{"report_id":"661caa12-e1f6-4f1c-929b-5be0ede6ff3d","version":6,"status":"done","tags":[],"date":"2026-04-05T02:11:49Z","url":{"schema":"https","addr":"drift-safe.com/","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"drift-safe.com/","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"title":"Drift | Trade Perpetual Futures","dom":{"size":7704,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"0a52a7f0e5fc350ffc9f4666ef87e470","sha1":"703ea6fec3cf1142c9028a2b0ae7386555e49537","sha256":"db64d44fe7a0be91bc59ae87234e1dd3e75f1eab598594da605ad77c8c4256ff","sha512":"2cb448e787713b901f71f6cf52f363af31207e30354019b354e023270ab371ec76632f8295a20881b75240c7cc196aa15744dcb4a5fa462f0535dcd301d29291","ssdeep":"96:rhfVh5rnvtvqS8k45USz+45RaIkata89+RzydNAYt9+kex8KdRonI7B1g/M:r3HvQS8LUSZRa2b9wmtI98IT","tlshash":"caf183a462fa1e2b81c386ed38d77009be01d297d35c28a57b6e45e10fc7da1980f16b","dom_hash":"domhash1bb6632a0ff2f4312d79237b469ab3b4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"drift-safe.com/","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-10T02:11:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"drift-safe.com","ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-01","domain_rank":0,"first_seen":"2026-04-05T02:11:50.385978Z","last_seen":"2026-04-05T02:11:50.385978Z","alert_count":79,"request_count":79,"received_data":2371561,"sent_data":37384,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.prod.website-files.com","ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-01-23","domain_rank":20159,"first_seen":"2023-11-01T22:05:38Z","last_seen":"2026-03-30T10:13:30.871355Z","alert_count":0,"request_count":1,"received_data":30198,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"drift-safe.com/","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"509d49f13db605fb0520bc87cdbd2835","sha1":"cb92de946db1e80a40a0333e70caf1fce3c27827","sha256":"1f381a10c402e456b9b7149701c81095b0876cbab0ec9bdeee149658a43f1970","sha512":"13374040e53dc21872e67db7bfed6f76eb1dc484bb531d32935171118cc0d3603c05f9793b0e587bac6be08d2cc0030eacc3fc808912dcf0c035ce9f152fc4a0","ssdeep":"","tlshash":"acc0c0808930bab28808049f2039c2a43240283c0052e0c7c3fc99591c6cfc00e84808","size":186,"data":"","first_seen":"2026-04-05T02:11:56.38625Z","last_seen":"2026-04-05T02:11:56.38625Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"drift-safe.com/6310e7dee49f0839d48eede3_cn.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /6310e7dee49f0839d48eede3_cn.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-31e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DfmcmxnyILqewupmSgiQomqX6%2FoLVcjJxvf1zqVfide1%2BCg7%2Ftgv1TJ8kePTyn%2FJS3pr89ekF2AGHr8A1V6ngHB76%2Fsg0W6w%2Fe1OnwTPde2RLF%2BB7%2BXWTYuN%2FWMw4AFHAg%3D%3D\"}]}\r\ncf-ray: 9e7505a9e8803181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":798,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5c573ebe5273a73856cae1ef8b8dd88c","sha1":"b6320f7c413ccaec7ecf914638c3b13ec6a0317a","sha256":"2885d2bb7daaf10103a7a6fbd71a447320efa367676c8a66298466fedc19d539","sha512":"2cd84b885091c678a4d2bd1edaf622b7f080fce5c71fef8c2a7d8fb9468f453b569a0f0b539c2f1f4974b48f49f99633806e867f097e76137ae4f61fa638984a","ssdeep":"","tlshash":"90018911e506d01cc60a5744c2ecfe8ca746f0a283b7448ffe35669a417ce1f59ea78d","first_seen":"2023-05-24T11:50:09Z","last_seen":"2026-04-05T02:11:56.288938Z","times_seen":62,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/63e54405e31ddd025b4581bc_Size=16px,%20Full%20color_=True,%20Coin=APT.