z","timestamp":1785069616583,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2026/06/profile-picture-5.png HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 23:00:06 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 3175\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3175,"size_decoded":3426,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"41e316a38edf2411ba5cc64a735a485b","sha1":"0c6bb517938f67b5388ac5264ee8bec53a98afb0","sha256":"5fb5e0c955af91473eebda06dd29eee4d3cd2b187cec29d511256b9a68379a11","sha512":"0c63a8262bc547b060775c7972eff232746e3cb94e6f288ef079197c7873b03459df353fb27dff57c119ae25335d384eeb272b1b31ca3006433e10fe35c3dcf7","ssdeep":"","tlshash":"3b611b7cbf4523c591e47be1aa738f8a870b1e724bb106846d0a8525081035982d22da","first_seen":"2026-07-26T12:40:54.769543Z","last_seen":"2026-07-26T12:41:39.411706Z","times_seen":3,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/2026/06/profile-picture-4.png","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.591Z","timestamp":1785069616591,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2026/06/profile-picture-4.png HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 22:58:02 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 3310\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3310,"size_decoded":3561,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"19afaa3ac9c4c30feaa607623a9d51db","sha1":"a53beb8ff60580f13f8361eaf9d29874b2cd5523","sha256":"4d432094f60e22fced53b04337b652f8b493349ea662f73bdf8f7138bc2e75c4","sha512":"5cc720f0dc7afd14cbbbdbc2ffe52f8cbb0975967cbe90334fbfd4b47de9d3fc31f85a56b6355344ad5898c66572918ad905262c38c15c47cd4892a79817b6b5","ssdeep":"","tlshash":"42615c7c8b2220b2c958753b873f781c9991d7b569c138ad71da5a697b000c7ffa0633","first_seen":"2026-07-26T12:40:54.864507Z","last_seen":"2026-07-26T12:41:39.40704Z","times_seen":3,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/module/elementor/assets/css/frontend.min.css?ver=4.1.4","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.590Z","timestamp":1785069615590,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /module/elementor/assets/css/frontend.min.css?ver=4.1.4 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Sun, 26 Jul 2026 12:40:15 GMT\r\nlast-modified: Sun, 05 Jul 2026 23:18:10 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":54666,"size_decoded":7991,"mime_type":"text/css","magic":"ASCII text, with very long lines (54666), with no line terminators","md5":"4fb5f7fc5e41f736ec0527b162519d52","sha1":"33697641c940c68153509fa7c9d7d0c3c760ce2d","sha256":"0a5d398672e25dc7f020f69df92a985481b248a60e301fee232d0c8afd648dc5","sha512":"5da1e9708bfdbd38beb7cee98d806ebc84b4d8337ce638a363d28461ebd9fda5189618bfa62167a5261ec2e98b02cb88ee4ff7bd5ecdd2d2facd480965e0c7a6","ssdeep":"384:Ws4J/8DEksCoI+SBQYO22/RmRs5Cz9TQXPTkvmGkvmCFldtraiIks05ArOk:dFLh5mP3RbrlDdps05Xk","tlshash":"17330da23d13b269226f442b82c7364c526499c1ee0375d9f944c523dafece63b36c5b","first_seen":"2026-01-29T13:38:24.653388Z","last_seen":"2026-07-26T21:41:07.9406Z","times_seen":67063,"resource_available":false,"data":null}},"time_used":543,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":543,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/js/jquery.magnific-popup.min.js?ver=1.1.0","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.664Z","timestamp":1785069615664,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /template/assets/js/jquery.magnific-popup.min.js?ver=1.1.0 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:20:42 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":20216,"size_decoded":7873,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20087)","md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-26T21:55:06.268777Z","times_seen":71897,"resource_available":true,"data":null}},"time_used":632,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":632,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/module/elementor/assets/js/frontend-modules.min.js?ver=4.1.4","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.675Z","timestamp":1785069615675,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /module/elementor/assets/js/frontend-modules.min.js?ver=4.1.4 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Sun, 05 Jul 2026 23:18:11 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":50602,"size_decoded":16919,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50601), with no line terminators","md5":"a3543601e9c09c9b8554ec6f6c8a2174","sha1":"8b05f21356996037f9d17fd012f43393238ac53c","sha256":"c66f47147d5fe3cceeaa47a93ff7440a328f859b049deec2f9d8f414e9137474","sha512":"3b5d80182a9b187171ceb59b4d384ad6b5e59dc0f5890cbdc0fb01109423a3ed847cfa88d67a0db8c84ed163985fb035b069f0530cf9b7a579c4ed47e67f56e9","ssdeep":"1536:yCyQ5RSSYeAjA6c9CST+I83Fy0K4cR8+yhiA2pXSz2faNQAzeLHeBHmjkVziNT:s+uhIAu","tlshash":"7633d9853652f4b70beb45da902f440af25718a8a40df4d5bfe9dce194b0d8e133ab78","first_seen":"2026-03-23T23:03:30.149895Z","last_seen":"2026-07-26T21:41:52.641109Z","times_seen":53207,"resource_available":true,"data":null}},"time_used":852,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":852,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.378Z","timestamp":1785069616378,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://safepal.business\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Jul 2026 06:09:31 GMT\r\nexpires: Fri, 23 Jul 2027 06:09:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 282645\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":32108,"size_decoded":32921,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-07-26T21:44:51.768249Z","times_seen":27552,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":4,"connect":31,"send":0,"wait":29,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/2024/04/partner_10.png","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.577Z","timestamp":1785069616577,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2024/04/partner_10.png HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:45:14 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 1330\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1330,"size_decoded":1581,"mime_type":"image/png","magic":"PNG image data, 122 x 26, 8-bit/color RGBA, non-interlaced","md5":"fc1e4e13a9f6a4805d20bd9014f3639b","sha1":"ea19ffc7f301e2979cb040a0fd3a7adf2e1fd9ad","sha256":"72a5fa232e12bcf9949531e2ad25249a405c4e3954215664678deee5c64201e9","sha512":"323dc006b250f84fcb74484f8174434125dc162e1c3a1cc3189c10869007941edae5e65f1ee72612093b77e8b9b757935ce702ff8e020e32b97ea66c14a17c31","ssdeep":"","tlshash":"5521abc96b7d903e68b5d706e30fb6b467eb1369f30b545dc4b850d03071119ca0c595","first_seen":"2025-08-11T12:46:19.35243Z","last_seen":"2026-07-26T12:41:39.355035Z","times_seen":9,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/module/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.915Z","timestamp":1785069616915,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /module/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sun, 26 Jul 2026 12:40:17 GMT\r\nlast-modified: Sun, 05 Jul 2026 23:18:11 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 2706\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8481,"size_decoded":2988,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8481), with no line terminators","md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-07-26T21:41:52.688389Z","times_seen":145530,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto+Slab:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.601Z","timestamp":1785069615601,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css?family=Roboto+Slab:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 26 Jul 2026 12:40:15 GMT\r\ndate: Sun, 26 Jul 2026 12:40:15 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22365,"size_decoded":1602,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"63c1df95a2b11b7542db5b48c56125f1","sha1":"b4116959b5ecbc00779addd320d98d8863692210","sha256":"7ead28f8032c788137532c3a88e9a7bda1411143e54ed4c066271c29f90340b7","sha512":"a5e42a035be607f6a98d7f73a26c37ad2e03a81dd0b54f2cc7bc5dc94a41b3b80af855ce9604e2b2283a7936df9008f068a8285c4cd8e4e960ab411c9c687d4f","ssdeep":"384:bvWLvKvXvUwvzv+vLWaZOUPSVsWJqtUghWVWInkUBALWWXYjUyvsHWm1iUz+54WD:bv0vKvXv3vzv+vLrZOuSVsMqtNhWV1nR","tlshash":"66a2bdd6486ba405ab870cc163dfbfa2ad9e5151a081c4becbfd2cb86cd6d32136075d","first_seen":"2025-09-17T18:46:03.2743Z","last_seen":"2026-07-26T21:03:28.767396Z","times_seen":20586,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":47,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Outfit:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.603Z","timestamp":1785069615603,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css?family=Outfit:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 26 Jul 2026 12:40:15 GMT\r\ndate: Sun, 26 Jul 2026 12:40:15 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7623,"size_decoded":1180,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f80b14ecf598320f3d430b18d1be789e","sha1":"819789473d87048f10ed3e7a9505478fd898371d","sha256":"0bef3f11e881c01a307529245da7d8387a1488babb6f5c2ce2793da47851f76b","sha512":"c03c6548b84c32015aa4927a3804d1449387c6d6d5018cd353a75625a6c6af79497ae1fcc1e3b959e3793033db54af101ca9801336d30ea2c5abd7493cb15796","ssdeep":"96:cOS0aRJc+uwOS0aKNNO6aRJc+uwO6aKNNO1aRJc+uwO1aKNNOEaRJc+uwOEaKNN1:Iphzpnh0AhbNh6OhprhwEhXxhWCh1V","tlshash":"a2f1eda1082ba144df970cc222ce7e33ef5f62516444d934affe1899ac6bd5a835770d","first_seen":"2025-09-05T18:29:33.889482Z","last_seen":"2026-07-26T12:41:39.391438Z","times_seen":1287,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":18,"send":0,"wait":46,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.test/wp-content/uploads/2026/06/1.png","fqdn":"safepal.test","domain":"safepal.test","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.624Z","timestamp":1785069615624,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2026/06/1.png HTTP/1.1\r\nHost: safepal.test\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T21:50:45.967557Z","times_seen":17550659,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/2024/04/h_shape2.png","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.686Z","timestamp":1785069615686,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2024/04/h_shape2.png HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:45:14 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 659\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":659,"size_decoded":909,"mime_type":"image/png","magic":"PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced","md5":"30df2b675cb5ba3a99fb42e61ed9aef1","sha1":"104e5b2373147735475f9d2773a60155e62b0ade","sha256":"002fe5eb62e2af6b897a33a6265096f3a0ef8ef334ded4bff1566016d9d4d119","sha512":"7753b82945d576e222858e80ecbbb9824288f7e566f4c29f806f73f287157c3b6c99dd76473dab0a5161cb08b600b3d9cb657220e621d0a5445471ce9761fe00","ssdeep":"","tlshash":"8a0123e42b01644508dd4af920cb257765ba4b1f4a8812281e551c7d2855cf38202bcf","first_seen":"2025-08-11T12:46:19.335033Z","last_seen":"2026-07-26T12:41:39.409073Z","times_seen":10,"resource_available":false,"data":null}},"time_used":917,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":917,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/2026/05/lock-3d-icon-png-download-7480345-150x150.webp","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.460Z","timestamp":1785069616460,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2026/05/lock-3d-icon-png-download-7480345-150x150.webp HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/webp\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 03:28:00 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 9520\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":9520,"size_decoded":9772,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"766d8e2b36e67b6c42f4dee6983ec116","sha1":"416e9d2ecc412690e25958bacd792a2bd35b92e0","sha256":"6935ccdee137050fadde3f0c4c55a8c24c77f04a38450bcdc74e5b41d61703e7","sha512":"a9d5971e9717b830cd0160100339b6c79f95d6f09d5dca7da6ef1026bffcaf5316858e2e35fa5b4958f80a9f333a0bcd1eabbc3e1d6ff3b3fa7657923e92b47b","ssdeep":"192:p4lLeR5yiCsdLKJh1CUORp5+tWpS4JoCzFUTOeKTeCflJLCdwt:p49Mk7sdLKJTOzpQs9Jt","tlshash":"a012cfa7e71d120deb1172327fd15e6cef48e7c83e572610db97624a034a7e1c924302","first_seen":"2026-07-26T12:40:54.84996Z","last_seen":"2026-07-26T12:41:39.386346Z","times_seen":3,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/2024/04/h_shape3.png","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.470Z","timestamp":1785069616470,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2024/04/h_shape3.png HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:45:12 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 4556\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4556,"size_decoded":4807,"mime_type":"image/png","magic":"PNG image data, 167 x 292, 8-bit/color RGBA, non-interlaced","md5":"6f63c557d1addad0d6f94cf4a1d64812","sha1":"c3495077e52e80f0d7cfcf4ca9f375157e9c31b3","sha256":"774203a0ae88680aea1ba2d4d44047ca7e3dc7c5b68109568a5c74b3f8ee1ea6","sha512":"8815fbaabfdbe3e295346ac6212d29aa63bf99229d5337683f7a5ea207ae6d4fd95c5e23358fb5550989498ce0ec7370048b16e7e734386ae3d6efb543cd2bcf","ssdeep":"96:gMS2EKnti/4O14yirZrQwoE078IUr3OssucV89:gMS2EMti5149rQ1H0nsTI","tlshash":"33916c48f6867da4c434b47780f25ab153b9927ca9273a231941c0af251f6d9bd7a0dc","first_seen":"2025-08-11T12:46:19.36302Z","last_seen":"2026-07-26T12:41:39.420598Z","times_seen":10,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/module/all-in-one-seo-pack/dist/Lite/assets/css/table-of-contents/global.e90f6d47.css?ver=4.9.9","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.385Z","timestamp":1785069615385,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /module/all-in-one-seo-pack/dist/Lite/assets/css/table-of-contents/global.e90f6d47.css?ver=4.9.9 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Sun, 26 Jul 2026 12:40:15 GMT\r\nlast-modified: Sun, 05 Jul 2026 23:18:07 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 509\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1487,"size_decoded":783,"mime_type":"text/css","magic":"ASCII text, with very long lines (1486)","md5":"8aeaa129c1f80e6e5dbaa329351d1482","sha1":"f02ff55acacd58e2812c4051bf09acb9205350ea","sha256":"0edc19cd68d37abf1db96fbd995b3dba751f911d1eb65188420646e29b8b1110","sha512":"3ba2f493953858cf661a04437947f1eec6d2739e574bccb4bacee7585a15ad81ebf749dec2f0da7c9f8f7c92b3b8456f8fa238e3120939e81a7dac39a61e5e9e","ssdeep":"","tlshash":"3a31ec1cc782331860727658edc07e4ad36cb202a4df519afcd2620f96e907af671a1b","first_seen":"2025-11-06T17:37:37.119913Z","last_seen":"2026-07-26T20:20:36.678191Z","times_seen":10341,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/elementor/css/post-669.css?ver=1784797837","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.596Z","timestamp":1785069615596,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/elementor/css/post-669.css?ver=1784797837 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Sun, 26 Jul 2026 12:40:15 GMT\r\nlast-modified: Thu, 23 Jul 2026 09:10:37 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 2875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":24677,"size_decoded":3150,"mime_type":"text/css","magic":"ASCII text, with very long lines (24677), with no line terminators","md5":"523f95515b60ff62b5f7ca8b5aa1f0d7","sha1":"c8724c52b286dd04cd49ebdfeeb176859576efd3","sha256":"0a176caf36a966a06c44312b7afce4e60cbae2462a11b5d84f8cd5c0d2e0eef1","sha512":"b7b5cd345a26c61610cb487914efc815bc155aa0c56b465299d3086dff50658306f76d6c011b403ff7f015a758d867b5f35b5d9de69f871e1d438c2f9f6eb80c","ssdeep":"768:DdOc4Lchr2i/Wy/gH8kdiuhZolUlU6/7OLqn13XTUVthMPC6DIB:J/WW","tlshash":"cab226a1be03615c773f646b8603ba9c71265ccbc16e66cbe8a15123fd76c5237d0e0a","first_seen":"2026-07-26T12:40:54.745462Z","last_seen":"2026-07-26T12:41:39.419609Z","times_seen":3,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/2026/05/abstract-cloud-concept-with-network-connections-and-digital-elements-free-png.webp","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.625Z","timestamp":1785069615625,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2026/05/abstract-cloud-concept-with-network-connections-and-digital-elements-free-png.webp HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/webp\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 03:22:12 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 330368\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":330368,"size_decoded":330622,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"06a6045f0430e3dcd6a17a9e6a7622cb","sha1":"80c481f48f542280619202a5eb94468eceb1552a","sha256":"28348ae575521a4872b7a3b5012b2b1fdfb5e0510d6585a6b1935250c6a51ff9","sha512":"fc063ca4a6bab90b888aeaaceb1a7edf81d4c85e0dee471308c678bd473546cdfa60a22b2fece86d764c59656af7262eadc4c8fc72af75110414c0ea6badeaff","ssdeep":"6144:8NdPxIYfR7pNK114hyk3jQ3Tgb+L/fYSwtXibhlkA63y2rLAPUPnT:exL77KASjC+L/0YbhlkA63rLAPOnT","tlshash":"7a6423a760e1bcefaec1b35da81401abd81d5f513b4dbe1c0a95c08e65cfe1a041bdb4","first_seen":"2026-07-26T12:40:54.716054Z","last_seen":"2026-07-26T12:41:39.441833Z","times_seen":3,"resource_available":false,"data":null}},"time_used":612,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/module/cryco-core/assets/js/editor-script.js?ver=7.0.2","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.644Z","timestamp":1785069615644,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /module/cryco-core/assets/js/editor-script.js?ver=7.0.2 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:40:10 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 999\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5950,"size_decoded":1280,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (404), with CRLF line terminators","md5":"175909a23f7d909ab2e6ac6bca4cf7aa","sha1":"61dc9bcc914b7c0bc188719cb384a634496d3c00","sha256":"95c64066bdedbb1cfca0197bdc24fab91e4c04d99d2540d893c07a9c8c205226","sha512":"08bc2be250224447baf3972619487994549f41b260c827444ad63a2685350bd699dd5298ff0c5cbf51f93baa39b77df077642624e832e093d60f80bc0d149411","ssdeep":"96:dlq43v03SLNDkLeyFXFLNWYu2d202WSx23p2R2W4Yi:noKyN1H","tlshash":"b2c15618a06610360877773f2dbfa358e1a2536b40da09773efc46884ff29585599fbc","first_seen":"2026-07-26T12:40:54.772879Z","last_seen":"2026-07-26T12:41:39.357313Z","times_seen":3,"resource_available":true,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":483,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/js/odometer.min.js?ver=0.4.8","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.662Z","timestamp":1785069615662,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /template/assets/js/odometer.min.js?ver=0.4.8 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:20:42 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 4070\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":11925,"size_decoded":4352,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11907), with CRLF line terminators","md5":"869c145c351243e6cf5dffaaf48de47b","sha1":"7f89f225c373ee4b7009eddca7ddd939b8c753c3","sha256":"7bd40aff9cb9e93cb586956acd6f2b57a94a6a381060563ff80d87efada91a80","sha512":"7c75549a78bc47713c4eeafef42f09bd7b4b8a2bc95573b1fa76f54047bdaaa116fa941d2487ab25942143aed5f744a1b28e1e083b2dcc25f68dda78004e0ed5","ssdeep":"192:RvPkLkNjcBQiqmchU752Z5m0hJbkHXndKyXmaWZakf0e7ywB:RvakNwBQi35y5m0fk3ndKyXIZak8yB","tlshash":"8d32551563e1263ed207e1b19eef8d44b3799d29a194808fb51cd8e958308384b7eff8","first_seen":"2025-05-07T16:14:09.817583Z","last_seen":"2026-07-26T12:41:39.3411Z","times_seen":95,"resource_available":true,"data":null}},"time_used":627,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":627,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/2024/04/f_line_shape.png","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.472Z","timestamp":1785069616472,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2024/04/f_line_shape.png HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:45:20 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 257\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":257,"size_decoded":507,"mime_type":"image/png","magic":"PNG image data, 1 x 92, 8-bit/color RGBA, non-interlaced","md5":"cefdbe0072319f7c8e33ffc55d7075c5","sha1":"58236371e60730797b51c22d2e53931639ab4054","sha256":"14da71788ce52e5091fd3485cf917d9a8296db8e090d2dd36751f8bd4c194d0e","sha512":"a2f6f6aa231739a7b2be1662ee2a5eec7cd96113e29cda7bca5c9ad2fc90a2492f5cbb9e4dc523d44ea429499a9e7c10406b8e3fb6e1a9d88869ac9007bc1def","ssdeep":"","tlshash":"38d02bce93044c759589192190135269f8a96c485127458a2c1974287a5e78428562d2","first_seen":"2025-08-11T12:46:19.360002Z","last_seen":"2026-07-26T12:41:39.346142Z","times_seen":10,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/2024/04/feature-icon1.png","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.474Z","timestamp":1785069616474,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2024/04/feature-icon1.png HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:45:18 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 8986\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8986,"size_decoded":9237,"mime_type":"image/png","magic":"PNG image data, 82 x 80, 8-bit/color RGBA, non-interlaced","md5":"f221690f4c9bcb76e3a7d36187cce48c","sha1":"4362498b28aaa18e4bc9246e1247cb9a307d3693","sha256":"50c5ad8c0891ed59520134d5170e2a46892f89d6f93a1746bd282672ca280fda","sha512":"94b5e2fef5150c9a753489164608bd4e9823b69c7a550fd82a558c5398c77b1e312e2c24f2b5c3d9eb68370818b2df7b32cc00550da81222d34caf0a4f44acf8","ssdeep":"192:xBSnVDCl+NJmLlZGg6SgpLuamfLLsrgJpGGkLQqdrbyJiZpg:q5Cl+XmRiJmfoGDqdrbyJiZm","tlshash":"f102afaa04893705e7c3a45bdda457a74e02a856ec222159999fc4f7d23ff9c1043a44","first_seen":"2025-08-11T12:46:19.293515Z","last_seen":"2026-07-26T12:41:39.411067Z","times_seen":8,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.test/wp-content/uploads/2026/06/1.png","fqdn":"safepal.test","domain":"safepal.test","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.566Z","timestamp":1785069616566,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2026/06/1.png HTTP/1.1\r\nHost: safepal.test\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T21:50:45.967557Z","times_seen":17550659,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/js/swiper.min.js?ver=6.7.0","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.657Z","timestamp":1785069615657,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /template/assets/js/swiper.min.js?ver=6.7.0 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:20:42 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":145415,"size_decoded":40906,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65272), with CRLF line