{"report_id":"5ca4e610-798f-4f9d-9e47-e0137d8bdcd6","version":6,"status":"done","tags":[],"date":"2026-04-29T04:16:56Z","url":{"schema":"https","addr":"safetontransact.pages.dev","fqdn":"safetontransact.pages.dev","domain":"safetontransact.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.201","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"safetontransact.pages.dev/","fqdn":"safetontransact.pages.dev","domain":"safetontransact.pages.dev","tld":"pages.dev"},"title":"Safe Transaction on TON Blockchain","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"safetontransact.pages.dev","fqdn":"safetontransact.pages.dev","domain":"safetontransact.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.201","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-03T04:16:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-29T04:16:33Z","timestamp":1777436193,"ip_dst":{"addr":"172.66.44.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":55140,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2026-04-29T04:16:33.398055+0000\",\"flow_id\":1791080922212973,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":55140,\"dest_ip\":\"172.66.44.55\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"safetontransact.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3482,\"start\":\"2026-04-29T04:16:33.387693+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"safetontransact.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"cdndelivery.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"safetontransact.pages.dev","ip":{"addr":"172.66.44.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-04-29T04:16:58.872072Z","last_seen":"2026-04-29T04:16:58.872072Z","alert_count":16,"request_count":16,"received_data":3037433,"sent_data":7701,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"SweetAlert2:11.7.16","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}]},{"fqdn":"trade.tonkeeper.help","ip":{"addr":"64.190.63.222","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2025-10-25","domain_rank":0,"first_seen":"2026-04-29T04:16:58.873675Z","last_seen":"2026-04-29T04:16:58.873675Z","alert_count":0,"request_count":2,"received_data":256,"sent_data":940,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-04-26T22:34:03.62582Z","alert_count":0,"request_count":2,"received_data":1400047,"sent_data":900,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"raw.githubusercontent.com","ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2014-02-06","domain_rank":22021,"first_seen":"2014-03-01T07:08:08Z","last_seen":"2026-04-22T22:23:50.958975Z","alert_count":0,"request_count":1,"received_data":22554,"sent_data":511,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-26T22:16:47.246638Z","alert_count":0,"request_count":2,"received_data":98734,"sent_data":1130,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-04-26T22:35:53.043088Z","alert_count":0,"request_count":3,"received_data":418106,"sent_data":1432,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdndelivery.pages.dev","ip":{"addr":"172.66.47.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2024-01-11T21:04:54Z","last_seen":"2026-03-27T23:33:22.014602Z","alert_count":1,"request_count":1,"received_data":4753083,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-26T22:20:29.825994Z","alert_count":0,"request_count":1,"received_data":36314,"sent_data":578,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/ethereumjs/browser-builds/dist/ethereumjs-tx/ethereumjs-tx-1.3.3.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"665a1c0e5bfdf171065e4f6537812535","sha1":"4a7a349db08339920c2d91fda84e8104289dba92","sha256":"2e01f92b4b10776280cb09ee9cb4c669f313ecf8ee9d268de05432b5757fa9cc","sha512":"6529c96fe0a7c523b904f18e5a5b81c3f69ba183dcfd02fed8f989adc731c9072f343b2fc7215015b720e37f7011b1546f3873e8ec925152498db404ed2cb1b7","ssdeep":"","tlshash":"b411abc636a1b1c552bf64f5424fc047b436de7306cc90448a69c8fd2cb8d0a82eba2a","size":1000,"data":"","first_seen":"2024-08-20T14:44:52.392951Z","last_seen":"2026-06-01T09:40:57.108364Z","times_seen":911,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11.7.16/dist/sweetalert2.all.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"728bc77dea48d51ee679f3f539eeabe5","sha1":"41332aeb228fba895fb07dd9179a4b3f02ab3738","sha256":"23621f37fe541c0e8f254d609b339515e2f04555dd908a19837a7732842280d1","sha512":"b5abfac52f230367323bca8ea36eb5ec764bd35b8ee72e5f1b32eef9b77f874cf80a6069367c0813b80b395a7c908ec5d4faafeacd44c7b6e70250e3d42a3f25","ssdeep":"","tlshash":"4a111f012d21b4b202ea03d9319a8a87b614817f725918e0f51c8c7439faf576884a8e","size":1000,"data":"","first_seen":"2025-03-07T04:57:20.021101Z","last_seen":"2026-05-31T22:53:57.026758Z","times_seen":898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"safetontransact.pages.dev/images/favicon.svg","fqdn":"safetontransact.pages.dev","domain":"safetontransact.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safetontransact.pages.dev/","date":"2026-04-29T04:16:34.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safetontransact.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 20:15:40 GMT","end":"Wed, 10 Jun 2026 21:14:05 GMT"},"fingerprint":{"sha1":"1C:AA:1D:A4:C7:44:FE:63:FA:B3:0D:73:60:C0:76:0B:9F:0C:72:B6","sha256":"07:E0:77:B9:56:70:E8:68:2A:09:43:E5:1E:27:4B:DE:70:7F:C9:C5:11:BB:12:2C:3D:13:07:5F:54:5A:0C:D4"}}},"request":{"raw":"GET /images/favicon.svg HTTP/1.1\r\nHost: safetontransact.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://safetontransact.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 29 Apr 2026 04:16:34 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4l4KEmefoUgBdMBBbfENMFXGvPUsfPf4RuXIC2E9KUHtFx31FMRp9PCRWBPLhAQQr12JJNYq2WKjQ%2FSetF5Re617Nt7JJ1zJy%2BKuNkRuxo%2BJ0kHMTSsEo0qKW%2FKaDmOmHPQtw9BCsH7AZogc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"17855f81b571fb58168d5385cff3637a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f3b7df9b99056ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3033,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"da37ff1e0d64605bf7da9238b38f5786","sha1":"835a3ccd958bc1507c1ca10f6bf8b01dddda90a6","sha256":"855813e773e729ec6424dd1e7422307798e1c45c8422669c8a2b3f36dc075b72","sha512":"7d0496a39aaa20623199ddf8fa5e066cbe7ea003061eb18a023cfadd1230cde522e862b1644aa0fc17181459832a578d3ea2754bb4e7724b4f258cb4efa1ac10","ssdeep":"","tlshash":"905163d9245de3ca185883f68baef0390024d4cd5ed18264fb4017096caaae71e7dfe8","first_seen":"2026-04-29T04:17:02.963449Z","last_seen":"2026-04-29T04:17:02.963449Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"safetontransact.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safetontransact.pages.dev/js/index-DUBJxwLV.js","fqdn":"safetontransact.pages.dev","domain":"safetontransact.