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /63e54405e31ddd025b4581bc_Size=16px,%20Full%20color_=True,%20Coin=APT.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-8ce\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RBOdqUMf4MC6yk0NQY9NQO29loSc0eWiEgDCpuAkWwQO3cUmQckqz0ULxVr8gKKSKh%2F7MMO%2BwjySRWAGxs9w5TG47IPIuWhdmfFcqyxAg0j9e3lh5jIwV4OMgpCaQKQrEQ%3D%3D\"}]}\r\ncf-ray: 9e7505a9e88a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2254,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2400ce521d9e5a7f0370255f9ae999cf","sha1":"8ce1e299188e08303d14ef3e76fd184c65ba07d8","sha256":"67761287a9e1918f0c51509ac2309ae340963dd774a5735d8cf1ccc62860c709","sha512":"c1b7fd040f834ac7d84b6ed5881b02861d142cc191951fbbe37f3ca8953487396cb4ce6e4da790089584bab48377938b6ea89747fd7ce93cc1dc7e967f953bb8","ssdeep":"","tlshash":"b44133e7f25ce1c8ca0ba7a0db37ec30934fa8fdf7ca818955509f49765a0418d59c90","first_seen":"2025-09-17T08:59:29.789939Z","last_seen":"2026-04-05T02:11:56.289569Z","times_seen":2,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/sparkline-17.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /sparkline-17.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-1a58\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5vhGKWi7rn%2FAV%2F%2BMghG6HTQhXHPsYBVH0NZQtCY7GtOJ9KZRYcq%2FAuEQ3%2BytUHe6MBc2eJMSk6j9ic6tU%2FUbFklByE070IztHjXsxbmRUeWS7I7BbhNU4yXIk1FnbM8WpA%3D%3D\"}]}\r\ncf-ray: 9e7505aa089d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6744,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"974308947550a87c975695932e5c413b","sha1":"51df394edea548851b91da6d61e53466130f72ff","sha256":"9491d42d1c3ed445ca38e6d0617b37611d89e1bb005102334aab6d78e6635dc6","sha512":"fef4ab11063bccb38a15c0e5a0e97ab8c5fa6f53e4e868e0c1a150becbcfea5217c7031598037f45008379b14958a98f226f69691fb9dfca7ebf4b8799b7e03a","ssdeep":"192:T6rfnd5BwCdyD9Ptdv4HLFzJAeMYOkhBkOuR+1kMN:T4b/de+FznkOuQkMN","tlshash":"fcd1e8b40be45af0b70f73e4e692849e7b6e10b9f7a849c8c1c4fb25d6222554c18c57","first_seen":"2026-04-05T02:11:56.290695Z","last_seen":"2026-04-05T02:11:56.290695Z","times_seen":1,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/672cc8958175ece40028ae10_btc.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /672cc8958175ece40028ae10_btc.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:27 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-57f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=scIa4YLvtx0OYG8kAkuQND6DniQOyzdFgbTWVyKy7hGB1AZODgRxPLOaufuZoDgst1erZ6RVjyF0GRNhqJs%2ByNx87857bpQsXXk9xWnpz411OTHorQR1I4d1%2Fs4UlxMBBg%3D%3D\"}]}\r\ncf-ray: 