terminators","md5":"719e22b4d2d5bf2a6519135029b10d11","sha1":"4702b30a291fd18432b1448aac2888cc52f53700","sha256":"3fe5e9993bc4afcd8c2e1f7f08d505f1d9189a3732758e990e86cda77d7b6646","sha512":"04768d9f772190f31ac880bd1e2939a89ff9fefc78a72ad0ded0fd1e15fe7ddf2e7efba12d334a04b830380eaf5674f580b28de04f5d19ea3931c066c1015814","ssdeep":"3072:bsoRHlzxaABr3SoMcrOpADH79cVOXj7qWlve:IoR5xNSoMcrOpADH79cVOXj7qWlG","tlshash":"a3e31889b364b2e151e73256539ed10263b65805b80ad1a470768cd7acbde8c03bfefd","first_seen":"2023-08-17T17:06:37Z","last_seen":"2026-07-26T12:41:39.422534Z","times_seen":117,"resource_available":true,"data":null}},"time_used":624,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":624,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/2024/05/foote-app-shadow.png","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.685Z","timestamp":1785069615685,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2024/05/foote-app-shadow.png HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:45:36 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 57240\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":57240,"size_decoded":57492,"mime_type":"image/png","magic":"PNG image data, 530 x 122, 8-bit/color RGBA, non-interlaced","md5":"f10292f7bcaf19c888d4974fe8571559","sha1":"0fded23240678f176159db60a084fc7d932d676f","sha256":"f95cb62fe358a468b85f56407837abe4da46bce15490e8f8348a5b9d87eef2e2","sha512":"3322d8f4d066471c6e71e8681939efd363afc15c1ee8ffb779d91ea753ccf99a9363cba2f7c22e9e74b441836d112dde2d57aaf1ee0c2e6c83af71d860138825","ssdeep":"768:8/YAxZr6+2cu/tCKbzTyZCsQQznsHPPwkcNiXKD8FLFf8PtiEBxm9DIUYVGNC4:vAxJ6esY2y7QNtZ6cLFf8PwEBxGIUYT4","tlshash":"9543f215f3c434b85aa21be63c39eee17a415eff0940c854e138d938344dacd29bad5e","first_seen":"2025-08-11T12:46:19.30462Z","last_seen":"2026-07-26T12:41:39.449118Z","times_seen":9,"resource_available":false,"data":null}},"time_used":914,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":912,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/2024/04/partner_15.png","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.572Z","timestamp":1785069616572,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2024/04/partner_15.png HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:45:16 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 1006\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1006,"size_decoded":1257,"mime_type":"image/png","magic":"PNG image data, 137 x 22, 8-bit/color RGBA, non-interlaced","md5":"9cf94114048b6fa4048b4e712d2c2ad1","sha1":"8fc2a0c04c5dd9dc588478fe90b518aa6416dd4a","sha256":"26659e842b1636e60837143c3df237a6bcf1a8a141206e66f1a405290878a069","sha512":"a888f2ff21eb4459c119260eb027eec7669f0119a6729aa9b45be327fbf88079a6fe53a248395e6acbb0d776c4c33487d09e8f521d9f7b94e9425cc95a658006","ssdeep":"","tlshash":"5611a5e177a29d266c4c86400fba6652f5c15b6f881429503d3305ac9b49047a8cd2fd","first_seen":"2025-08-11T12:46:19.342701Z","last_seen":"2026-07-26T12:41:39.378978Z","times_seen":9,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/css/magnific-popup.css?ver=3.1.9","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.582Z","timestamp":1785069615582,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /template/assets/css/magnific-popup.css?ver=3.1.9 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Sun, 26 Jul 2026 12:40:15 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:20:42 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 1941\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8006,"size_decoded":2216,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"e78d814a7fcb5c8e49959afac8f5adc1","sha1":"412368ed478e4d17faa120ab77f1aae8c3e9a066","sha256":"28b3ffbae512e23854fc2720c74dfb1fe8e2eb43119b70665bcc2ddb030fd5e7","sha512":"ede21bace1ebf74878fcbe9fcbc14fa1db153e4fc81f97f269386526ce5e7650a9398baebe355fa0e7c1ea3a9da0e4f69319bbb21207efe6a393632227ad6a60","ssdeep":"192:FRDDD4Knd9JLK3yOKfgJCsbtZULJ36FMxv3zDXUVSP:eKMr8J3/","tlshash":"4cf1ee27da103301e435ebb8dbe38b19e6220063e303486bbfddd6568fb96484a51fd5","first_seen":"2023-08-10T22:31:48Z","last_seen":"2026-07-26T12:41:39.447664Z","times_seen":231,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/css/inline-style.css?ver=1.0.0","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.588Z","timestamp":1785069615588,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /template/assets/css/inline-style.css?ver=1.0.0 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/css\r\ndate: Sun, 26 Jul 2026 12:40:15 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:20:42 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":247,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T21:50:45.967557Z","times_seen":17550659,"resource_available":true,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/elementor/css/base-desktop.css?ver=6a61da8d6fb7f","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.597Z","timestamp":1785069615597,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/elementor/css/base-desktop.css?ver=6a61da8d6fb7f HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Sun, 26 Jul 2026 12:40:15 GMT\r\nlast-modified: Thu, 23 Jul 2026 09:10:37 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 558\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1774,"size_decoded":832,"mime_type":"text/css","magic":"ASCII text, with very long lines (1774), with no line terminators","md5":"d791443ab46716f538ec865feb083cb7","sha1":"31fce3a8bc3dddccacddd49ec2d40a1df5bfc616","sha256":"b033cdf530c4c9c275919b5590b8eadcebb0c00305e2fa3943727505ae99a97d","sha512":"45302810a69d4e016ae2d476cac5dea6fe22af9bb4ac4b3d29021cbe2692942bd0ed3d4ff6587171f5ba427568cb953fb8ac8f04ce08a24d5d9b856f51fd3079","ssdeep":"","tlshash":"e1314421ba139a7a123fc10badd7b68f50d042a3728563d9fc606122e9ad9447fb7307","first_seen":"2026-06-10T12:31:12.027243Z","last_seen":"2026-07-26T17:13:40.567439Z","times_seen":493,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Manrope:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.604Z","timestamp":1785069615604,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css?family=Manrope:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 26 Jul 2026 12:40:15 GMT\r\ndate: Sun, 26 Jul 2026 12:40:15 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15008,"size_decoded":1471,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0ad4e9cc8948899d25eb47a31cace209","sha1":"c8a2ded69bfa8d2f4293fd3324009b36b4050256","sha256":"73ef72e9f525460bf321f3797f3c6d37aa65ea44ff78062c406fca0d98a55fc8","sha512":"1467da169a56c9e04d571063cfb541534f96920a0645641209b6e0dfcb36ce1313811515479a11731e59d2344622478ed1602dadf4531184524e611cddc867d7","ssdeep":"192:BJRKV3II8XDJi5V3PP8wiJDEV3WW89RJ8rV3118+4JlOV3MM8b/JGNV3TT80uJH0:bMEmkwU+ME02EQJ","tlshash":"7962a9900027e804eb470cd677ce7e39ad4e61567491c5ba5bfe1cd8adebd222320b5e","first_seen":"2025-09-05T04:53:42.941084Z","last_seen":"2026-07-26T20:55:04.006956Z","times_seen":3753,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":19,"send":0,"wait":47,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/wp-content/uploads/2024/04/hero-bg2.png","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.323Z","timestamp":1785069616323,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /wp-content/uploads/2024/04/hero-bg2.png HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/content/uploads/elementor/css/post-669.css?ver=1784797837\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:45:08 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 4849\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4849,"size_decoded":5100,"mime_type":"image/png","magic":"PNG image data, 1920 x 1200, 4-bit colormap, non-interlaced","md5":"8fda57a3a56720b372048d183f68dc88","sha1":"dabf5fde901dd721edfa227e2c3e602ea9399dc5","sha256":"7866c5dfefd92239b707038b95fb8fa0039fa2e6de53d61fd7c870bca46fc46e","sha512":"a2c0dec7cd8d228c2ef53bc09f32a9d572dfd3d45c8a1221dff0502bdf628c8bdde2d0d2b68328452cca66f228f78e5482e0b85c62e73232b55f0d6c4d56ae69","ssdeep":"96:9w67rQeOSWMNiioplcMPpj8f9+u4F7TW0oc44V:9rrQe3WMNiiccMxjE4gr2","tlshash":"10a1de5b5a0f21dbf28c58af1070c394a0094d361afad1d79a2564b4ee34857cc5bee7","first_seen":"2025-08-11T12:46:19.227428Z","last_seen":"2026-07-26T12:41:39.380952Z","times_seen":9,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":294,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.383Z","timestamp":1785069616383,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://safepal.business\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Jul 2026 06:09:31 GMT\r\nexpires: Fri, 23 Jul 2027 06:09:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 282645\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":32108,"size_decoded":32921,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-07-26T21:44:51.768249Z","times_seen":27552,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":42,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.389Z","timestamp":1785069616389,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://safepal.business\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Jul 2026 10:17:38 GMT\r\nexpires: Fri, 23 Jul 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 267758\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-26T21:51:06.977584Z","times_seen":245449,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":19,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-26T12:40:13.370Z","timestamp":1785069613370,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 26 Jul 2026 12:40:14 GMT\r\nlink: \u003chttps://safepal.business/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://safepal.business/wp-json/wp/v2/pages/669\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://safepal.business/\u003e; rel=shortlink\r\npermissions-policy: private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\")\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"WOW:1.1.3","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"All in One SEO:4.9.9","description":"All in One SEO optimizes a WordPress website and its content for search engines.","website":"https://aioseo.com","common_platform_enumeration":"cpe:2.3:a:aioseo:all_in_one_seo:*:*:*:*:*:wordpress:*:*","icon":"AIOSEO.svg","categories":["SEO","WordPress plugins"]},{"name":"Elementor:4.1.4","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"All in One SEO Pack:4.9.9","description":"All in One SEO plugin optimizes WordPress website and its content for search engines.","website":"https://aioseo.com","common_platform_enumeration":"cpe:2.3:a:aioseo:all_in_one_seo:*:*:*:*:*:wordpress:*:*","icon":"AIOSEO.svg","categories":["SEO","WordPress plugins"]},{"name":"Magnific Popup:1.1.0","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"WordPress:7.0.