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safetontransact.pages.dev/","date":"2026-04-29T04:16:33.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safetontransact.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 20:15:40 GMT","end":"Wed, 10 Jun 2026 21:14:05 GMT"},"fingerprint":{"sha1":"1C:AA:1D:A4:C7:44:FE:63:FA:B3:0D:73:60:C0:76:0B:9F:0C:72:B6","sha256":"07:E0:77:B9:56:70:E8:68:2A:09:43:E5:1E:27:4B:DE:70:7F:C9:C5:11:BB:12:2C:3D:13:07:5F:54:5A:0C:D4"}}},"request":{"raw":"GET /js/index-DUBJxwLV.js HTTP/1.1\r\nHost: safetontransact.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://safetontransact.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 29 Apr 2026 04:16:33 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bnc11OdMWbdQG6Wgiqbepcj6QeM0XWeLuG2%2FJBHSsOYdqwL8nPdQpSP6aGj7NfnBtIitD6S%2BR6Jm7iYXhNP%2BHZahhr6xR8xaQocGOexLO5ORfsTF2vCsGRo0YikXUTQfYvGZwjGL1VMrnI3h\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"692c0579d0be730445ec2870ec144df0\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f3b7df2ee7356ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2378437,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a1b2c591af80830cbef277ad306e9d2c","sha1":"869bbc5db24026d30065d2a71ce0cd813511f427","sha256":"f54beef12e1634f561fcccbc61e952ac2c630394a6e7b5917cb4a475c4314ae6","sha512":"c00da07ad10ef25f9f6f04400f1f425d8e393c53aacb7c324c0667417530ff96b63019463e648c70b99a8cb57e3712a69e184e86e25fd521d30cf6274efd9681","ssdeep":"12288:IpLuNuBmd4i5H+Qn45OVPftQ7y9l5jgXl/HeAFfmFZFyZ4Z1q:IZBmd4i5eQn45m47d4Z1q","tlshash":"5a25c58063c46c8a13974fb5721bb4d7f49e68bb3d58484fe521fca025e9217fae8931","first_seen":"2026-04-29T04:17:02.969434Z","last_seen":"2026-04-29T04:17:02.969434Z","times_seen":1,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"safetontransact.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safetontransact.pages.dev/css2%2540family%253DMontserrat%253Aital%252Cwght%25400%252C100..900%253B1%252C100..900%2526display%253Dswap.html","fqdn":"safetontransact.pages.dev","domain":"safetontransact.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safetontransact.pages.dev/","date":"2026-04-29T04:16:33.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safetontransact.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 20:15:40 GMT","end":"Wed, 10 Jun 2026 21:14:05 GMT"},"fingerprint":{"sha1":"1C:AA:1D:A4:C7:44:FE:63:FA:B3:0D:73:60:C0:76:0B:9F:0C:72:B6","sha256":"07:E0:77:B9:56:70:E8:68:2A:09:43:E5:1E:27:4B:DE:70:7F:C9:C5:11:BB:12:2C:3D:13:07:5F:54:5A:0C:D4"}}},"request":{"raw":"GET /css2%2540family%253DMontserrat%253Aital%252Cwght%25400%252C100..900%253B1%252C100..900%2526display%253Dswap.html HTTP/1.1\r\nHost: safetontransact.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://safetontransact.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 308 Permanent Redirect\r\ndate: Wed, 29 Apr 2026 04:16:33 GMT\r\ncontent-length: 0\r\nlocation: /css2%40family%3DMontserrat%3Aital%2Cwght%400%2C100..900%3B1%2C100..900%26display%3Dswap\r\naccess-control-allow-origin: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jwYJYimhrQYzrojVEYZnZe2apy5ABgA7Tg7zrum6xr7GD0U6FgHdF1cV42tAiFjHws1RegVinmGBFvkpr7%2BPUz96TLLonWBLqNhlDa5%2BX0Vu81y9dZIPp877vvgsFiE3IO5DLDz9qmGsraO%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f3b7df2ee7656ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T03:51:41.729741Z","times_seen":17520440,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"safetontransact.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trade.tonkeeper.help/_next/static/css/e8fdde2e5ad28fb6.css","fqdn":"trade.tonkeeper.help","domain":"tonkeeper.help","tld":"help"},"ip":{"addr":"64.190.63.222","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safetontransact.pages.dev/","date":"2026-04-29T04:16:33.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trade.tonkeeper.help","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sun, 29 Mar 2026 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B6:37:EE:41:4F:11:30:7D:0E:AB:DD:67:43:BD:60:72:A2:5D:B7:27","sha256":"1C:9A:FE:AF:FE:88:56:C1:E4:A9:82:B2:B8:25:5B:5B:07:F8:68:BE:4F:40:07:4E:27:89:A7:4C:70:D8:28:29"}}},"request":{"raw":"GET /_next/static/css/e8fdde2e5ad28fb6.css HTTP/1.1\r\nHost: trade.tonkeeper.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://safetontransact.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 441 No Reason Phrase\r\ndate: Wed, 29 Apr 2026 04:16:34 GMT\r\nserver: Parking/1.0\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"441","status_text":"No Reason Phrase","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T03:51:41.729741Z","times_seen":17520440,"resource_available":true,"data":null}},"time_used":920,"timings":{"blocked":433,"dns":119,"connect":33,"send":0,"wait":37,"receive":0,"ssl":295},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safetontransact.pages.dev/css/b5a414f041f26f71.css","fqdn":"safetontransact.pages.dev","domain":"safetontransact.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safetontransact.pages.dev/","date":"2026-04-29T04:16:33.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safetontransact.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 20:15:40 GMT","end":"Wed, 10 Jun 2026 21:14:05 GMT"},"fingerprint":{"sha1":"1C:AA:1D:A4:C7:44:FE:63:FA:B3:0D:73:60:C0:76:0B:9F:0C:72:B6","sha256":"07:E0:77:B9:56:70:E8:68:2A:09:43:E5:1E:27:4B:DE:70:7F:C9:C5:11:BB:12:2C:3D:13:07:5F:54:5A:0C:D4"}}},"request":{"raw":"GET /css/b5a414f041f26f71.css HTTP/1.1\r\nHost: safetontransact.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://safetontransact.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 29 Apr 2026 04:16:33 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sbbhSTjfPE%2FlmBFb6zwfRfzvoJfAWZpNlVL6wtkORjEARThkD7K0vdyrxMd4lPHU5yxswncplvHeM4%2BfUQ76slqIoVWG7VcyvWvEokcWf8YPeGAwR63fkcXjIFjKM9ZT3vmzo86pm%2FjckLaM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"5e9ec41592030a2e59e520d1bcfdffe9\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f3b7df2fe7e56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21516,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (21468)","md5":"299810d61d119e08934a8fd1b3e3143c","sha1":"620cfb78b64803a9469b64cb295961fa020b3db4","sha256":"60d83db99b8e8e6d6f5ed5e29667e155ac22cc8a6132070d23dd64498a626dfb","sha512":"14f1123ac66d859be9ef2484fd48e549e3589645862176cc835f14e27f83051a47f0d94bababbfb5beb9262bd8d1cfc6a2cb381fe7fa568ae73184963f29c28d","ssdeep":"384:1W+YiCGSxyjZfIoLmMz8q02xheq3sdU+XdJeg6zz5pr9DXOKvVFm:1HYiZ6oL3wmMJdU+XdJeg6PhXOam","tlshash":"1aa2847de721b83ff427903e96c6550e24248527d72a6e7ef6d2a17e4bc37421b22348","first_seen":"2026-04-29T04:17:02.974142Z","last_seen":"2026-04-29T04:17:02.974142Z","times_seen":1,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"safetontransact.