9e7505ad38f13181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1407,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3a1046740b4d4f176584cd1aa474c7c6","sha1":"85f4bfbe171d2517fc556a09d031d83705cc4c40","sha256":"f83d1a3b7a9f87e61af72a6b0d9d1d3a96e095dc9ffea20eb4cb9ddd2c8e1d6e","sha512":"b93a40614577a85aee0b4f59b403ab7da093b527a30913c0e59244f2b52567d14b48a63367ebfee74da03812b407c4ff4344994359309253e5292d2dc46cfbfb","ssdeep":"","tlshash":"6b21c0f2328ca3e4b407cff1b8164851919f3dfa6fbc16a54254dca4e4da5c98e80994","first_seen":"2025-09-17T08:59:29.816053Z","last_seen":"2026-04-05T02:11:56.291755Z","times_seen":2,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/63466d44bef315060d12b430_bitcoin.webp","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /63466d44bef315060d12b430_bitcoin.webp HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\netag: W/\"69cd95c0-1974\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=awDN7mdwa04TOzZmKmdkTA7NDXhWWqx0DGBq%2B322g25MnpMkLxnz9YX%2BOtutw1TE3RnVV1ddh89EsiaY7ujS%2F0mWnyxjYzDU%2FWwleJaimNmzGlXasDbRLrVZ%2Bkiz2wh8vQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9e7505a9e8853181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6516,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"343868ca9fb7701613ec9e0180184728","sha1":"9f8147e8c3667ca207f06e4704c7519f2424b448","sha256":"24851fb7592d7bbfc727b1f048bb661d8e7342fa5657c0a5f20b682137b9b433","sha512":"b7b9ff3e07f2c8fe70e43c0a3c4fd28936e938285ec3136b67d922e290591291fd63c778e5314f0387182390f27b7e1cdc5011d79b06999e9fc30ba5d3227758","ssdeep":"96:dxu8UuVsjvdT+fODGtWLbCR+Lx+IPOwgWbNo5BO8VeM7pVlAyUSwRApiMOxWu/1b:dxtUPjVfrbCMxT2wguGsmeMpGOiXZRHx","tlshash":"66d19ffc7cf38948530170a6375a478ed6af00b1aa81a3f69fe3e92e4b743c15b99540","first_seen":"2023-05-14T08:25:50Z","last_seen":"2026-04-05T02:11:56.292547Z","times_seen":511,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/sparkline-12.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /sparkline-12.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-1a53\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v7EC1tsqY5f%2BheET%2B7GPRPtKV27iEtgydvHkEl4xQza567F6k8wL3gnWmf%2Bc5UK23KxH7M64yQ%2Bm7aIbwWMbA5uncrokmaPYZqInc%2F3aPhU9FWgy9ghcmjrniy98EKF44w%3D%3D\"}]}\r\ncf-ray: 9e7505a9f8933181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6739,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"215caac5a94b667547139698307ed3b4","sha1":"4ca60e0a0ccc7f1e826589ffbb07247dba7563b1","sha256":"a2bff665f38a8ebaa9002b9fcdc6c1e74f3d51cfa7cb4b80ccfeb5ece21e68d8","sha512":"5074d3052fab010a29a304894099d97642cb1ba38991ccdeca9685aff09e270757991ab2441b0dca294abf578791ebdc6741daecb58cfc573d5cba26bc1d6152","ssdeep":"96:Ta0LtGVfrdTsTCl2V0K70kRkZ1Y7i9Iigbw0eZj1Hv5SldG5qRiu5UJFinY:TrtGVfrV/w+K70IkZ2i90ebSGYXOFiY","tlshash":"50d1d8f507e867e0750bb3e4b05285eebf692079bbbd0ae8c2c4f535a1191498d1dc93","first_seen":"2026-04-05T02:11:56.293147Z","last_seen":"2026-04-05T02:11:56.293147Z","times_seen":1,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/sparkline-16.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /sparkline-16.