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]}],"data":{"size":137241,"size_decoded":24396,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (10411), with CRLF, LF line terminators","md5":"eef39324027d5edd5925bba8a403481d","sha1":"6042e07286b2086e30d859c47839ef2d1c59691b","sha256":"ad2f25a6f26f5fc2e5f121e963faab927df6aad8dfa1d4b61a2d0ad316cf07a8","sha512":"08981b248f69d993dfaceb790847e256ab789ad6bc5d390b058a8e380fe03b413c0d74132534f6bb0e094d9a153368a7292dba4a25b6fa8e26bf7eba71f46fdd","ssdeep":"3072:7eIL9ojksK09ScuCrjVIoEvMG2Tevnpf4eRlx5ie5vOB+r:35AksK09ScZIo+","tlshash":"6bd3c832b2d5507e313b43cb9122670ce892e797cb1546c5b2fc22e59fbaca175a32d4","first_seen":"2026-07-26T12:40:54.711524Z","last_seen":"2026-07-26T12:41:39.381853Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1834,"timings":{"blocked":-1,"dns":825,"connect":81,"send":0,"wait":832,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/css/odometer.css?ver=0.4.8","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.581Z","timestamp":1785069615581,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /template/assets/css/odometer.css?ver=0.4.8 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Sun, 26 Jul 2026 12:40:15 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:20:42 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 525\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3106,"size_decoded":799,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"16815f8b1044f0d096fc969a4ead7d4d","sha1":"7d2c599c573c0446e488176d1de39234f91122b7","sha256":"6126bf8447b3fa5de7acf879a77fc56c6fe014e8a78922f78c0fc27d94937e7f","sha512":"81c922edc4049789c8d09cc977ab8d72dec3b5c76a7837744ece61091aca440d39ff851c37d75a02b394916731a427db7a303610d84254ea176e85e28ac1ba8a","ssdeep":"","tlshash":"49512a19222435388326b518e7f89b72ce3ce6a2571339dff28d659b0e0244943cef27","first_seen":"2025-05-07T16:14:09.891031Z","last_seen":"2026-07-26T12:41:39.414862Z","times_seen":81,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/img/tes-qutation.png","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.326Z","timestamp":1785069616326,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /template/assets/img/tes-qutation.png HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/template/assets/css/main.css?ver=1.0.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:20:42 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 223\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":223,"size_decoded":473,"mime_type":"image/png","magic":"PNG image data, 32 x 24, 8-bit/color RGBA, non-interlaced","md5":"8383e56a554d8c44be00db8353a215bd","sha1":"132019ee08a32b9e878df58678797b3d9486ab7d","sha256":"a58a298588053fbffe146cdd66ea682a31e24a4a11903f47405de77d538e0b8c","sha512":"0c6277fb04812402f4cadda07f2fa45cff5123af6bc7d857b803588b26f0db0b811954772c95b13df0f7922c46e18fd08c6e2867b454b219811efc445aae57b5","ssdeep":"","tlshash":"fbd0a7d6ba687437874947e9c55b060098271d65969619067811423c119a95d620eb11","first_seen":"2025-08-11T12:46:19.28453Z","last_seen":"2026-07-26T12:41:39.364145Z","times_seen":9,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/2024/04/h_dot.png","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.471Z","timestamp":1785069616471,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2024/04/h_dot.png HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:45:14 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 160\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":160,"size_decoded":410,"mime_type":"image/png","magic":"PNG image data, 5 x 5, 8-bit/color RGBA, non-interlaced","md5":"3a74374ae8eec6056e92edd30532ee68","sha1":"967a454bc34e50e00da22a3e7bb38b7915316f39","sha256":"aa78d2e9e2949e08b57a5f7fea63174059f7f97866ec3cf80db7576f30cfcc55","sha512":"d8fa7a57d56c82864ea7e3d841e6c89448affac71f5d4f88a9b97d325f5938b854881797a90e2c4ced9b5a77d5071a19a2abb34302eedacc62109d5d40b82b3f","ssdeep":"","tlshash":"50c080d76d4499bfc54d15bf42b74910602629d55515510c29104154600f4e413a1393","first_seen":"2025-09-23T21:19:51.491668Z","last_seen":"2026-07-26T12:41:39.353846Z","times_seen":4,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/2024/04/partner_11.png","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.579Z","timestamp":1785069616579,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2024/04/partner_11.png HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:45:14 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 1292\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1292,"size_decoded":1543,"mime_type":"image/png","magic":"PNG image data, 108 x 26, 8-bit/color RGBA, non-interlaced","md5":"a41551d1bbc727dbd730596cb8528688","sha1":"8380a47747944d34d2d270d7f199dd651421b9d2","sha256":"9c36d53926174406d08accf6cb50b9bf074796bcefe7a413311dc3d5a628ed00","sha512":"cd104cb0ba0b6d819c11e50d087470f98f447b9b3890452aee414cacd9a029d0794b7361f80b6f0bba5ffd94ed33beb015d971365430f35c664ffbac1d2412a4","ssdeep":"","tlshash":"0f21e7dfc4b45f7f5ec7cabb0493908899b89261da75140388a5caf4880201637fdb03","first_seen":"2025-08-11T12:46:19.27476Z","last_seen":"2026-07-26T12:41:39.368756Z","times_seen":8,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/css/animate.css?ver=3.5.1","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.577Z","timestamp":1785069615577,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /template/assets/css/animate.css?ver=3.5.1 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Sun, 26 Jul 2026 12:40:15 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:20:42 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":68606,"size_decoded":6034,"mime_type":"text/css","magic":"ASCII text, with very long lines (460)","md5":"78d87c297bf52bae5d31a0b26b1db567","sha1":"d8c247a25a6481a17388c1b4a4ace2ba1d9677b9","sha256":"e4c3b4f0eee9752c1f5dcb0b330a0c6471efad2f266f8b856a1fbefc1830dc93","sha512":"b565fb35bea51faf5040bda554cac5ed9bdecf5f76697c7f5fb63272132d05552d9f5994644ad2fbebfbe97578d6edaf330a43599f5f3c53e1ca69cda0c45796","ssdeep":"192:LIQHnIwf2T/awfDZUiduG+MONjnbimZbHMxymDSVbyPiVEzfukrWL7XU+qLmfRvr:LIW6yffHf7SpS/fjf7","tlshash":"1763086929e1114466370a15c7df9f78263ce5a31826ecfab3d2588bcf41fac23c9617","first_seen":"2025-06-11T15:26:46.277404Z","last_seen":"2026-07-26T12:41:39.364922Z","times_seen":30,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/elementor/css/post-713.css?ver=1784797837","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.641Z","timestamp":1785069615641,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/elementor/css/post-713.css?ver=1784797837 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/css\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Thu, 23 Jul 2026 09:10:37 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 293\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":293,"size_decoded":542,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"bc0237d5f0302491f93b2a02b892e36c","sha1":"dd9406c8ef6dd1ecf9cbda6d0a27eda2cab5a63b","sha256":"2024be034a205e8598521dc553d6fbb86ca0964a69714ed5788b8d52118449ee","sha512":"aa63dde3629fa3e8bd95d7d46b745524d997bfbd534f89aa58160fa626f3b526c444c7126a1c39a5070a332be691a0f6e5a0a6de5608ba1f5f1930a7456a7316","ssdeep":"","tlshash":"a5e017063e03254c2b1f156fc8437eaca212588b922922c7e5414127fc35c23b7e078e","first_seen":"2026-07-26T12:40:54.860425Z","last_seen":"2026-07-26T12:41:39.436711Z","times_seen":3,"resource_available":false,"data":null}},"time_used":595,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":595,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/js/main.js?ver=1.0.0","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.671Z","timestamp":1785069615671,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /template/assets/js/main.js?ver=1.0.0 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:20:42 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 2281\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":11124,"size_decoded":2563,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (388), with CRLF line terminators","md5":"e2802f4361e8b2a4311fd92ab486ceeb","sha1":"25114d2568685fb7443b60a728dc168a7deafdba","sha256":"ccf62d219340ae927cd19aeb4450c25ae1eaa184081bf041a02d26234fe0844c","sha512":"c499ccaa901ab78fa64783fe1fc93899025ee0036d41a5f75e138c23e43597b20b6d1c56bb2244ca1c7810a5864dead88240b30be6e6e56b1683e5857c4ed420","ssdeep":"96:Kqi+pqiliOjQdpHfVBCAgcKnivCLo2o5xKNz52wvao5gO4wFoR3LrL/1GIwxlPZ5:hNqiliOjQdNaAgcKniK02IxyUDu","tlshash":"e1320000be4da1be48fbf3ad957dc344ca6cd622c28b0578f4fd44680b845d5266eabd","first_seen":"2026-07-26T12:40:54.85329Z","last_seen":"2026-07-26T12:41:39.451132Z","times_seen":3,"resource_available":true,"data":null}},"time_used":773,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":773,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/fonts/fa-regular-400.ttf","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.390Z","timestamp":1785069616390,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /template/assets/fonts/fa-regular-400.ttf HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/template/assets/css/fontawesome.css?ver=5.13.0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: font/ttf\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:20:42 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":369188,"size_decoded":201253,"mime_type":"font/ttf","magic":"TrueType Font data, 13 tables, 1st \"FFTM\", 28 names, Macintosh","md5":"f18935cdad9fd0543247abe466075237","sha1":"d8ee8eb256fe1b707f38f653946e458c397f4883","sha256":"8e218c125903d0e73ed59b5a28d4130412caeff233a3600082c8b2370371d291","sha512":"881ae4ecb7aa5ffa3ae5e299a394e9e078c6bd3f1fdabf1f14c1bb2d7bf4296cd596272e8a0089d3bb8b6038c1d3c8f1cf9165fa40ebb8bb2e85dfa2feab961c","ssdeep":"6144:qEVyfJz63kB5N6Rk/KOiRIu+CeUqQpy0V9/tQv2c/hsMFDXs5IWe/8wycR42tsR+:dofskBj6Rk/30LVS2Wi46IWe/8r2tz","tlshash":"87745c5ef79f8fa7c187877d9f80b83261e02f15324237d2ae87aa1d60569c484f065e","first_seen":"2023-05-18T03:49:17Z","last_seen":"2026-07-26T12:41:39.359865Z","times_seen":273,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/module/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.964Z","timestamp":1785069616964,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /module/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sun, 26 Jul 2026 12:40:17 GMT\r\nlast-modified: Sun, 05 Jul 2026 23:18:11 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 649\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1348,"size_decoded":930,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1348), with no line terminators","md5":"b272ececde530e5621637a7e529abc8b","sha1":"a3fedafc836049d71aa3b1d9ddc1debcd6f73dd2","sha256":"4543f55b0b8bc8fe912da8ddd1da7b07d0e8d3e77a824295a6bccd90d4f8aa13","sha512":"d2efaf6be07605e855c348a6fd5aad58520f20912188578a3711de8840a9cd29e41860b49b36d3d7a72082077c9dcdfe8571e0279985a771cac102a520f7b020","ssdeep":"","tlshash":"f62112b371a2dded48df148a34522d16f2574d5db8caa01ef5aa08df24b2e843362634","first_seen":"2025-10-22T21:27:55.827503Z","last_seen":"2026-07-26T21:41:52.662658Z","times_seen":123870,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":175,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/css/fontawesome.css?ver=5.13.0","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.575Z","timestamp":1785069615575,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /template/assets/css/fontawesome.css?ver=5.13.0 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Sun, 26 Jul 2026 12:40:15 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:20:42 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":97535,"size_decoded":18064,"mime_type":"text/css","magic":"ASCII text","md5":"acbcd651af9b79dfc38227ae41389eeb","sha1":"9abaf983ffbe6175ba6b52a024bb0b29047e0cab","sha256":"c7822eb91ebf8d0ca2ed936e3dbc78d4cf5d995271f907562ce92a1f3f15a66b","sha512":"99e2413ccf91edde484af870bae109b8eab78586e2ce7d0d6b106c1f52c09c31ae327f724df199d8c061b5e86b92c605ee1f757c3722c0acaf9e36475f18b524","ssdeep":"1536:588iARAUHGrAwSKk9T5FPHta/9O38iFZrJ0cZxr/:588iAWUmUwSKk9T5FPHta/9OL7uE/","tlshash":"89930cfce1bf18944319e4d12742f364fb2eb7acac4a0d58d2a27d9db2c02549186bdd","first_seen":"2023-05-31T15:40:26Z","last_seen":"2026-07-26T12:41:39.4359Z","times_seen":315,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/css/cryco-core.css?ver=1.0.0","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.584Z","timestamp":1785069615584,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /template/assets/css/cryco-core.css?ver=1.0.0 