{"report_id":"4a447f12-880a-450e-b04e-b5c2a7816578","version":0,"status":"done","tags":[],"date":"2026-08-28T13:31:09Z","url":{"schema":"http","addr":"safepalweb.com/","fqdn":"safepalweb.com","domain":"safepalweb.com","tld":"com"},"ip":{"addr":"199.188.200.130","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"safepalweb.com/","fqdn":"safepalweb.com","domain":"safepalweb.com","tld":"com"},"title":"SafePal","dom":{"size":6001,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"9a3a274eba9628e68fb4cdbc6761c65f","sha1":"39316375d47e2bdeafd80896d520a97c75f764b2","sha256":"7ca84a194be77e39ef4be86c5aa809cc1e941a498f0c2fad8451837d9c2a111c","sha512":"24266c36cf7349bc492e6d5628353bc3e3f2d8373079601e27dc661991f5e2e4f71240f51473f8f931c52aef7614947e31d1d32ea5f54ad2c7042343a6e76863","ssdeep":"48:nKnGYc1oaHD0rG3UT3guMUHlmAbwZJC/pPIjwIm/LDd63FvrWHMT2nObH1xiQ7Bv:npuOa/T3guThwZJ9grq/rlQO+wZVDoO","tlshash":"1bc1655667ef0436f602806c6ba6b225166b90c7d70ec6147d9d236c8f893cb99b33dc","dom_hash":"domhashd1e226b367d8ab7800b66f33f4f3582e","first_seen":"2026-08-28T13:20:22.485587Z","last_seen":"2026-08-28T13:31:09.997402Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"safepalweb.com/","fqdn":"safepalweb.com","domain":"safepalweb.com","tld":"com"},"ip":{"addr":"199.188.200.130","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-02T13:31:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"safepalweb.com","ip":{"addr":"199.188.200.130","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"2026-05-13","domain_rank":0,"first_seen":"2026-08-28T13:20:18.87352Z","last_seen":"2026-08-28T13:20:18.87352Z","alert_count":0,"request_count":2,"received_data":35811,"sent_data":1710,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"safepalweb.com/","fqdn":"safepalweb.com","domain":"safepalweb.com","tld":"com"},"ip":{"addr":"199.188.200.130","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T13:30:40.861Z","timestamp":1787923840861,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepalweb.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 16 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"02:7F:C8:55:69:52:07:7A:C6:D9:4B:42:C9:70:4D:8C:68:19:59:C5","sha256":"4F:62:37:3C:37:80:5E:5B:20:A3:46:9A:66:B9:E7:16:AF:68:EE:62:80:E3:3E:9B:A5:81:FB:E2:BF:A1:DC:2D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: safepalweb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.2.33\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IkprY3BOYXNwUU5mZEM4RFdVYTM2Unc9PSIsInZhbHVlIjoiRkV6ZnBRdmJRcm5OQ04xMFBUeEhxZUVZSUlaUEE5U1hyZXdPbHhJcUJtM2EyZnR6VlQxU2pCWHBNbTZyWFdNTXBEelhXamVNdUs0VGlaNkV0Mk5DYUJyNTZmcXF0WW0wZXFwNGhSakVMeEdubHFXdFo2Sk5hcFMrdGc1RmVsNHUiLCJtYWMiOiJiMmZkNWJlMGU5NzRmZjExZmQwNGNhYjU0MzI2NjBkZjAxZjM5OTkwNzE2ZmYyNGEwOGMwZTMyOWM3YzRiYTAzIiwidGFnIjoiIn0%3D; expires=Fri, 28 Aug 2026 15:30:41 