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-1958\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TqUXq5zGw0VovYGMnAuASrPBXtU0Vg0izhZXsF0MNtniJ3QJPCFf9wxIoQ98s03ky1T9CQ5k0H8uMyzvdu0gd49yo9%2Fpjm%2BphksFmPrDK0lmKV96KeCSlsBmLM1C4KuxIw%3D%3D\"}]}\r\ncf-ray: 9e7505a9f89b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6488,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f8e72ce1eaa8c0a25a065f9f187b6ec","sha1":"9ff6ef2f00fe2c0ca4602d004d39cdf6de08ac49","sha256":"ceb0d5dccbc713d6bcd9011f49890f54e556021292e612ac790393d5186c7c45","sha512":"6a8d4dc5a0a67b5be39b1add066632acf4e5711cd98dc3c221e2d9e00b757e04f8640de5d646c12e2a49471f04ec26bf99898d15a8fe67d328c6a43ada02b416","ssdeep":"192:TyLBezkXrK1RPo99Px91QUzA8b4u8St7HrxW7TYqIYBt2shH:TyLBdXr6RPojz1QkAY4LSt7LxW7TYqIS","tlshash":"63d14f3c2e9867f5b164ab8990d7d2d3bf760064691fcd0dc385aed4acd620c9c6889e","first_seen":"2026-04-05T02:11:56.294063Z","last_seen":"2026-04-05T02:11:56.294063Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/sparkline-24.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /sparkline-24.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-1938\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H2CiMCXw%2B20guxA0fbq5aTsMTT4kaCSB%2BMCyOLRqYAx7jVcvT%2FeGwoZYfP8Lc%2FvlXVBpx1fO50H057d9t0ZLSSnbF%2BZnBRVXAT%2Be2ZmqHhFLOIga%2FYj0N8IjhYP0%2FDUJBQ%3D%3D\"}]}\r\ncf-ray: 9e7505aa18b13181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6456,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"304ab9fb8beac32402400f7a7ee7c703","sha1":"9befef5db23e86e9ea460d834f835b6905d990d4","sha256":"f4c0a8027bde9a4c78aeb1b474ae6df6c6746364898ab4b4e6344a9fb690c29e","sha512":"bc97ddc23919165fa9885902b1dc01cf27d64660d03daab5bc542341605fc92c23d1624dcf244eed72511cc0a2d3e706e1546afc41a27ecf757ab49284c1f9ef","ssdeep":"192:Tl3x6Zd3RZ3EdQPhI7XmYCMZ+BuyAiwmpemM1qg8Ky+:Tl3x6ZlRZ324G7XmnGWubJgHM1qlW","tlshash":"87d182bc1e8893f9b054978ac127c5c3bf360068a91e9e4d8345fed4ade13549c98cde","first_seen":"2026-04-05T02:11:56.294967Z","last_seen":"2026-04-05T02:11:56.294967Z","times_seen":1,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/secureproxy?s=%2Fjmpd%2F","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:29.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"POST /secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://drift-safe.com/\r\ncontent-type: application/json\r\nContent-Length: 1422\r\nOrigin: https://drift-safe.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1422,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QB4ALYAioACAAcAxADMACuAhYAAQACMgMAAO8nhn2XtsKCAUfEFZBpMFk8zrj5tmUCAADaQxR7BMKfOBUuvwdSfLzXrOXhuouTb2AF0HLSIR1zT6UOPH2qkML8rJK23uOFB8CiLXewZUwaj-bgVHNKInfpe1HwK7FXVv0qRBkHW7VnwPHvpujOaEitxzxm58RMiXHGRRoQEd9cOoZ8ssLQmGEg3fI_fe-bGU7ClOrRdWFrRFlv6t7Y6eIH7VA-3e5eISjDectjAtZxPfcyaKythUHX3-Pg8HhgazOsgNtuIMjfe6hxxB-scLVJ03StxN3LntMbMo3MSma2UfXk__Bh1ywda-iDci4JQH3yXhGwrTY5aOmfjJI1qJ-idQcGiRCsJLDwNMSCds4FmBuB8DhowPJO3eIBi_qbxhfFKwguCKvAzsOnXL07mGjRmozx5a915hXXv4UvbyRWw0qs7cEPQd_N35yH_mIPHpti8uyCSO7BAjEHg0cGw6ZlJsmdyuaibXsVuKUmiF30VvdALo7IK0XXFujNgbPnAXna7QDv_f-4xBkeT8Jt8uK3NgYUdSs8FBYmOM4mbHAFmueAzb2fqYRGlnj0YllcYdid27992m044uOeLLnR6P2o6UdiGv7Li3TD68HL_bWJMxk5_E1lYlIIuiY1X5MZq6WFrPEqE0ADb1IQIv5UezOFsvu_xn7SW9eD1pm9GYGSWIcPCr5cvSZR1nktiq82cIHCakaJUNpAKUvYKhcKBKMpOyxfjaXpn8d-Q8rsGfg85DB0BxQCjnC3YkZjqwKYXB_1yRxwZ-Nnj-QuQF9i_5_oe5hNhV1sCueCOLrifFfKigAol-3fnRj52tLVNW5JDKVBIGiM1n3yruepgbKSifRDqTme0mpVV5xolKhDM0aiQhsnr1zWwefn76vfuj1LIRcEtvLIahw1IzBTo-KS-l5htcQbweRVjGQ6UltvH6TQPU7YDr41DmgTkZfegpyea06vUnCmOInTGuNmx8KAIu0M0Fq5s7_AVxnvffR4gC2vM-og66UrX23l3V35zoCSC3NzzeYaorZSUdN6b-yU8Lje7qr3BgTsSGtzxcBvcS-0K-hkiq5jXxD1E1S5yNvqdD6ZGlrgC8R9IullzUJ-Kc_VTHKF2RI8FBhumHA1ZoU2K6nTKVAxTz2M_nD_XcoOLjJ3EA\",\"challenge\":\"eyJpZCI6IkczRjUzalRRTFd4T04zQ1k4Qmk5YUEiLCJub25jZSI6MzUsImhhc2giOiIwMGE1ODBiOGQ3NWViOTkyM2UzNmU2YTViMDAzOGE2Y2I5ODVjMzBiYzg4MTNjNzdhZjM5MjRmYzUwZGU3YWFlIn0=\"}"}},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:30 