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Sun, 26 Jul 2026 12:40:15 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:20:42 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":42955,"size_decoded":8720,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"cf4f606be5015c8c4936c81c31514daa","sha1":"4ccec61773a535970c0b5b223e1fe9fb3a5f535b","sha256":"75c8fc4af54ee952f6234fee14c9dfac47ba14f1160231db4378413e5953d102","sha512":"4da74b0d3e15f880df6b21f4b8072184ead6a5cafb7fe56fa9cb7a83a4675dad94ceed665eedf8652fbc17c0325cd594f0f2e1c732de3bcb06e1d0fd6d8a3a51","ssdeep":"384:pQWxtbfCdrhNrJ/bcN/g6KWvKARGoRM4r/iT:aWTCdh/bWvKARZa","tlshash":"581345a89e2164826337d73c5bf96521fd9410a7ce0206e8bed0e1048fb96ec556efcd","first_seen":"2026-07-26T12:40:54.782121Z","last_seen":"2026-07-26T12:41:39.440857Z","times_seen":3,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/2024/04/h_shape1.png","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.687Z","timestamp":1785069615687,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2024/04/h_shape1.png HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:45:12 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 736\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":736,"size_decoded":986,"mime_type":"image/png","magic":"PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced","md5":"20a83516a5cc207a8ebc16c079b6ac5c","sha1":"e141300aa4dfd1d8db9f136de98cd4a6a75eb4aa","sha256":"ff3b6a88cae781e1e1167b520a686862ff5e285ca1b3ae9aec3f0d0b6c6e9f84","sha512":"824ae3189e37283ab11ac9a97ae54e38514644472cd187204b1feb22b7d73ac94ccccb5f4eed8a3d4a922a8d6e763077598e8b30501ab9b617de3d6b9e206297","ssdeep":"","tlshash":"a901b5d20e82ba9f49ed949308fea36dc9032724c9042564ba25f010e02db8816827c0","first_seen":"2025-08-11T12:46:19.23685Z","last_seen":"2026-07-26T12:41:39.361606Z","times_seen":10,"resource_available":false,"data":null}},"time_used":919,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":919,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/img/fea-count-shape1.png","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.325Z","timestamp":1785069616325,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /template/assets/img/fea-count-shape1.png HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/template/assets/css/main.css?ver=1.0.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:20:42 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 1091\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1091,"size_decoded":1342,"mime_type":"image/png","magic":"PNG image data, 38 x 272, 8-bit/color RGBA, non-interlaced","md5":"28623d1fcc718da8cbeca6bce6a94675","sha1":"9f86394b5b55a61a1a5027be42f165cffc939f39","sha256":"bbe619ed333efcf7174e52c8d0e6f74068696ce765c49931d927a8c4cf39d112","sha512":"6f7a27f238bad0feeca060289eaab4d8401ffca8c9fae6468a8b330b12db9af24c915668d45a58c31f51725f75215584be5420df7c83ac334bf8fe2e1dbb0fbe","ssdeep":"","tlshash":"6d1152a3703a4e4e8d3a192410a42de47b7a419fea0b20b1fd0ce7caf3055954ec2a77","first_seen":"2025-08-11T12:46:19.217189Z","last_seen":"2026-07-26T12:41:39.416006Z","times_seen":9,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/2026/05/shield-3d-icon-png-download-8231227-150x150.webp","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.466Z","timestamp":1785069616466,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2026/05/shield-3d-icon-png-download-8231227-150x150.webp HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/webp\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 03:28:12 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 9926\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":9926,"size_decoded":10178,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d86ca615d55a41fcc9fa256fde071fc1","sha1":"46a3f7892c42e256170c7a3f608a2a704c15979d","sha256":"bbaf3791a007d73b1868eb72bbb12f18cf75ed4205ee3839eff1d75d2a7b76f4","sha512":"cd5f2d0fc54b65b28e9c09a00757d68dd086d56dca8614c27e4b60461a31d10f40849089aaa375cd0f5726a49f11259b6aa56c2c9ebe743f1759757878322e78","ssdeep":"192:BH86d+Y5jZzpFkMLpOXfUhojB4HH+1yqtpLSqbHMA8RRw3oy:zd+EZzpFkMLgf+oOHe1yqtRBbHX8ooy","tlshash":"0e22b0e56eb4488791a738a000915a368fec3a3a4b11d83dc9473f264a7ffe759e0d05","first_seen":"2026-07-26T12:40:54.750008Z","last_seen":"2026-07-26T12:41:39.429121Z","times_seen":3,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/2026/06/profile-picture-2.png","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.586Z","timestamp":1785069616586,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2026/06/profile-picture-2.png HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 22:27:00 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 3226\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3226,"size_decoded":3477,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"23503268ede626c1a3dc54f94dee4b00","sha1":"d3dc87736dc4706dc7bd028b1bff88d8a576451e","sha256":"33d3e003a49e8d2fea92265efec329ee590606c7bc98aa8ef5ea5f2eb2a5a398","sha512":"5dcb505b86ccd3e60b0883e3a0891115372ad9e273177b05905882212c7bca357fabb5e47fc8537a4249c55a3c90151e789295e2e0dd6229557d4ec445b73817","ssdeep":"","tlshash":"c5616d6ee3db7a7a52b2956f85101800756d2bcb7dc103c0364239e1987cd3be9ae092","first_seen":"2026-07-26T12:40:54.829545Z","last_seen":"2026-07-26T12:41:39.371111Z","times_seen":3,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/2026/06/3-300x300.png","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:17.241Z","timestamp":1785069617241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2026/06/3-300x300.png HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:40:17 GMT\r\nlast-modified: Tue, 02 Jun 2026 00:24:18 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 27343\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":27343,"size_decoded":27595,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"1dee4912a5ff88ee75f019ac583203d2","sha1":"0ec6de63466f8cc5140d0de32cbf55a4e31e0022","sha256":"07ef64f4f85aaa091a21db0be8320cd4b9e96065637754ff7daf415ca7577673","sha512":"0dbdd25aa813debc05e374b873df5617fab3e0575f72230b446f5ab169eb5e532e8f005b9babf863da708c7479f755e01fc77c9ae5b5085df65566939736ce42","ssdeep":"768:/hlCSqrXTdXESsXuDQ6XH3eHgG69iJSrKPFewNQljB:nCZ4u/X/9iMrKPF8ld","tlshash":"08c2f29988276137195f2bcfa36b582d64d78b00aa35fe91455f38ccea56fdac4002c9","first_seen":"2026-07-26T12:40:54.866887Z","last_seen":"2026-07-26T12:41:39.401763Z","times_seen":3,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/2026/06/3-150x150.png","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:17.242Z","timestamp":1785069617242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2026/06/3-150x150.png HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:40:17 GMT\r\nlast-modified: Tue, 02 Jun 2026 00:24:18 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 10985\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":10985,"size_decoded":11237,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"88801d540ddf10c1cfb4b9301b49d372","sha1":"68f042dbeb9c9dfa646f0507ebe224770074cd63","sha256":"71fb6e9e33578026af7c298f60c757cc82fad61dd2bc7c3750979bfe0c9038df","sha512":"6b10a7b37c12b696fe2794b968c8d7fe46c3fea9332bedf4e935e62daac3ba582e4ff40601ac951dbcafc5dc15aa5ae512281a9ada279bc04b192f583a51f4ff","ssdeep":"192:r4lERoG5c87jKjnP3u2oealFZ6YnPorofF/DCtKIPikZrq3jnRVTNYD:r2ERoQc8f6vug+HPorc5CsEjZrkXTeD","tlshash":"1132b0045bbab817c7c43ae4013874a33f3db8edad1f0f115b45506c2e6a91f664d669","first_seen":"2026-07-26T12:40:54.857574Z","last_seen":"2026-07-26T12:41:39.446735Z","times_seen":3,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/css/swiper.min.css?ver=6.6.1","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.579Z","timestamp":1785069615579,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /template/assets/css/swiper.min.css?ver=6.6.1 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Sun, 26 Jul 2026 12:40:15 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:20:42 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16447,"size_decoded":4811,"mime_type":"text/css","magic":"ASCII text, with very long lines (2257), with CRLF line terminators","md5":"a43186238c57e51c7c8e28483992f0e6","sha1":"d25e45717cdc1e3fdaaa791c68d3a8102f1a03af","sha256":"7c3a1c839297667d7c11ed08597879ae891351800f282cbd2c921312af19d23a","sha512":"100c85f8adba3d35817e86204805a419947cf1f90882ffda62ad9c6a72c0a9bc6234976e672f97af138fb1070ec4d1f2ec2b4a54d62f3ec4133db18e3f897151","ssdeep":"192:gI8mUJbiKneg0JDXJszcPADPvygqD7P3PyPiK62xhVr9OoKoZxW4SXAeoAwAFr13:gqUbegASIO3JK39ohbNWRXoZT78lWlrM","tlshash":"6a72131457202863a3764f7d0be19674ef6888d34e4349acb3c0de44dfba4f8a25eda5","first_seen":"2023-11-03T21:23:43Z","last_seen":"2026-07-26T12:41:39.417532Z","times_seen":191,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/style.css?ver=1.0.0","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.587Z","timestamp":1785069615587,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /template/style.css?ver=1.0.0 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/css\r\ndate: Sun, 26 Jul 2026 12:40:15 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:20:42 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 432\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":432,"size_decoded":681,"mime_type":"text/css","magic":"ASCII text","md5":"a57b314c391e6013848a695f0ac3b049","sha1":"430a0d8eda6c6156fb218f99f854eb753bb106d7","sha256":"1e1c885b12ed92d31f745ee0b0d26291ac310cb5286a11fec99f239c0931f168","sha512":"e587d53f69e89cb3ab949cbba5b8b3d8e76dff3d1d6f6fbad8d26fc3d7c4f3f8d5ee83829b2562644ac60eef451828500648f16199615db6e3bd0ba44618dd7a","ssdeep":"","tlshash":"1ee0ab981a2fd4f662e0430328b7368b974fcb0090ee48d2f78da157a7b172f14a5928","first_seen":"2026-07-26T12:40:54.723341Z","last_seen":"2026-07-26T12:41:39.334468Z","times_seen":3,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.649Z","timestamp":1785069615649,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Thu, 09 Jul 2026 21:12:49 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 1864\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5050,"size_decoded":2146,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"55c5129ccd0fa8f383d9de82a91c5877","sha1":"596918015fa62e4f18533b69b0e6822ebee3cb2d","sha256":"cce388fed1a82ebd20ce7d9601e4b6c83a425ea201c333d71b1183ee887cc090","sha512":"956ab39b4bc0577f0ac50a842bc7f71ac1d5b6f7148f9ba9bdb2a84001b96362f077d417144dce171464de8aac71ffd6e639e35ca12da4de2d12fddd660e64a3","ssdeep":"96:lu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:lGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"5ca151c43542b930e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-07-02T22:01:42.321596Z","last_seen":"2026-07-26T21:48:14.871499Z","times_seen":10569,"resource_available":true,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/2024/05/NEW-FRAME-.png","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.683Z","timestamp":1785069615683,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2024/05/NEW-FRAME-.png HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Tue, 02 Jun 2026 00:55:42 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 7178\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7178,"size_decoded":7429,"mime_type":"image/png","magic":"PNG image data, 84 x 75, 8-bit/color RGBA, non-interlaced","md5":"fcf88b1f38d181e4f495eacd118592f9","sha1":"a5e1d45124bf93c082ff5a039a818f24ff8c8db6","sha256":"8f543e2351403cd66ca70071d68738d4d8d9472c1defb9aa6e68fb4f77659738","sha512":"5179447b299015655de2ca8057369883066e1371eb4186d3c2731f29bbbc750dd1f24bbad4689c5af62d1739dfedbb6eff688c88641bd6ba7329b155d7fe92f0","ssdeep":"192:kAaj+I4wLx3v6OA5PoCga+gqNIZJLqmtsnJGCK/aVFt:kAaj+eLx3COA5QCgTIZJ9tsnJzAaV/","tlshash":"91e17d2905560ab3a01eb7b5acc79769c12b8e01dc8387c014e2dcd78e942986ebb497","first_seen":"2026-07-26T12:40:54.835061Z","last_seen":"2026-07-26T12:41:39.444855Z","times_seen":3,"resource_available":false,"data":null}},"time_used":863,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":862,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/img/contact-massage.svg","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.334Z","timestamp":1785069616334,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /template/assets/img/contact-massage.svg HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/template/assets/css/main.css?ver=1.0.