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safetontransact.pages.dev/css2-1%2540family%253DInter%253Awght%2540400%253B500%253B600%253B700%253B800%253B900%2526display%253Dswap.html","fqdn":"safetontransact.pages.dev","domain":"safetontransact.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safetontransact.pages.dev/","date":"2026-04-29T04:16:33.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safetontransact.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 20:15:40 GMT","end":"Wed, 10 Jun 2026 21:14:05 GMT"},"fingerprint":{"sha1":"1C:AA:1D:A4:C7:44:FE:63:FA:B3:0D:73:60:C0:76:0B:9F:0C:72:B6","sha256":"07:E0:77:B9:56:70:E8:68:2A:09:43:E5:1E:27:4B:DE:70:7F:C9:C5:11:BB:12:2C:3D:13:07:5F:54:5A:0C:D4"}}},"request":{"raw":"GET /css2-1%2540family%253DInter%253Awght%2540400%253B500%253B600%253B700%253B800%253B900%2526display%253Dswap.html HTTP/1.1\r\nHost: safetontransact.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://safetontransact.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 308 Permanent Redirect\r\ndate: Wed, 29 Apr 2026 04:16:33 GMT\r\ncontent-length: 0\r\nlocation: /css2-1%40family%3DInter%3Awght%40400%3B500%3B600%3B700%3B800%3B900%26display%3Dswap\r\naccess-control-allow-origin: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZKdmj%2BfugYm9y%2FLU0MjvNV8ELX5h1l60HeFm9JrW%2BLM9yJMPvtP8nFnJvPwTUoFmSvMVqpK4c6kDvvoQTVlnODWSUePR%2B1fBHVWAUGYuOLvOeMiDAXwf1g4ojhD3t2%2ByJgwnWWqswCbpEbRG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f3b7df2fe8056ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T03:51:41.729741Z","times_seen":17520440,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"safetontransact.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.7.2/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safetontransact.pages.dev/","date":"2026-04-29T04:16:33.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/ethers/5.7.2/ethers.umd.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://safetontransact.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 29 Apr 2026 04:16:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 139139\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"6350cee7-21f83\"\r\nlast-modified: Thu, 20 Oct 2022 04:30:31 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 583792\r\nexpires: Mon, 19 Apr 2027 04:16:33 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rR7jtuOgJjPeluPWsPEys8CbvbX8jteQwX1WK7QDOZbdKkz%2BeEReIQBZpCJYahHhgY96uRkF4gjAY2KAiuXF8Tz%2Bk8rQV%2B2guCcty9UBvBEu6Uz2xtrawkEFABisC2ZJaYgGBki1\"}]}\r\ncf-ray: 9f3b7df358a1c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":760171,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-07-23T05:25:55.400593Z","times_seen":3707,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":38,"dns":1,"connect":7,"send":0,"wait":8,"receive":6,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safetontransact.pages.dev/images/b6156dfd0417293a.svg","fqdn":"safetontransact.pages.dev","domain":"safetontransact.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safetontransact.pages.dev/","date":"2026-04-29T04:16:33.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safetontransact.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 20:15:40 GMT","end":"Wed, 10 Jun 2026 21:14:05 GMT"},"fingerprint":{"sha1":"1C:AA:1D:A4:C7:44:FE:63:FA:B3:0D:73:60:C0:76:0B:9F:0C:72:B6","sha256":"07:E0:77:B9:56:70:E8:68:2A:09:43:E5:1E:27:4B:DE:70:7F:C9:C5:11:BB:12:2C:3D:13:07:5F:54:5A:0C:D4"}}},"request":{"raw":"GET /images/b6156dfd0417293a.svg HTTP/1.1\r\nHost: safetontransact.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://safetontransact.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 29 Apr 2026 04:16:33 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BNSzAeLtmKtfN5DlNluC%2FofXel%2FpeQiLuFWxOkUqYz52H0%2FLJsQqXf9%2B2gqAePJk3wj6Js1gH5tdbWCrO3T2cmXauNknh92wOGv%2BXparnsrJifmdcX%2BO621NHGJlxgyFvdzUHz3Kg3Z0ItZj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"8bcc37791c405ad00cd2401dc56a2492\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f3b7df30e9056ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25480,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3a3b025cdf1ca8eeb95efca45b717313","sha1":"e196acde1780ce1cde62c96c0f1dd42b0c01853d","sha256":"351c2add7b2e2cb2f85963d4736344ebeef7f315a15a6c8078eef11a8e9a8d68","sha512":"51313342eb84c66ea094aafb52ea1b6a02dfa525e8fe6e9fbecc798e3440833ea029c76cbdad0600bda2368210ac0305a8906459d9ca0cabf2467bcb6ff97b27","ssdeep":"384:e0YdpIHOnYMYfN+y0FXaN2tuG9r3e8Lx39Jt+lqm7eAqFyKPrdtFu2VpiYYFhGGY:P1t0FNMWsCvyKjr3YbM/6etCi9mK4Gm0","tlshash":"0ab23ad66320b4d4e69fcddaee37b9fa291f60feaf1511cc41e1eb0d98865e48804c58","first_seen":"2024-08-19T15:30:20.999468Z","last_seen":"2026-04-29T04:17:02.978956Z","times_seen":4,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"safetontransact.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/ton-blockchain/wallets-list/main/wallets-v2.json","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://safetontransact.pages.dev/","date":"2026-04-29T04:16:35.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /ton-blockchain/wallets-list/main/wallets-v2.json HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://safetontransact.pages.dev/\r\nOrigin: https://safetontransact.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: text/plain; charset=utf-8\r\netag: W/\"ef93437ac861d9bcbaad34568dfe5857968fd43398f0b4199cdb582da0592cf9\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: F8D8:21A9B4:13B392:15BF11:69E7BAA8\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Wed, 29 Apr 2026 04:16:35 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: HIT\r\nx-cache-hits: 3\r\nx-timer: S1777436195.077989,VS0,VE0\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: a2f692f1bb4164aa7f4ad431c0bd55a82377f033\r\nexpires: Wed, 29 Apr 2026 04:21:35 GMT\r\nsource-age: 246\r\ncontent-length: 2895\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":21641,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"29c1471288feadc44d4432cec81e5e6b","sha1":"291f4ab184895063d9be13356e1ad4e71c7f8eb9","sha256":"2f1a6b0e13b71b6d9dcc51090a7a27a650d557a6b1bb2c09c4943da838af616b","sha512":"1e8cb866be1ab77f739e9730b098267beafa06ae1157b1fd6c71e4f22825fff7b1b9365b9487dee08106c746b0e8e33656ce75ad8a376ffc406f93b523aa3ee8","ssdeep":"192:kKW5oWrd4i/PfmGLTy5DnJ2uBwYXurNv8N97Npzx/IJBlGWe3/SBDGdONIQG0dHp:kK4kgcJJB1ERJeVM6fEHOsP73","tlshash":"3ea201abc6344c27025561f4649a2286f621118bccd0bc69fb4c489c6fdddbf24bb79e","first_seen":"2026-04-22T13:00:54.730953Z","last_seen":"2026-06-15T08:16:45.01707Z","times_seen":29,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":38,"dns":2,"connect":13,"send":0,"wait":14,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://safetontransact.pages.dev/","date":"2026-04-29T04:16:35.