GMT; Max-Age=7200; path=/; secure; samesite=lax\nsafepal-session=eyJpdiI6IlRaY0d0NkNpbXlTM2JqTC9ndUNKcGc9PSIsInZhbHVlIjoiaHpGbGFMYjBGbjJpZWlFc3BDQ0NHWEUxZjlLVVBQMVZ5YXl5dERaRkJtQjB4MFhGQzBoTE1hSTl2bDR4VzBOUzYvZmM0MFRkbnBiYjNlU1FuY0JiVHM2clJhOTlkNDRSM3piVmZnbFVYR0FTRXNxUlVRQmNzTkJsbUs1WDBMaTUiLCJtYWMiOiI1Mjc1MmZjZmFmMDk2NGQwNmE5NWUyYWUzNzNhNjJmMzUzMTA5NzY4OTczODVhNDRiYzU2MjE1ZmNkMTQ0ODhiIiwidGFnIjoiIn0%3D; expires=Fri, 28 Aug 2026 15:30:41 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\ncontent-length: 1667\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 28 Aug 2026 13:30:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IkprY3BOYXNwUU5mZEM4RFdVYTM2Unc9PSIsInZhbHVlIjoiRkV6ZnBRdmJRcm5OQ04xMFBUeEhxZUVZSUlaUEE5U1hyZXdPbHhJcUJtM2EyZnR6VlQxU2pCWHBNbTZyWFdNTXBEelhXamVNdUs0VGlaNkV0Mk5DYUJyNTZmcXF0WW0wZXFwNGhSakVMeEdubHFXdFo2Sk5hcFMrdGc1RmVsNHUiLCJtYWMiOiJiMmZkNWJlMGU5NzRmZjExZmQwNGNhYjU0MzI2NjBkZjAxZjM5OTkwNzE2ZmYyNGEwOGMwZTMyOWM3YzRiYTAzIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-08-28T15:30:41Z","raw_expires":"Fri, 28 Aug 2026 15:30:41 GMT","max_age":7200,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=eyJpdiI6IkprY3BOYXNwUU5mZEM4RFdVYTM2Unc9PSIsInZhbHVlIjoiRkV6ZnBRdmJRcm5OQ04xMFBUeEhxZUVZSUlaUEE5U1hyZXdPbHhJcUJtM2EyZnR6VlQxU2pCWHBNbTZyWFdNTXBEelhXamVNdUs0VGlaNkV0Mk5DYUJyNTZmcXF0WW0wZXFwNGhSakVMeEdubHFXdFo2Sk5hcFMrdGc1RmVsNHUiLCJtYWMiOiJiMmZkNWJlMGU5NzRmZjExZmQwNGNhYjU0MzI2NjBkZjAxZjM5OTkwNzE2ZmYyNGEwOGMwZTMyOWM3YzRiYTAzIiwidGFnIjoiIn0%3D; expires=Fri, 28 Aug 2026 15:30:41 GMT; Max-Age=7200; path=/; secure; samesite=lax"},{"name":"safepal-session","value":"eyJpdiI6IlRaY0d0NkNpbXlTM2JqTC9ndUNKcGc9PSIsInZhbHVlIjoiaHpGbGFMYjBGbjJpZWlFc3BDQ0NHWEUxZjlLVVBQMVZ5YXl5dERaRkJtQjB4MFhGQzBoTE1hSTl2bDR4VzBOUzYvZmM0MFRkbnBiYjNlU1FuY0JiVHM2clJhOTlkNDRSM3piVmZnbFVYR0FTRXNxUlVRQmNzTkJsbUs1WDBMaTUiLCJtYWMiOiI1Mjc1MmZjZmFmMDk2NGQwNmE5NWUyYWUzNzNhNjJmMzUzMTA5NzY4OTczODVhNDRiYzU2MjE1ZmNkMTQ0ODhiIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-08-28T15:30:41Z","raw_expires":"Fri, 28 Aug 2026 15:30:41 GMT","max_age":7200,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"safepal-session=eyJpdiI6IlRaY0d0NkNpbXlTM2JqTC9ndUNKcGc9PSIsInZhbHVlIjoiaHpGbGFMYjBGbjJpZWlFc3BDQ0NHWEUxZjlLVVBQMVZ5YXl5dERaRkJtQjB4MFhGQzBoTE1hSTl2bDR4VzBOUzYvZmM0MFRkbnBiYjNlU1FuY0JiVHM2clJhOTlkNDRSM3piVmZnbFVYR0FTRXNxUlVRQmNzTkJsbUs1WDBMaTUiLCJtYWMiOiI1Mjc1MmZjZmFmMDk2NGQwNmE5NWUyYWUzNzNhNjJmMzUzMTA5NzY4OTczODVhNDRiYzU2MjE1ZmNkMTQ0ODhiIiwidGFnIjoiIn0%3D; expires=Fri, 28 Aug 2026 15:30:41 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":5887,"size_decoded":2858,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"392004a93170dbb2b573daceb58222f3","sha1":"c65183dd250cf3457ac13e5a8af541868f4ef819","sha256":"5edb3a879a3cdc52165cf09bdc731048348eee61976100abe43e0e7e901718c6","sha512":"7dc589b99f438bebd2014bfbdfa503ef14634a52c1eda6d5e194cdf075c99a663008510bac9a4a8f3395b44ca18981d00319374a278996b832ac3303581ded83","ssdeep":"48:MnGYc1oaHD0rG3UT3guMUHlmAbwZJC/pPIjwIm/vHRGrFTPWHMFcn1H1xQQ7FfeL:/uOa/T3guThwZJ9GTB/FhQOkwrVwom","tlshash":"e7c1555617ef1036f612802c6ba6a625276b90c3930ed6107d9d67ac8f882cb5db33dc","first_seen":"2026-08-28T13:20:22.486871Z","last_seen":"2026-08-28T13:31:10.001618Z","times_seen":2,"resource_available":false,"data":null}},"time_used":734,"timings":{"blocked":-1,"dns":20,"connect":166,"send":0,"wait":207,"receive":0,"ssl":340},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepalweb.com/favicon.png","fqdn":"safepalweb.com","domain":"safepalweb.com","tld":"com"},"ip":{"addr":"199.188.200.130","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepalweb.com/","date":"2026-08-28T13:30:41.784Z","timestamp":1787923841784,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepalweb.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 16 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"02:7F:C8:55:69:52:07:7A:C6:D9:4B:42:C9:70:4D:8C:68:19:59:C5","sha256":"4F:62:37:3C:37:80:5E:5B:20:A3:46:9A:66:B9:E7:16:AF:68:EE:62:80:E3:3E:9B:A5:81:FB:E2:BF:A1:DC:2D"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: safepalweb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepalweb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkprY3BOYXNwUU5mZEM4RFdVYTM2Unc9PSIsInZhbHVlIjoiRkV6ZnBRdmJRcm5OQ04xMFBUeEhxZUVZSUlaUEE5U1hyZXdPbHhJcUJtM2EyZnR6VlQxU2pCWHBNbTZyWFdNTXBEelhXamVNdUs0VGlaNkV0Mk5DYUJyNTZmcXF0WW0wZXFwNGhSakVMeEdubHFXdFo2Sk5hcFMrdGc1RmVsNHUiLCJtYWMiOiJiMmZkNWJlMGU5NzRmZjExZmQwNGNhYjU0MzI2NjBkZjAxZjM5OTkwNzE2ZmYyNGEwOGMwZTMyOWM3YzRiYTAzIiwidGFnIjoiIn0%3D; safepal-session=eyJpdiI6IlRaY0d0NkNpbXlTM2JqTC9ndUNKcGc9PSIsInZhbHVlIjoiaHpGbGFMYjBGbjJpZWlFc3BDQ0NHWEUxZjlLVVBQMVZ5YXl5dERaRkJtQjB4MFhGQzBoTE1hSTl2bDR4VzBOUzYvZmM0MFRkbnBiYjNlU1FuY0JiVHM2clJhOTlkNDRSM3piVmZnbFVYR0FTRXNxUlVRQmNzTkJsbUs1WDBMaTUiLCJtYWMiOiI1Mjc1MmZjZmFmMDk2NGQwNmE5NWUyYWUzNzNhNjJmMzUzMTA5NzY4OTczODVhNDRiYzU2MjE1ZmNkMTQ0ODhiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 04 Sep 2026 13:30:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 06 May 2026 12:04:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28416\r\ndate: Fri, 28 Aug 2026 13:30:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28416,"size_decoded":28733,"mime_type":"image/png","magic":"PNG image data, 316 x 316, 8-bit/color RGBA, non-interlaced","md5":"8ed9ca4df50f996340c1b57b97b598ac","sha1":"526b6f3835cb20ae323bb774a68afa73cb0a36b8","sha256":"bcf4d8e35357bbe1ec3522efa7f309824a9656910ca5d8e3b07d4753f9c1be2a","sha512":"2d05602f73d6b14e8decde95037330be623292ab8a364b5ffb8b63180ebd7c76d66f248714c022e209f0b1ff5b16a74125838502c26c2ab1e4a6d14bbed1b4f0","ssdeep":"768:EfoaStUMo1uzrkcTNfL79qNwcVDzAOiQabLT:Ef39uH505hzAOitbX","tlshash":"47d2e1c7d25c5da38c0875a9fa938be9b76441c71f4d258bb1dbe540702753f06be224","first_seen":"2023-06-01T21:15:40Z","last_seen":"2026-08-28T13:31:10.00316Z","times_seen":238,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":167,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}