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:20:42 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 539\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1120,"size_decoded":818,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f1bfdbc61e911a7c480991d0ed8d26d6","sha1":"c4503c843644a72fe4832c077fd0d91aae94871e","sha256":"01ed5a2754680fc0ee514b5ccc9302acfe4f1e2b4c61a73c367f9dfde9e82f9e","sha512":"468cd44edf0a03ca83bc30462ca3e889d342c3d43403ab607df43d7ac76ab5a9093af5b4c157af062cec35a5f7334698eff3a3b1002bb8c9d96b81516636c4bc","ssdeep":"","tlshash":"c82126bb638478fd7c07c710d262652a30ab69ba2206d74d856482a4e0215ecdd5bcc4","first_seen":"2026-07-26T12:40:54.83888Z","last_seen":"2026-07-26T12:41:39.396053Z","times_seen":3,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":348,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.379Z","timestamp":1785069616379,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://safepal.business\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Jul 2026 06:09:31 GMT\r\nexpires: Fri, 23 Jul 2027 06:09:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 282645\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":32108,"size_decoded":32921,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-07-26T21:44:51.768249Z","times_seen":27552,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":34,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.381Z","timestamp":1785069616381,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://safepal.business\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 26 Jul 2026 10:13:59 GMT\r\nexpires: Mon, 26 Jul 2027 10:13:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 8777\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24836,"size_decoded":25647,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-07-26T21:51:05.17092Z","times_seen":35771,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":54,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/2024/04/feature-icon4.png","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.477Z","timestamp":1785069616477,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2024/04/feature-icon4.png HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:45:18 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 12759\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12759,"size_decoded":13011,"mime_type":"image/png","magic":"PNG image data, 98 x 98, 8-bit/color RGBA, non-interlaced","md5":"929451b015b16b53f81f21f745df2a41","sha1":"e5cddd119de0c8950279b07ce4deb1b9455ec18c","sha256":"93f791d60eb0e25edc6ff866e63b0061e6f3690c07709d620915c05e238450c2","sha512":"dc1dcb050b28e0902623a9a50990e129b7c506e1e7e9652cc9d6c371fc77a34a4bb44312a6b651ac0a6a3ef0c70acf31b94ba8853bede02af7d373e28ae9b6b3","ssdeep":"192:RSbLWHjtD+JIGiVApVBhIoseodzPibdi9i3fPAWo6SccIBr9hCYkMIKYOHDn4jA8:4HWDtx/dzPUKEQW/Sc3iY91EAEmQBd","tlshash":"d242cfe943b05a8d18b84449b482732b29bc3f86046775c923dabd53fd8d6c70ee3962","first_seen":"2026-07-26T12:40:54.813491Z","last_seen":"2026-07-26T12:41:39.4318Z","times_seen":3,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/css/bootstrap.min.css?ver=5.0.","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.574Z","timestamp":1785069615574,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /template/assets/css/bootstrap.min.css?ver=5.0. HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Sun, 26 Jul 2026 12:40:15 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:20:42 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":232809,"size_decoded":34606,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"39ad0c72e4bbb8ca8883ab167e05d063","sha1":"c593875de0b96460479ee3967a3d84e238157b26","sha256":"66ac704488e8836391b7c6146b461bbcc9902f5a3e8506658dca4a66c9fc9f3a","sha512":"82c2876909095f7a3123069c1ad51a280399d0657476213e03833c6670af6aee587f31240b65ae01cfecd2018d40b4f9f3cd608507b557981b0b631ee0c857e6","ssdeep":"1536:EZCtjXbn98fOdRfvO5wlP7Qy9A37zV98IsY/ElV6V6pz600I41A:/tjT98fNV98mI6V6pz600I41A","tlshash":"6d3481d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2023-08-03T15:31:49Z","last_seen":"2026-07-26T12:41:39.403421Z","times_seen":169,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/module/elementor/assets/css/widget-heading.min.css?ver=4.1.4","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.594Z","timestamp":1785069615594,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /module/elementor/assets/css/widget-heading.min.css?ver=4.1.4 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Sun, 26 Jul 2026 12:40:15 GMT\r\nlast-modified: Sun, 05 Jul 2026 23:18:10 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 162\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":560,"size_decoded":436,"mime_type":"text/css","magic":"ASCII text, with very long lines (560), with no line terminators","md5":"c3be9e612baf8fc4af612de8af4c0864","sha1":"f6b1366e30a459deefca035c5563f1c929c8ed10","sha256":"f68e889145cb0e47b7b190b2fdf087a9213a264ad33951512880c9f8bb6d0cd8","sha512":"aee455fe10d8126deb4d1015b6b4450ace4851e5b32890505af619f7863469c56b788b5d822849986759aa85efde260da77ed12bbb236ce2bf6629bf6759f4ca","ssdeep":"","tlshash":"f2f0c0237e4b94aa383f1d571083337c74944ec893a0a8d8e9fa91435cf4cb27330622","first_seen":"2023-10-14T23:00:09Z","last_seen":"2026-07-26T21:41:07.962612Z","times_seen":118082,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":445,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/js/parallax-scroll.js?ver=1.0.0","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.665Z","timestamp":1785069615665,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /template/assets/js/parallax-scroll.js?ver=1.0.0 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:20:42 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 1646\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5485,"size_decoded":1928,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (961), with CRLF line terminators","md5":"369b22d32401862c344eea378209fedc","sha1":"040eeced817193c5f4143530e620d151d82f0cc6","sha256":"a6da22b5197f335ad60ed6edbde2828564109bc3bf253b64403e3f4e2d257564","sha512":"ce466f73be6e2bd7ea68a04c8dbed80748067f1a3f42a46a7a1508d27dfd36eb02c13564e8f717e3b18f0b55c6017345dfa6cef6863d53efbe39271b64a10cfa","ssdeep":"96:NzpxwQT23ldKp+1z6oOFCs6nOCsgkCXCs52WtQTJQKKHXkOj7YCb1eD3bCCjmb/:NFxj23nKLl6nOlgkWlkWtMQrYSO3bCCG","tlshash":"06b12141f1110976d2fe7132811d135bab3e7a5be215847cf34e9e9c4b80a30a3de62b","first_seen":"2026-07-26T12:40:54.807425Z","last_seen":"2026-07-26T12:41:39.394639Z","times_seen":3,"resource_available":true,"data":null}},"time_used":632,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":632,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/js/countdown.js?ver=1.0.0","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.667Z","timestamp":1785069615667,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /template/assets/js/countdown.js?ver=1.0.0 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:20:42 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 2445\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5394,"size_decoded":2727,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4166), with CRLF line terminators","md5":"090e95cea03ef7b30ee6c55fbe6d2495","sha1":"6f918a81b922dc02da8d433ec92692b0a6f49e20","sha256":"cd95a6ad9ff6340629938a0f62eaa589b20af50ce49516e30f8fd452e8c7ac3b","sha512":"b698007e5c7ec30a3ebb282603961f39893a20b6c1d4b4debfa81503e5b1d2881ac2f83ca02dac0532b2a2624080e402669cf17ca6750cbae2707e24d86cb7fc","ssdeep":"96:LBXpuplQHIwbeRFMSiM3jG6vrhdynv/2bBqz2eOj28xMxHxqxAxixw3xexbixrxS:kQHnUpxvrhdBqztOj28xMxHxqxAxixwo","tlshash":"7ab1c6ceb3b2139509a5539201ae1106a27bf15be4d7001cb5fceac87a75c9d606fd78","first_seen":"2024-08-20T11:00:55.627692Z","last_seen":"2026-07-26T12:41:39.450452Z","times_seen":45,"resource_available":true,"data":null}},"time_used":627,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":627,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/js/easing.min.js?ver=1.0.0","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.668Z","timestamp":1785069615668,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /template/assets/js/easing.min.js?ver=1.0.0 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:20:42 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 1315\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4465,"size_decoded":1597,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"b9f891207023a4902eea3ded4de657f3","sha1":"9e4984541d1436d1e7ef70294c28e0e20ef5b051","sha256":"0e11138578b1352be499728784cdc9e623aa8bc4a75f0580c0d04eb953835c9d","sha512":"c2d706a0658d347860085709a4e91f7621fccb70fc3c9888bcb83853a9e0bd50cba9e937eb06fff11cfed92a2fbc97a126deff42ef10dae7823af1f02759dd43","ssdeep":"96:8gWRsXW5cT1Z1PkRD3b9zkZOkHQXZLifQ19YynPxX3sles/1bOO35hQTvyW3N+Lp:8zOZTX1s9ZMF2x6Q3PPBwDx53WqWd+IE","tlshash":"d2916e5435de780f5396776051378006e2bdfa22c85da53c984ccc9839e0a2797abfac","first_seen":"2025-05-07T16:14:09.924001Z","last_seen":"2026-07-26T12:41:39.349652Z","times_seen":71,"resource_available":true,"data":null}},"time_used":707,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":707,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.678Z","timestamp":1785069615678,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Thu, 06 Feb 2025 23:27:26 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":21464,"size_decoded":7530,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-07-26T21:48:14.863549Z","times_seen":333008,"resource_available":true,"data":null}},"time_used":850,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":850,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/2024/05/footer-phn.png","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.684Z","timestamp":1785069615684,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2024/05/footer-phn.png HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:45:38 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 26955\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":26955,"size_decoded":27207,"mime_type":"image/png","magic":"PNG image data, 425 x 674, 8-bit