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:20:2A:2D:A3:02:EE:53:E4:CE:46:31:49:99:9A:9E:B0:E7:B5:19","sha256":"23:47:72:09:4E:47:52:14:EB:06:36:94:9D:9F:8D:66:FD:E8:20:45:1A:16:A2:2A:C5:F5:B8:7C:2A:41:2B:61"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://safetontransact.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Apr 2026 01:42:27 GMT\r\nexpires: Fri, 23 Apr 2027 01:42:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 527648\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-25T03:49:32.374141Z","times_seen":245893,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":199,"dns":1,"connect":29,"send":0,"wait":28,"receive":17,"ssl":168},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safetontransact.pages.dev/js/bundle.js","fqdn":"safetontransact.pages.dev","domain":"safetontransact.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safetontransact.pages.dev/","date":"2026-04-29T04:16:33.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safetontransact.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 20:15:40 GMT","end":"Wed, 10 Jun 2026 21:14:05 GMT"},"fingerprint":{"sha1":"1C:AA:1D:A4:C7:44:FE:63:FA:B3:0D:73:60:C0:76:0B:9F:0C:72:B6","sha256":"07:E0:77:B9:56:70:E8:68:2A:09:43:E5:1E:27:4B:DE:70:7F:C9:C5:11:BB:12:2C:3D:13:07:5F:54:5A:0C:D4"}}},"request":{"raw":"GET /js/bundle.js HTTP/1.1\r\nHost: safetontransact.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://safetontransact.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 29 Apr 2026 04:16:33 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jqoMR8lndq6HzWpfS7LxGPrwiN6fS220yPCfeTVgLPdn27cNQsgtpYtCwZVFAPLOUK31nJ6zQiAW5FrC6NIczaDjMraFpT5W82SJeUoDU9RFwy0ZHjp2aPOMJi4N2oeSGgKPSxEroTouqPkG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"0e0c996bcd7d3f3a8bb64a558308cdc2\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f3b7df2ee7b56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15213,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15212)","md5":"a27ba5d48161d581dc1f0b51e8602c8f","sha1":"0d0cdf990291ae6fc204698bdd3ffe779d031dcb","sha256":"10b829c458bdc128bfe5265f07496eb7b2b64b931edd4c5b1c306638d7a2a8ba","sha512":"3db952ee75ed9bd894cb71a6fd229c7f679143bcc21c5afe22864945b693043f3ba6bcde501299149aeea268abc40e45927cceb7e4bb3c477cbd0ab6d045423e","ssdeep":"384:jC8ms6oMl5rF8nsGq9TJXwh+O9nRyffgDSJhbhtlRvsguI2n:W8lXMnrF8nsGqpJXw0O9mcwFtlRvsgu1","tlshash":"a062d9966731602101a240a3d8fb6e23a12c7716305754bcb19d2ecfaacdf5db953e3b","first_seen":"2025-01-02T23:33:08.13092Z","last_seen":"2026-07-24T21:38:52.523893Z","times_seen":43,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"safetontransact.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trade.tonkeeper.help/_next/static/css/b5a414f041f26f71.css","fqdn":"trade.tonkeeper.help","domain":"tonkeeper.help","tld":"help"},"ip":{"addr":"64.190.63.222","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safetontransact.pages.dev/","date":"2026-04-29T04:16:33.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trade.tonkeeper.help","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sun, 29 Mar 2026 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B6:37:EE:41:4F:11:30:7D:0E:AB:DD:67:43:BD:60:72:A2:5D:B7:27","sha256":"1C:9A:FE:AF:FE:88:56:C1:E4:A9:82:B2:B8:25:5B:5B:07:F8:68:BE:4F:40:07:4E:27:89:A7:4C:70:D8:28:29"}}},"request":{"raw":"GET /_next/static/css/b5a414f041f26f71.css HTTP/1.1\r\nHost: trade.tonkeeper.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://safetontransact.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 441 No Reason Phrase\r\ndate: Wed, 29 Apr 2026 04:16:34 GMT\r\nserver: Parking/1.0\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"441","status_text":"No Reason Phrase","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T03:51:41.729741Z","times_seen":17520440,"resource_available":true,"data":null}},"time_used":865,"timings":{"blocked":405,"dns":117,"connect":35,"send":0,"wait":38,"receive":0,"ssl":268},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdndelivery.pages.dev/web3-ethers.js","fqdn":"cdndelivery.pages.dev","domain":"cdndelivery.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safetontransact.pages.dev/","date":"2026-04-29T04:16:33.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdndelivery.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Apr 2026 09:18:11 GMT","end":"Thu, 16 Jul 2026 10:14:26 GMT"},"fingerprint":{"sha1":"CA:C3:C0:52:E0:98:CD:49:56:BF:99:88:B4:44:9B:37:EA:57:88:9C","sha256":"A2:5A:7F:11:77:EB:86:19:E7:27:39:84:F6:19:45:57:3D:2D:31:01:EC:7A:9C:36:66:71:A0:80:8C:37:0E:2B"}}},"request":{"raw":"GET /web3-ethers.js HTTP/1.1\r\nHost: cdndelivery.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://safetontransact.pages.dev/\r\nOrigin: https://safetontransact.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 29 Apr 2026 04:16:34 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gb8AJldIZWxtwp9dGxQ270eGdHTcoc3uHjxXlLld2X400L96ATBKFsTOtQqtzOulOCdxLogu8VapJkDPsFdm%2Fk5TRopA8z1KCSxZVP%2BK5ErANCCF8XweGZ99Oy5g7UVw655gwY9zjYY%3D\"}]}\r\netag: W/\"175386dfa23b6665828cbbc1aaa32cd8\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f3b7df37ac423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4752330,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"684059f3a0d73dace9a1aebe79528594","sha1":"dcc56d3b17e5bf5672e75fdd4f5c41822f3648dc","sha256":"a0a4f65689ada0d6314dbc4ad32e5530d283049ff1f85c312befeca0dbc2a4d1","sha512":"5ceda4712da4ae27fc8c69eeab95423c04e98fd859584791084aa8e580e13943cbffe9d1a1149db9304186b091361cb9e6821de4466da90b4040181af593b165","ssdeep":"24576:+jlnvCivmPhi1iVsAC27wCX6+d24+b0r3g5sa4XqXAGj66w4KvliHBbF8oNeUrPQ:+Zn6t5siVR7ws6c24+nYXT6w4Klihx8x","tlshash":"2b255aa23e89768b2cd7e321f306e6ed4a39fc06d745948ba2443e64d3d98311f953b1","first_seen":"2025-07-31T10:30:50.744702Z","last_seen":"2026-06-10T21:09:45.248652Z","times_seen":22,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":11,"connect":1,"send":0,"wait":276,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"cdndelivery.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safetontransact.pages.dev/css2%40family%3DMontserrat%3Aital%2Cwght%400%2C100..900%3B1%2C100..900%26display%3Dswap","fqdn":"safetontransact.pages.dev","domain":"safetontransact.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safetontransact.pages.dev/","date":"2026-04-29T04:16:33.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safetontransact.