colormap, non-interlaced","md5":"faea2e154775af78ffa9e8090bb7242d","sha1":"af692a1f18d372823e49182799f3e930dd9e4048","sha256":"3decd21d606bfd551aa878786123f89358b7a00afbae7656882f414be23d5941","sha512":"a15c7aa47326150aa32e19109c1cfac1391424fce738e91bb93fd91de4984e61e9a7c24da246e3493fb4eef649786c108c0247fab39d6d5490a0e29737db48a0","ssdeep":"768:lL7PYPV8hhEio2E5eWbAcK3LNzehJp1gKN1:lwShhdFWbczcpu8","tlshash":"e6c2e1af6cb8316405b3b4de3a48f3cda830c591d9c88459685b5b7c5fd95ac2bc38b1","first_seen":"2025-08-11T12:46:19.36443Z","last_seen":"2026-07-26T12:41:39.350744Z","times_seen":8,"resource_available":false,"data":null}},"time_used":910,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":909,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/wp-content/uploads/2024/05/footer-bg.png","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.419Z","timestamp":1785069616419,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/footer-bg.png HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/content/uploads/elementor/css/post-1139.css?ver=1784797837\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:45:36 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 25297\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":25297,"size_decoded":25549,"mime_type":"image/png","magic":"PNG image data, 1920 x 1557, 8-bit colormap, non-interlaced","md5":"ea4871807798d4b3a5ef0c9d78f1e712","sha1":"f767fecf704c512746bd222cefadd99195725170","sha256":"95fb4b741121502bc2ff9f94779c9eaeba878e44d91e8ea60c696ff600ae7080","sha512":"5cb142377b3b3df1a19f453cdb9b0e96374f9751a34963b235aaa9505df33286483588bd2aa6a1ff52ba268d76ab9313a8b50a506ee47aa84af7b02981c71b73","ssdeep":"768:8jkv9avRJUA6aIas5a3D/FTKFb/NS5hRpaC0+:0v8ASdgFSNSbuC/","tlshash":"7cb2cfea847c12966be4500d619db7232fb710f4892ede0dcee4081dcfbd907d5a99b2","first_seen":"2025-08-11T12:46:19.225835Z","last_seen":"2026-07-26T12:41:39.449757Z","times_seen":9,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":265,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Outfit:400,500%7CManrope:700,500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.599Z","timestamp":1785069615599,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css?family=Outfit:400,500%7CManrope:700,500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 26 Jul 2026 12:40:15 GMT\r\ndate: Sun, 26 Jul 2026 12:40:15 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5982,"size_decoded":1398,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"15afd92676fb482aba3228d3f1ecf978","sha1":"bb2e8b7457fcf58caa104db16926af12c04b09de","sha256":"f1660c3ecd8d5748f7b4bb6efebf82d148245b2a99591bec108c88833834021c","sha512":"70884aa33294e9d100d1376ef6eb4788dc7093ef3fe5a5aa3a99a78e25c2dd92dcc5a986cf091bde7e0a895f067cf1a0663a959f2c55049f628a329fd47d647e","ssdeep":"96:cOXaJsOXaLFZvOXaV3ZOXaZOXa4Jc+u1OXatNlOpaJsOpaLFZvOpaV3ZOpaZOpaw:sJ8rV3118+/JGNV3TT80qh6OhpV","tlshash":"8cc1bca00017e404db470cd133ce7e3aae5e61567441c57a9ffe1898adafd26636570e","first_seen":"2026-07-26T12:40:54.758194Z","last_seen":"2026-07-26T12:41:39.376277Z","times_seen":3,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":18,"send":0,"wait":48,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/2026/05/pngtree-shield-3d-illustrations-png-image_11537580.png","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.609Z","timestamp":1785069615609,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2026/05/pngtree-shield-3d-illustrations-png-image_11537580.png HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 03:20:04 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 119374\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":119374,"size_decoded":119627,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"70539b7711f7880fe720b78f7dc95a65","sha1":"22b8521b9588ccb19e35397f4774b74ff1ced9a0","sha256":"3042320503fc7bb89ab7da3080f85301dc65536cb0c127bf391e44e0ce19018d","sha512":"2fd806402099b22b6e79512eae6c3d769efd2d6d15655b81ab63c61d5180abbf9a1ee2bad4f806f21ff555c013fee10f6bf50b1b190b24f3641f7e37f1623ce2","ssdeep":"3072:YwOo/SO9Z558Oqi8sHO3dVqkCcMZn/BOZux+9VwVnieV:YwOoKKR8rsHO3I5Z/BOZuxMVw1","tlshash":"74c313c4484d1f3e3f2947eb08fa8968b2d743158ca677e5165fc87934c99d88ace913","first_seen":"2026-07-26T12:40:54.845634Z","last_seen":"2026-07-26T12:41:39.426266Z","times_seen":3,"resource_available":false,"data":null}},"time_used":629,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":529,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.651Z","timestamp":1785069615651,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Thu, 09 Jul 2026 21:12:49 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 2497\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5732,"size_decoded":2779,"mime_type":"text/javascript","magic":"data","md5":"12ebec1b36678eb1da4412af6c65751a","sha1":"4cb5d87353d9a06fde067063787a4beed692ba77","sha256":"558ae0ec83cc88de0929fde86b87c231246aafa9c961ebffb3257b05f62ca5cf","sha512":"a1bbd93277a59086bf27da7dcc60434b717ac521bce0618aef7c914789497a22cf56441a7f300f1bb7a6de56ca624226883d048f6eadbcc049dc717338189bb6","ssdeep":"96:IE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:3hgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"fdc1a7c975daf056235910a594afb005e134be2870debc00aae0c4957eb44cdb2b7fba","first_seen":"2026-07-02T22:01:42.315643Z","last_seen":"2026-07-26T21:48:14.886001Z","times_seen":10339,"resource_available":true,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":582,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/js/appear.js?ver=1.0.0","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.660Z","timestamp":1785069615660,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /template/assets/js/appear.js?ver=1.0.0 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:20:42 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 958\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2975,"size_decoded":1239,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"7b2fc9c1552372b269b85194bf8ff2e8","sha1":"1614ceb23c3cd597b8c73186426cfca84a3d38b1","sha256":"3e4628fe50187cd9d1c919cfae2bbaa7541e08edce51a08208d6b67763d16f59","sha512":"8bc94b8a3506a55a1c2cb5baca27133705add20ad53c585a004c57c93dc1ec3b4ebb747fb119d4cb6de505d07b44593c5c0109b11f2494d26054f59a1550e8a9","ssdeep":"","tlshash":"6d51ac8838436c60283b637eaa2b2108f72646774202866174ed599d3ff1d25e1defdd","first_seen":"2023-03-11T23:21:20Z","last_seen":"2026-07-26T12:41:39.40566Z","times_seen":316,"resource_available":true,"data":null}},"time_used":624,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":624,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/2024/05/round_ranner.png","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.681Z","timestamp":1785069615681,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2024/05/round_ranner.png HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:45:40 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 13635\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13635,"size_decoded":13887,"mime_type":"image/png","magic":"PNG image data, 302 x 302, 8-bit colormap, non-interlaced","md5":"7f7a2ad0b44a7ef2578b1c8f6d168a13","sha1":"f0f108acfc341572ec1e553a310e75a5349e8338","sha256":"96e06d0169fecbab2eac0d6971319a9091f2e0afa4be8f264221205d9700636d","sha512":"7c4394f40324fb0815a67d7f172a6a22e6182123c9d815a216b9f231d20a5b956e5a271ac199d824b2480ff186918e64e01a610acf1a1ea6da912c69959bba08","ssdeep":"192:QcqbE3bNSSZa3KWQMPvsT8HJu3TC4n2oq8l7zXXPwbuMLaPCwC/zudCmZhQ:dXYSZkKWQMsT8pu3TC44QrXYU6rLahQ","tlshash":"6f52d09c03574a0e8515695eb69ce7462f63fd307df2f54db924fc35f88a802d4291b0","first_seen":"2025-08-11T12:46:19.369021Z","last_seen":"2026-07-26T12:41:39.40632Z","times_seen":9,"resource_available":false,"data":null}},"time_used":853,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":853,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/img/contact-user.svg","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.329Z","timestamp":1785069616329,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /template/assets/img/contact-user.svg HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/template/assets/css/main.css?ver=1.0.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:20:42 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 290\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":592,"size_decoded":569,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5fa5b26e7f71f3b65e9fba0f8c0221b0","sha1":"399dffd0c3726ccb77c5bbdb25d4ec704f4185c1","sha256":"5b8cd5c8dbc68d244fd77040fbcbe14834a83990f0f3057d296fc60a0d0271b3","sha512":"472839b8695bb0b875973a2a3c845f40d35634f9a483a5454a18b7bfa6ffa1e71fa253a201862d02463b5b91ae1927162e43b54946870d4a3fc8d35498ad1a1f","ssdeep":"","tlshash":"6ef0acc93708ac6cb1224e20ef29363950f9242b2ea569d4d1b224371d505dfec374f9","first_seen":"2025-12-09T04:03:38.844979Z","last_seen":"2026-07-26T12:41:39.428444Z","times_seen":4,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/img/contact-email.svg","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.331Z","timestamp":1785069616331,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /template/assets/img/contact-email.svg HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/template/assets/css/main.css?ver=1.0.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:20:42 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 310\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":876,"size_decoded":589,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8d575dd0d88b7c6627de4a4763822dfd","sha1":"ec335f2df6ccdfb06e20cada053555b80d2c9349","sha256":"315a545c80bc506031df5286bbbd0e175809b7f74e6e854799e6dfc8f02d343f","sha512":"22e5177afc0b1788123d1c0d814288105d6e43da2fed88992ffef7eb824e3cbe1de3d011d8d518cef8c1f4058f3b1c69fa141eb120577e056635491762c142f6","ssdeep":"","tlshash":"1a11489527085d3cb1120b60f7113639a16919736288fe94e93120374a2969efdb78f9","first_seen":"2025-12-09T04:03:38.960115Z","last_seen":"2026-07-26T12:41:39.344887Z","times_seen":4,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/template/assets/fonts/fa-solid-900.ttf","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.386Z","timestamp":1785069616386,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /template/assets/fonts/fa-solid-900.ttf HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/template/assets/css/fontawesome.css?ver=5.13.0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: font/ttf\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:20:42 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":313408,"size_decoded":165829,"mime_type":"font/ttf","magic":"TrueType Font data, 13 tables, 1st \"FFTM\", 28 names, Macintosh","md5":"9242dedf4090cbdc546f036ac9b002da","sha1":"f21980c6e3d23cd133d7405be0303b7d5a643f24","sha256":"7e3132e8797b34670f483e0b25403ec5f44deda2f9095d1bfc95793f68440a40","sha512":"7de888ac211513780d9c09e7d0dc89c23df20a11c169209311cbe9737b3df60eead71af11caaef1d52300ac32c8cc8ac6580c5183fce0a9e462d20e85422d141","ssdeep":"6144:x+zwJnIrcihWCxXiCs5g9j4j6iyOzESHOjW1YtubnCOHoMU:cMnIrciDFZse9j4jYCE0OlMCOY","tlshash":"a9645dee769fcf67c04297bd9fd0bd3221e02f10324237e2ae47991e60669c495f056a","first_seen":"2023-05-18T03:49:17Z","last_seen":"2026-07-26T12:41:39.397013Z","times_seen":195,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/module/contact-form-7/includes/swv/js/index.js?ver=6.1.6","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.652Z","timestamp":1785069615652,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /module/contact-form-7/includes/swv/js/index.js?ver=6.1.6 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:40:54 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 