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 20:15:40 GMT","end":"Wed, 10 Jun 2026 21:14:05 GMT"},"fingerprint":{"sha1":"1C:AA:1D:A4:C7:44:FE:63:FA:B3:0D:73:60:C0:76:0B:9F:0C:72:B6","sha256":"07:E0:77:B9:56:70:E8:68:2A:09:43:E5:1E:27:4B:DE:70:7F:C9:C5:11:BB:12:2C:3D:13:07:5F:54:5A:0C:D4"}}},"request":{"raw":"GET /css2%40family%3DMontserrat%3Aital%2Cwght%400%2C100..900%3B1%2C100..900%26display%3Dswap HTTP/1.1\r\nHost: safetontransact.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://safetontransact.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 29 Apr 2026 04:16:33 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nlink: \u003chttps://fonts.googleapis.com\u003e; rel=\"preconnect\", \u003chttps://trade.tonkeeper.help/_next/static/css/e8fdde2e5ad28fb6.css\u003e; rel=\"preload\"; as=style, \u003chttps://trade.tonkeeper.help/_next/static/css/b5a414f041f26f71.css\u003e; rel=\"preload\"; as=style, \u003chttps://fonts.googleapis.com\u003e; rel=\"preconnect\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8mp5PthFapFQZ%2Fu%2Fdj6Ktg0sbnlW3cSkx%2Fl2nTz5EKXr5Do1kIW9vLYuIB6SoQgfuZ%2BeVFhyL%2BePw05I8ufqnyKluf2oee1SPaT7np8pIXlYwya4HnWd9jCHjuL4jcWcY9aEO%2FSmeorlDZoz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f3b7df34ea456ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T03:51:41.729741Z","times_seen":17520440,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"safetontransact.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safetontransact.pages.dev/css2-1%40family%3DInter%3Awght%40400%3B500%3B600%3B700%3B800%3B900%26display%3Dswap","fqdn":"safetontransact.pages.dev","domain":"safetontransact.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safetontransact.pages.dev/","date":"2026-04-29T04:16:33.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safetontransact.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 20:15:40 GMT","end":"Wed, 10 Jun 2026 21:14:05 GMT"},"fingerprint":{"sha1":"1C:AA:1D:A4:C7:44:FE:63:FA:B3:0D:73:60:C0:76:0B:9F:0C:72:B6","sha256":"07:E0:77:B9:56:70:E8:68:2A:09:43:E5:1E:27:4B:DE:70:7F:C9:C5:11:BB:12:2C:3D:13:07:5F:54:5A:0C:D4"}}},"request":{"raw":"GET /css2-1%40family%3DInter%3Awght%40400%3B500%3B600%3B700%3B800%3B900%26display%3Dswap HTTP/1.1\r\nHost: safetontransact.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://safetontransact.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 29 Apr 2026 04:16:33 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nlink: \u003chttps://fonts.googleapis.com\u003e; rel=\"preconnect\", \u003chttps://trade.tonkeeper.help/_next/static/css/e8fdde2e5ad28fb6.css\u003e; rel=\"preload\"; as=style, \u003chttps://trade.tonkeeper.help/_next/static/css/b5a414f041f26f71.css\u003e; rel=\"preload\"; as=style, \u003chttps://fonts.googleapis.com\u003e; rel=\"preconnect\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tmcBWJ5tZijlmIkywi95mCNDzV6ll9Lm6m0H%2Br5k9FJzD3IHTZor3nSRlbKkTREnfiyzZgqlM7ftnhJ0HftL7NkgKcUFR6UJnC5%2BFj61CHd9fY6H15yaqxrqTz6bGsPiFCKyRh0LZ2QzHKpV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f3b7df34ea556ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T03:51:41.729741Z","times_seen":17520440,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"safetontransact.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safetontransact.pages.dev/","fqdn":"safetontransact.pages.dev","domain":"safetontransact.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-29T04:16:33.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safetontransact.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 20:15:40 GMT","end":"Wed, 10 Jun 2026 21:14:05 GMT"},"fingerprint":{"sha1":"1C:AA:1D:A4:C7:44:FE:63:FA:B3:0D:73:60:C0:76:0B:9F:0C:72:B6","sha256":"07:E0:77:B9:56:70:E8:68:2A:09:43:E5:1E:27:4B:DE:70:7F:C9:C5:11:BB:12:2C:3D:13:07:5F:54:5A:0C:D4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: safetontransact.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 29 Apr 2026 04:16:33 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eRSs7ZrEyC0Gxf0sF2izEPJas4LL3dD%2BRzit4W%2BRHC%2BTk%2BQloZTl1CS2%2FHPehYS2X1IDVIXmpuqWYe0P%2FlY5Wr4pzRBNh9oVDbJv33Lonfaj83esrb%2Fa0Wkio8nnYcfbe7Of%2FRgFbc%2FZbsff\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f3b7df0d92a5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"SweetAlert2:11.7.16","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":64296,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (27205)","md5":"5ea9b8ada4cf937b38c715deba07b218","sha1":"f985926281d811b25cdfa73034db41c1b69fc44b","sha256":"35c2489821e69ab676b521c4eb98ed7b2d7981082976ba7a1583d515b6b23f98","sha512":"a95736d8199ff8ed5a93d6e7ed7c6f42567b5d1e1053a046b355db9f93731326a0e6946b91191001de685301e46e0f9c302a6a2721d589215811caccb45d9276","ssdeep":"768:pm/Hy/HOnk1xFmw9xyebye+a7sHt7ChJ8iDf9JIKtJyNfiJ+nXNEbyAsg4m8a:X4e2e+ZMtJbbpsg4m8a","tlshash":"34535dbd65f43b77824783c89a3bfe5a3ea8507b25414518b5fc8b54cfa2ede8807409","first_seen":"2026-04-29T04:17:02.98648Z","last_seen":"2026-04-29T04:17:02.98648Z","times_seen":1,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":24,"dns":6,"connect":1,"send":0,"wait":172,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"safetontransact.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safetontransact.pages.dev/js/smoothscroll.min.js","fqdn":"safetontransact.pages.dev","domain":"safetontransact.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safetontransact.pages.dev/","date":"2026-04-29T04:16:33.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safetontransact.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 20:15:40 GMT","end":"Wed, 10 Jun 2026 21:14:05 GMT"},"fingerprint":{"sha1":"1C:AA:1D:A4:C7:44:FE:63:FA:B3:0D:73:60:C0:76:0B:9F:0C:72:B6","sha256":"07:E0:77:B9:56:70:E8:68:2A:09:43:E5:1E:27:4B:DE:70:7F:C9:C5:11:BB:12:2C:3D:13:07:5F:54:5A:0C:D4"}}},"request":{"raw":"GET /js/smoothscroll.min.js HTTP/1.1\r\nHost: safetontransact.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://safetontransact.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 29 Apr 2026 04:16:33 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LqkGszxoBmQrHAiWKjalCPMu5MYcKOxMdSRIy4wHCYELKKkdwftp6dbPOwzyU1i6MidWgsDsQO%2FEN0sjOTSrDxyLa2zqEMJIJo1Isv9HCPJI1HbhsCbDhPh0NkRd42OY6TVIpJncuXI3oW19\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4d75a0b34405f6e031d3b3f6f57701a1\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f3b7df2ee7956ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3968,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3968), with no line terminators","md5":"9825524dfc2a585eb98ecb087289f40d","sha1":"5d08587d4d35a28a0659edf145f93af831576ab9","sha256":"19eab772c8cb2919d14d563774b249919f4989295f54cf64443470c9964931c4","sha512":"266e6a7c80798bef1810e6518f2a176758464cde51ad7d4755b9688563c4ce727c38d16a4847f294c4a4c2d17570aca7235f0ec2ac4645d959f86adfd4e8fb64","ssdeep":"","tlshash":"8b817849a41170c21def4295c1becb4b3061a337735284d41916aff8562cfff718aaae","first_seen":"2023-03-07T01:24:30Z","last_seen":"2026-07-24T13:21:50.08596Z","times_seen":1036,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"safetontransact.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11.7.16/dist/sweetalert2.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safetontransact.pages.dev/","date":"2026-04-29T04:16:33.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/sweetalert2@11.7.16/dist/sweetalert2.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://safetontransact.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 29 Apr 2026 04:16:33 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 4353\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 11.7.16\r\nx-jsd-version-type: version\r\netag: W/\"5d2b-SWuOdTKSzHjUlk2U7uXCUNU8oTo\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230089-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 1204190\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cb1ciVYoNfc%2FQz3jiD%2BrCkvh51Pw00Q%2BfUJ4hDRLw9MDMUf4eGG61nn1%2BARC1579UdZEzz34nccdkGBNpduRzKs7K08Y4Gs%2BZ%2B%2BpnlYGfH3kycBJobz7qyEP3Ilyj0jyRmc%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9f3b7df33a09569a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23851,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (23850)","md5":"d849077e8b4cc93dd5c925165f2cded4","sha1":"496b8e753292cc78d4964d94eee5c250d53ca13a","sha256":"ee3512f8c59eaa415d996f68ce467b98f6a0cfe42631bb0196df90dccb04f855","sha512":"c97d51f2e5a2d75c4f7d8ec70e0eeb90b2fff45d63abc1f28b3f2a1780d5da779d5f821597baee476fa1dd315c78721c4f93aaee8a0a8b4f5465b237f41ef297","ssdeep":"192:CBh5Cif2Ib/m3ozgBVdX+LZDcFPAtmFHiJw3epAd/34JpG:CB72IrjgIFAFPAtmQa3Mu/ofG","tlshash":"43b2f9a1aa88e017f67a862f59c0f60875d9e50bfdf3085ef414d1008fd7e5f2a792a4","first_seen":"2023-07-01T11:25:55Z","last_seen":"2026-07-22T23:47:10.596749Z","times_seen":1936,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":28,"dns":0,"connect":1,"send":0,"wait":11,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/ethereumjs/browser-builds/dist/ethereumjs-tx/ethereumjs-tx-1.3.3.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safetontransact.pages.dev/","date":"2026-04-29T04:16:33.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /gh/ethereumjs/browser-builds/dist/ethereumjs-tx/ethereumjs-tx-1.3.3.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://safetontransact.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 29 Apr 2026 04:16:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 93933\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: master\r\nx-jsd-version-type: branch\r\netag: W/\"4edeb-1sQW5dFT9QD3rGbSWitz20WGetQ\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220094-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 42758\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M5z7e9cKORwKeIXwHUwdQa%2B3bfivklH6EujjI4YTwEX%2BZroWSAKjl1yR%2BmN%2F%2Bowmml9bJmPBUxV41P%2B8f6wDpqUofI0XhG2%2FUIB82DvhMfSEpYDY1HgxEbtp%2BZ3qTGGHpFk%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9f3b7df34a12569a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":323051,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (43040)","md5":"ca1104de538caea2d54265fbe90916b4","sha1":"d6c416e5d153f500f7ac66d25a2b73db45867ad4","sha256":"10d78c0a5e8664889dc8eb47c72bfa46ad0ed02c70a234be9acdefa27dbb24b0","sha512":"51fe1c1b91913f9108019b1d18ca38593175cbc827ee159e2942d62b2a9825317642833f17c2526ce292d9623e394cce1a750d9c6246c7eb201a57b15c8d8bc4","ssdeep":"3072:3dpgpHu8o3GVhW8Jg5bGpLsev6ns9oq1CfdfDWp1WrB33NjbLytdJ7bt3r:3fGVL2CNvms/CfdS1Dr","tlshash":"a6640989fba07052435671a5062f644fb67af92d5949006cf254e8fb3cf89c8a63bf34","first_seen":"2023-03-07T01:24:06Z","last_seen":"2026-07-22T23:47:10.573328Z","times_seen":2097,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":34,"dns":1,"connect":7,"send":0,"wait":6,"receive":6,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safetontransact.pages.dev/settings.js","fqdn":"safetontransact.pages.dev","domain":"safetontransact.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safetontransact.pages.dev/","date":"2026-04-29T04:16:33.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safetontransact.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 20:15:40 GMT","end":"Wed, 10 Jun 2026 21:14:05 GMT"},"fingerprint":{"sha1":"1C:AA:1D:A4:C7:44:FE:63:FA:B3:0D:73:60:C0:76:0B:9F:0C:72:B6","sha256":"07:E0:77:B9:56:70:E8:68:2A:09:43:E5:1E:27:4B:DE:70:7F:C9:C5:11:BB:12:2C:3D:13:07:5F:54:5A:0C:D4"}}},"request":{"raw":"GET /settings.js HTTP/1.1\r\nHost: safetontransact.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://safetontransact.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 29 Apr 2026 04:16:33 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mq5WzHWRRySQYLpws4amPxLuEor3twXfcyMoqqP%2Fa77xvuQXwFPWAM5AeYXVd9xsMrjTgtbLYRpYtt95JfR02835vdTev5A4YmH3g8lTSdzgyH1vWtt8I5d3Q%2FDO8xr%2BU8Vl2JCPeJHWvoSf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6fcc531f8d4a6f6eeec4f644ba0047e5\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f3b7df30e8e56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5868,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (5868), with no line terminators","md5":"113c436df423b65c95f5e5cb97e76601","sha1":"37268b2ef96199906d62c658b0cddb503138885a","sha256":"74b56ebcfb1517fe751b1725413a0d95a23452d2556cbeaf35ae67e00f58fb4b","sha512":"59ecde1948941f9142331f9cbe27dc1c5fd3b990cf6fc6d4423bbd1547a1ce2e3a5c5034acd79b655f6adaeaf1e3c1ece7a9466e5b9e8f188aa1c6c335a96cc1","ssdeep":"96:yhwuawuMUyuwneufPJwFcY27cfrjaMpsA5Tidi0OZPjeowyqPkZ:XuatMUyuweufPiF4of/f8ZowVPkZ","tlshash":"bcc1d038f59821e2a0bfc553c6f4e5bcf111aae568c346cc033e53d59b52b5aae81c27","first_seen":"2026-04-29T04:17:02.992626Z","last_seen":"2026-04-29T04:17:02.992626Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"safetontransact.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safetontransact.pages.dev/images/imagetr.png","fqdn":"safetontransact.pages.dev","domain":"safetontransact.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safetontransact.pages.dev/","date":"2026-04-29T04:16:33.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safetontransact.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 20:15:40 GMT","end":"Wed, 10 Jun 2026 21:14:05 GMT"},"fingerprint":{"sha1":"1C:AA:1D:A4:C7:44:FE:63:FA:B3:0D:73:60:C0:76:0B:9F:0C:72:B6","sha256":"07:E0:77:B9:56:70:E8:68:2A:09:43:E5:1E:27:4B:DE:70:7F:C9:C5:11:BB:12:2C:3D:13:07:5F:54:5A:0C:D4"}}},"request":{"raw":"GET /images/imagetr.png HTTP/1.1\r\nHost: safetontransact.