3612\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12512,"size_decoded":3894,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-07-26T21:48:14.86803Z","times_seen":220630,"resource_available":true,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":582,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/2024/04/shape-color2.png","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.468Z","timestamp":1785069616468,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2024/04/shape-color2.png HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:45:12 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 278425\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":278425,"size_decoded":278678,"mime_type":"image/png","magic":"PNG image data, 1470 x 1939, 8-bit colormap, non-interlaced","md5":"8a7cfb92203e10b7c076de2cc9e0503c","sha1":"45926b06b8deae0c2974c40539ed22e25faab5df","sha256":"33cc38316a584ac9f85ab37e363a8c1ce21203f110b8bb9a33c7d5ed60cd3d49","sha512":"bdf93ffa69bb73bd45819216e6b9042c4e8469f6264c85022a02fda7660d6107f65c4176da4f6f2b988afc93d9f034c47b1b292a6ca3d4edf29727f9e776505c","ssdeep":"6144:u/XLud1y5hxuXccsbJDM4982Al12nwqhpZWNHQJFBBBwZykUnvnza2FcvB:u/2QDWccsbJDH982+1HqLhJFBBBwZ1OC","tlshash":"9e4423f095a77b44b700f831e94e5e3d648937ba44392dbf4db1b168ab1e3409e73a09","first_seen":"2025-08-11T12:46:19.220458Z","last_seen":"2026-07-26T12:41:39.352825Z","times_seen":10,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/2024/04/feature-icon3.png","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.476Z","timestamp":1785069616476,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2024/04/feature-icon3.png HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:45:18 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 10021\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":10021,"size_decoded":10273,"mime_type":"image/png","magic":"PNG image data, 82 x 82, 8-bit/color RGBA, non-interlaced","md5":"72500df1bd5e9d51e7f7686a56525fa0","sha1":"3ba30b4672b40ae8da8ef1d36e89313ac49e872d","sha256":"417b04235439c3a20ac2c2f908e23a24f67720c1a48559ffc6910c462c9e649c","sha512":"e868c8211fe468a32449d131430055e0b0135bb78ae001e006058c1ab9e2641be39ee22f761c540927822d87c76e49cae3b524621bea3279963429edfe3bc3a9","ssdeep":"192:qSZ7/h5u7qP9mM/mC4iULdkhEd3yuUQhe2VeZI02wM:lB3/RQqUyfQeY75H","tlshash":"3422c07118f240ba2792443841f63e41b4ad44fc3716fc1fc69de9ab9b507948daac6b","first_seen":"2025-08-11T12:46:19.313298Z","last_seen":"2026-07-26T12:41:39.416789Z","times_seen":8,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/2024/04/partner_13.png","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.568Z","timestamp":1785069616568,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2024/04/partner_13.png HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:45:16 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 1027\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1027,"size_decoded":1278,"mime_type":"image/png","magic":"PNG image data, 98 x 28, 8-bit/color RGBA, non-interlaced","md5":"93317f272e5c5b075f7170c96e882bfb","sha1":"ecfada476dd54f9951616d677e7b5507b024cd66","sha256":"a134439b5f0738cd959c2b3efe1c4c9d3952eb1368b58e4ad7f77c6cc3d7e5b3","sha512":"0aee37cc3f4f10778b98c35f5fe495a70f3765ef77c6ae08b12672fbadf9b52bc96faa7e9a066668b9f6b27f87f9ea246e662afe466716751e6d37e09ddfeb12","ssdeep":"","tlshash":"89110ccd0854457fdd662f30439b46f65d579c9930c1260527366f08609b79821c4646","first_seen":"2025-08-11T12:46:19.276307Z","last_seen":"2026-07-26T12:41:39.433642Z","times_seen":8,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/2024/04/partner_12.png","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.582Z","timestamp":1785069616582,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2024/04/partner_12.png HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 02:45:16 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 1617\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1617,"size_decoded":1868,"mime_type":"image/png","magic":"PNG image data, 126 x 30, 8-bit/color RGBA, non-interlaced","md5":"83974eaac2a04322545eac04f2f30f72","sha1":"44a8756a2e8c9eb82fef8efe674d55d46439220d","sha256":"e9909f6ee994398d5c22436924865a3c0943f6d347bfd168c1a0dbb01fb2fee4","sha512":"8cf891d81231c45548b161bac05aaa1881e2cf9bf870c5f97e5bb175844ec324302b6aa3184d06a283ba4ffd737435cba2737a24a5cfd775ee47405b305bf418","ssdeep":"","tlshash":"c5310af9320a43e5876e2dd6646388f9b83baa2e820f2e5c1849c52e634a58453220d2","first_seen":"2025-08-11T12:46:19.23015Z","last_seen":"2026-07-26T12:41:39.446069Z","times_seen":8,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/2026/06/profile-picture-3.png","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.590Z","timestamp":1785069616590,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/2026/06/profile-picture-3.png HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Mon, 01 Jun 2026 22:32:48 GMT\r\nserver: Apache\r\nvia: 1.1 Caddy\r\ncontent-length: 2827\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2827,"size_decoded":3078,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"074630fe218e2eec38519acd9de941b9","sha1":"e453eb22663e5c90fb42971d086e0e1069bc1c7f","sha256":"a09452c57b4e6bc8f63fc6b23b2eb634de1059d74e217fc29d8d5230dfe598bb","sha512":"bdd9f160882c3656e85b7f891f4a63feef230a53be6c1ea8881da936e4149efd98a634ec74507c167385a3292d1c9809edf8d187c1728b534cdb9d24993f2563","ssdeep":"","tlshash":"41514b6c6c02e043994c5fefe8e50368dd098dd8cf6a56360b0aa46017d3ae527567dc","first_seen":"2026-07-26T12:40:54.862954Z","last_seen":"2026-07-26T12:41:39.439774Z","times_seen":3,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/wp-json/contact-form-7/v1/contact-forms/1149/feedback/schema","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.669Z","timestamp":1785069616669,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /wp-json/contact-form-7/v1/contact-forms/1149/feedback/schema HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, */*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://safepal.business/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 \r\naccess-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type\r\naccess-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json; charset=UTF-8\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlink: \u003chttps://safepal.business/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nserver: Apache\r\nvary: Origin\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":118,"size_decoded":611,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"723443825787b96afb5a77bcb5182dd6","sha1":"a0baf1a7a0f48d6cc6739da1564c1f358d2c4bac","sha256":"02e8b0cfe276989b48d2ac7529a79a2137ca2736ca8a8be5b868b8d079aae079","sha512":"abdd4f42c835b75b6a5a6342e5a5c1eb3898ac43281e1ae450b8d2c48ed47cc30b145cdcf752d96da0a9d8ecfcb4b102d7d16825175a86b39cfb6d0f2b669dea","ssdeep":"","tlshash":"4cb01281e63458800bfb89cb3e166810b3672d21704b0c3cceded1385e5270c913d0f8","first_seen":"2026-07-26T12:40:54.732025Z","last_seen":"2026-07-26T12:41:39.373251Z","times_seen":3,"resource_available":false,"data":null}},"time_used":766,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":766,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/wp-includes/js/wp-emoji-release.min.js?ver=7.0.2","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.893Z","timestamp":1785069616893,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.0.2 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sun, 26 Jul 2026 12:40:17 GMT\r\nlast-modified: Thu, 09 Jul 2026 21:12:49 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":22752,"size_decoded":6021,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-07-26T21:52:22.040875Z","times_seen":18274,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/content/uploads/elementor/css/post-1139.css?ver=1784797837","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.642Z","timestamp":1785069615642,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /content/uploads/elementor/css/post-1139.css?ver=1784797837 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Thu, 23 Jul 2026 09:10:37 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 1135\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5225,"size_decoded":1410,"mime_type":"text/css","magic":"ASCII text, with very long lines (5225), with no line terminators","md5":"2999b22199c59fcc070e9d3b2a1df5d0","sha1":"4e4010ac5c0db4359cb750b1aabaa701e1614660","sha256":"e2122236dec73dd9a06a6f56e87e277888a6eb3f3de16818c680c3b053ac2d39","sha512":"72d4bc07f4e0af0973a22643e15b135458c5867cd7104bd254abe4114de64312816a03948b9265c3b384eadb85b672a30554cd249284313541fc9589052220e4","ssdeep":"96:P0JEnJodLAn1+tqwy3CRD2KnJ0nJWrb/nJ4GJQ7Jm:8JUJU0Ytqw+CRD2uJ0nJWrbvJ4GJgJm","tlshash":"9bb134553e13912a722f242fc413fa9c662598cfc57e67c3e620915bfcbad5233d0a0a","first_seen":"2026-07-26T12:40:54.784766Z","last_seen":"2026-07-26T12:41:39.400561Z","times_seen":3,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":472,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.business/module/elementor/assets/js/webpack.runtime.min.js?ver=4.1.4","fqdn":"safepal.business","domain":"safepal.business","tld":"business"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:15.673Z","timestamp":1785069615673,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.business","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:09:35 GMT","end":"Thu, 22 Oct 2026 11:09:34 GMT"},"fingerprint":{"sha1":"F1:79:62:00:FC:17:F8:16:9C:CC:A6:FC:08:31:AA:B5:F2:03:19:BC","sha256":"91:8C:7E:83:7C:93:94:52:8D:25:37:4F:12:C5:31:03:78:49:FF:9D:E3:A9:FF:92:01:52:6E:C5:41:12:C1:72"}}},"request":{"raw":"GET /module/elementor/assets/js/webpack.runtime.min.js?ver=4.1.4 HTTP/1.1\r\nHost: safepal.business\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.business/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sun, 26 Jul 2026 12:40:16 GMT\r\nlast-modified: Sun, 05 Jul 2026 23:18:11 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 2578\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5819,"size_decoded":2860,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5819), with no line terminators","md5":"0d490d1bad7e9038b5741f77a7bcee6c","sha1":"64f3096d6f0121949d2b88ef19d4b9adcf38fd89","sha256":"8dd3674bae946e2e04bc962443f0994d736a761bb28e816c20aee6391ef242ed","sha512":"9860efe572a0bda18b274965bc81ae0f513a1c826eeaf9b67cc7b6cec2b78164a67ee15f586e63905cf6b8cc520b00039ff7e9e1460b32dd0977dc4a85cd24b2","ssdeep":"96:+nsL0Z9Z4JfrjqyWiNDy9XOWZp5Rm4leN8EVrzLyVx2UlKBKGarNcl8/2:WsLGyrjiiNWZ5RmHFJW6x7G/2","tlshash":"1cc161941a54fd2b21e139d8e01ba775253ec0373c1af981fa32eced54e4ed087aa531","first_seen":"2026-05-12T16:52:28.591446Z","last_seen":"2026-07-26T21:40:24.894936Z","times_seen":17801,"resource_available":true,"data":null}},"time_used":842,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":842,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"safepal.business","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://safepal.business/","date":"2026-07-26T12:40:16.384Z","timestamp":1785069616384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://safepal.business\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Jul 2026 06:09:31 GMT\r\nexpires: Fri, 23 Jul 2027 06:09:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 282645\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":32108,"size_decoded":32921,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-07-26T21:44:51.768249Z","times_seen":27552,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":49,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}