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://safetontransact.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 29 Apr 2026 04:16:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 443740\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1a87dd088803196be433b2d1b06fffd2\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S5oHtLN17czwAAlBdtW6ogQxhObRzoSXIcIGJySpqegMKkS%2FeINfox6l%2FFqO9nQRUYtOiVdjFB8iECjSgf4v2uEuKsqxnI%2BOpWR1Akh5228LwIoFIq1c0CNrajZtfJSF1xaDztFSclPnsNGC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f3b7df30e8f56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":443740,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1492 x 840, 8-bit/color RGBA, non-interlaced","md5":"2311cefc00d069433d3c259a7b127306","sha1":"133d5ac15e82576721a2961e230afe069587fc78","sha256":"cf10a8867d73b18350c82a2cca23b091e6749bdaad113974714124a8332448ab","sha512":"6b97e316d50d2509a9074c76748b0363dca9112324d95f4d4e58292d9b3fd04579dd755a50299758efe5758a27524e45f893056a55e883ed6f4b82aae4a8da14","ssdeep":"12288:2VMWM0pYY0TtvXJmUk9chkfendtm0bV5v45BDmLVQ:2uOrMEmOWm0bV5vw9mLe","tlshash":"2694238e9df90a25ef61527344242a521f76639fba34d48ca87ba071c75d23c3bced02","first_seen":"2024-08-19T15:30:20.982472Z","last_seen":"2026-04-29T04:17:02.99455Z","times_seen":2,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"safetontransact.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safetontransact.pages.dev/images/arrow-down-24x24.svg","fqdn":"safetontransact.pages.dev","domain":"safetontransact.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safetontransact.pages.dev/","date":"2026-04-29T04:16:35.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safetontransact.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 20:15:40 GMT","end":"Wed, 10 Jun 2026 21:14:05 GMT"},"fingerprint":{"sha1":"1C:AA:1D:A4:C7:44:FE:63:FA:B3:0D:73:60:C0:76:0B:9F:0C:72:B6","sha256":"07:E0:77:B9:56:70:E8:68:2A:09:43:E5:1E:27:4B:DE:70:7F:C9:C5:11:BB:12:2C:3D:13:07:5F:54:5A:0C:D4"}}},"request":{"raw":"GET /images/arrow-down-24x24.svg HTTP/1.1\r\nHost: safetontransact.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://safetontransact.pages.dev/css/b5a414f041f26f71.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 29 Apr 2026 04:16:35 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6az3ixWZ5itrUXtl3ZxSo2IKvVSZdcpDLMY23d%2Fk2MHL1aYAO6Q2KgnAur%2F3%2F3AaJ%2FW0LMKDa1BhKeg997LK5gHA5Vztqz2vb%2B58O1rpCipZErsl%2FP%2FkKzIBgMtJ1Wsiu4HWY%2BLZTVXRo5Hl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f7b533292190425e0fdfe1e1a64b586d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f3b7dfb3a5856ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":571,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a9fb5940ac175915b6740b375efbee8e","sha1":"245cae0326b56d1a24c016045ebadddad2279209","sha256":"dabcebba92cfe823fe8d9517f7a5c811b2008e1ff2710e8f704d996128dd7bdf","sha512":"ebf28c015d7722f9dcffbba2957c1da5678228f9fb5a87bf3756e4f34d7bda95888b0a1806b0fb8400918aa848368237220f4b4e096b364038b0f340cdcd0ba7","ssdeep":"","tlshash":"39f046fbcba8aafde44bcbb59429c0b2f02730b9772a8e8545936d2426405d50804d5e","first_seen":"2024-08-19T15:30:20.98347Z","last_seen":"2026-04-29T04:17:02.996574Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"safetontransact.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safetontransact.pages.dev/css/e8fdde2e5ad28fb6.css","fqdn":"safetontransact.pages.dev","domain":"safetontransact.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safetontransact.pages.dev/","date":"2026-04-29T04:16:33.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safetontransact.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 20:15:40 GMT","end":"Wed, 10 Jun 2026 21:14:05 GMT"},"fingerprint":{"sha1":"1C:AA:1D:A4:C7:44:FE:63:FA:B3:0D:73:60:C0:76:0B:9F:0C:72:B6","sha256":"07:E0:77:B9:56:70:E8:68:2A:09:43:E5:1E:27:4B:DE:70:7F:C9:C5:11:BB:12:2C:3D:13:07:5F:54:5A:0C:D4"}}},"request":{"raw":"GET /css/e8fdde2e5ad28fb6.css HTTP/1.1\r\nHost: safetontransact.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://safetontransact.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 29 Apr 2026 04:16:33 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UuBGOT5wvQPlm0GYxw2shWJhGxyYpNMAake%2BrsCD%2BANqBb3xByzPwhvwlbLnfC8saqJUAdXSx97qfWxqZesyUNIM7Sl1x4GmgPVlExcQtUwznHeMi5BUGxzy%2BRvfSBPCCSTFAEeEHy9LefJb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"0287515a40e7a9e2f3a8cfeee7c7f7b3\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f3b7df2ee7d56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51431,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (51383)","md5":"c59580c7132a6c39347d601ca01a39dc","sha1":"4810672f51291817878e92cf2af82c89a25a5a62","sha256":"9d2e40daad02165cb4f7a7bf19eb556c8aa78e983f6e13ca04315c816c4f2c88","sha512":"7d8709fddd9461735b2cbf14a1f7c8bb52355246fbe633d85ade81ad93a8965650957086e81e6cd7a72e1ed4ac1878da4e7f060e7cfea0007db99189fc442bf4","ssdeep":"768:rz0zM19zV1xhGZ2I62drvT3BiKHUaEm8YE+xEq8PaJ:r3pCl3BaaEFAEqh","tlshash":"da33e976b218a13db123d53ae1ca8a9c71259456da376efdfa94742fc3c3a810733709","first_seen":"2026-04-29T04:17:02.998371Z","last_seen":"2026-04-29T04:17:02.998371Z","times_seen":1,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"safetontransact.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;700\u0026family=Montserrat:wght@400;500;700\u0026family=Raleway:wght@400;500;700\u0026family=Roboto:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safetontransact.pages.dev/","date":"2026-04-29T04:16:33.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:9D:A0:A4:A4:3B:62:A3:D0:B3:63:4B:5B:C3:1D:9B:09:43:3C:91","sha256":"DB:10:40:08:19:EF:D7:9C:5F:11:BC:78:DC:9F:81:F3:9E:A7:30:2F:1F:06:C8:C4:A4:DD:BC:C3:27:6F:2A:AA"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;700\u0026family=Montserrat:wght@400;500;700\u0026family=Raleway:wght@400;500;700\u0026family=Roboto:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://safetontransact.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 29 Apr 2026 04:16:34 GMT\r\ndate: Wed, 29 Apr 2026 04:16:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35628,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"ecd849e31a658418dd8b28040a91006a","sha1":"12b9ec0ca4ffb689891fd4c316f7c03ae596bd82","sha256":"f4f8f0eb8f94c2a1e1aa817b7c3a4fe70af4318d4c6dffac041e29580905f129","sha512":"1f310d177d50a4523967a5c86379aa656172b9466bcef41ef009158d72a897a7659e5c7b089976e51f68d3c82cc4ec97a4b7c08b7ed31218f7480d8b578f085e","ssdeep":"768:PyjooYhREHPM5svvYaR7AIWP2ZZYQRVKy8:Bll3","tlshash":"85f22e91041b9400eb835cd223cf7f36fe4e51557086c1b9abfd1aaaacdbc62436876d","first_seen":"2026-02-20T06:43:48.828098Z","last_seen":"2026-07-22T23:47:10.574724Z","times_seen":86,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":243,"dns":1,"connect":17,"send":0,"wait":34,"receive":0,"ssl":238},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11.7.16/dist/sweetalert2.all.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safetontransact.pages.dev/","date":"2026-04-29T04:16:33.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/sweetalert2@11.7.16/dist/sweetalert2.all.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://safetontransact.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 29 Apr 2026 04:16:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 18792\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 11.7.16\r\nx-jsd-version-type: version\r\netag: W/\"10917-UZ72hgnB9ZXuapy7dmDkyFhaDUE\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230162-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 10705524\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EmjkoSuhZpvGwNPQiXhdjmgi6CQa8xni%2FmKfzHg2IbHdLxVHD%2FBdSyJpQsYiz06kPpGiXzAg2t9wT6aFzJ7szWc1Wj31kyjVXTpTFqBHWhN1kEjeQLU9eKSDuidYVEGQXbw%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9f3b7df34a0a569a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67863,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (43691)","md5":"0aaaa3278d29d8b8d9b3795f60d3b836","sha1":"519ef68609c1f595ee6a9cbb7660e4c8585a0d41","sha256":"b030031299100b9d6c6b413bf9e9d712f59695f1384ef548c3f43b0a0faecbfa","sha512":"cbd33a9e99d528a9c653168484a2243ae90ca8b99190c6422f887ec632982ca07177aa7b7f8b0bb9fba889062d0f5ea5cff9822605e0de2190850c3976341dcf","ssdeep":"768:kUgzbI5DOSZLI59BuNFoa8JQYpKb+uQcC3aqxUhPGLMcLDvoXJhIVEqzeeMRodgT:4po84n66IwRrAqgnByzfe+GcYAuq","tlshash":"a863fa625a04f033b6bb05ae64d0e104b9999419fcb74c54f42cc9904febd4f26b7bba","first_seen":"2023-07-11T17:54:11Z","last_seen":"2026-07-22T23:47:10.576697Z","times_seen":1711,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":27,"dns":1,"connect":1,"send":0,"wait":12,"receive":1,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safetontransact.pages.dev/images/apple-touch-icon.png","fqdn":"safetontransact.pages.dev","domain":"safetontransact.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safetontransact.pages.dev/","date":"2026-04-29T04:16:34.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safetontransact.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 20:15:40 GMT","end":"Wed, 10 Jun 2026 21:14:05 GMT"},"fingerprint":{"sha1":"1C:AA:1D:A4:C7:44:FE:63:FA:B3:0D:73:60:C0:76:0B:9F:0C:72:B6","sha256":"07:E0:77:B9:56:70:E8:68:2A:09:43:E5:1E:27:4B:DE:70:7F:C9:C5:11:BB:12:2C:3D:13:07:5F:54:5A:0C:D4"}}},"request":{"raw":"GET /images/apple-touch-icon.png HTTP/1.1\r\nHost: safetontransact.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://safetontransact.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 29 Apr 2026 04:16:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 11057\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"53c43f268a856167558c4b8707918adf\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1IRAY6Et5UrIXAimzbIQACaBI1TS2%2Bv7uSnqbxjQEgRo5Opdgb%2Fa%2Bp1YX0v7fMo7tPUxo2%2FjRnkvPYXcV2Fb5wjc9Ne2apwY7RBOu1ngkWHwK6qScRgKAa31G50%2FYBZXrVlsqwo9dsEoGWbU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f3b7df9b98e56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11057,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"4df66443c1249bfb7666505040781820","sha1":"9055eac54e4fd78ded2ec47d5d8b27e403d674e3","sha256":"32ed9496c4c95570e08ec21b92518de3e268dd00af42c4fef9cc5919d77fa6fc","sha512":"3e033dcaf0710341e2da9cfa5f000b51f1b4af6c3516f9f16ecc9d728d56373c3da2ac110e3547fe168303ea5a8ee682e7a82fcf4329a59d986b978ccda4435d","ssdeep":"192:tlFgcJyKg62P2ycX/ShCGVtd17NrGXZBMLzMUv2xmon5fWaVdTpnUjr6eUVS:T+qyKghPdcPtGr7NrGXZBxUvemq5pUn9","tlshash":"e032bfe35237c5c70a11448d6af11496901cee2bd627ec7fc82ed8fa2445ee1abc5be4","first_seen":"2024-08-19T15:30:20.985712Z","last_seen":"2026-04-29T04:17:03.001322Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"safetontransact.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://safetontransact.pages.dev/","date":"2026-04-29T04:16:35.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:20:2A:2D:A3:02:EE:53:E4:CE:46:31:49:99:9A:9E:B0:E7:B5:19","sha256":"23:47:72:09:4E:47:52:14:EB:06:36:94:9D:9F:8D:66:FD:E8:20:45:1A:16:A2:2A:C5:F5:B8:7C:2A:41:2B:61"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://safetontransact.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Apr 2026 01:42:27 GMT\r\nexpires: Fri, 23 Apr 2027 01:42:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 527648\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-25T03:49:32.374141Z","times_seen":245893,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":114,"dns":1,"connect":28,"send":0,"wait":30,"receive":39,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/web3/4.0.3/web3.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safetontransact.pages.dev/","date":"2026-04-29T04:16:33.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/web3/4.0.3/web3.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://safetontransact.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 29 Apr 2026 04:16:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 147285\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"64ad8554-23f55\"\r\nlast-modified: Tue, 11 Jul 2023 16:37:40 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 253573\r\nexpires: Mon, 19 Apr 2027 04:16:33 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YGtjGB%2BeCIj1y1srnxWESV6J0%2BPGr4isgGOs%2FrCWpJWFTHVLszW%2Fn42%2BED8BapQU0eF1orIInrj%2BKk57upCt9kQN0jivsoxxeMs4rNLzoJ%2FvZ2urvWS2WPC%2F%2BCaHGDJCbblYPo2E\"}]}\r\ncf-ray: 9f3b7df368bac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":637834,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65470)","md5":"1932881debf364cfed402e1d0c7a54e3","sha1":"e53d84ee93cb7c4eae82bdce939e80307b2cb1b1","sha256":"e95c1fc6aaa308b9bbfc7ba359f34b57c65e4932440416441fe7c8864ccbdd84","sha512":"da8a6b7764f6bd29008a2f9d5568ba0beb804db43560698279de9bea6b1bf49c62df786c5c06e787067db61c02aba9dd89d66fe0fe75a9aab9f2ea3d6ffc789c","ssdeep":"6144:a/e4gIKfZRWMElBbp4ppCFSnYYUoHPm9CJ3FhPyM8HMxt8gqm6fTUfX3fqwph:rEbUYYvOiF8HMXZph","tlshash":"9bd43a8476a0f0a207db60e444b70006f235b969705e44a8b7b9d8f7bda9ecd9177f38","first_seen":"2023-07-13T05:39:36Z","last_seen":"2026-07-23T05:25:55.405031Z","times_seen":1716,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":50,"dns":5,"connect":6,"send":0,"wait":10,"receive":4,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