GMT\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9994\r\nx-ratelimit-reset: 1775355149405\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 04/05/2026 02:11:29\r\ncdn-edgestorageid: 879\r\ncdn-requestid: b185d45b2520d3dd5e39e33a38fe9aab\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x5Fz13ESS2j4G8ig8BeGf5QY8koVRhvuNa9%2FwX65IT%2FngRAs8xnPQyMYmgkBUO85lH5vehsqixK7DCH6GN2KsQT5ATkhQ%2Fm6w7%2FYnwmKGFWdvl%2Bh5DAYX7RLEEb252skzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e7505bc4b603181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T16:47:07.54892Z","times_seen":13384334,"resource_available":true,"data":null}},"time_used":682,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":682,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/secureproxy?s=%2Fipfs%2Ffbhq8yfQfRR3ijkdKRQpsw806dffdb49a1090127d5d0f8f525c6d1%3Ft%3D1775355086737","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /secureproxy?s=%2Fipfs%2Ffbhq8yfQfRR3ijkdKRQpsw806dffdb49a1090127d5d0f8f525c6d1%3Ft%3D1775355086737 HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:28 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: max-age=2592000\r\netag: W/\"980f6-Z6OV+y6VeENfQvsMaetgynmq+oU\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=bv17-d-H2QIOXgLuYkFbkg.js\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/05/2026 02:11:28\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: 29c96d587b79c00ad3c10151d25262c0\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OcQvercQFbPrs5QO4LwzXWahFnrhDE7EKkxGBB2mlwz7BJYRfwHJdSzTdTHsupo1BNVh8%2BuF7bNvW4afxT3laIdxc%2FGTyvyzHff8nxmzpUgkV7BpjRvcU0cyETmxN4oygw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e7505ac18d43181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":622838,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8ce44617fbac55a5493e67456f1c31aa","sha1":"67a395fb2e9578435f42fb0c69eb60ca79aafa85","sha256":"da5764d55e47a0d4607b5b0d8381c29ca34b7dadc78b47a352a80dbd3428fe62","sha512":"a47275e05ab2795fabc736cc04530338d9552ca6e65d7c6fee839a53aa3159b3d6b24d0c5d86ba98c961a7c924e2757b3504067d5c86af507b18287e19d91a21","ssdeep":"6144:Ih5gDw7AOsstbFZFSXwRTMsS8chPcsdJs3wFYYH/3h8qcPOQA12Lcv0q:osw7AnXwRTMP8chPc730WW","tlshash":"d0d4eac2ab09157340ca2eb5047b42afdf882d4d078ba85077f9afd9d74578230eee59","first_seen":"2026-04-05T02:11:56.296458Z","last_seen":"2026-04-05T02:11:56.296458Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1735,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1628,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/6310e7dee49f0825b78eeddc_kr.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /6310e7dee49f0825b78eeddc_kr.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-4df\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DoxD4uGk6BVFxbgW%2F704HFKkSlGb5L148l1sMxkziGSNhWNLtLzSdjsT%2B0GgPCQAfrjsGBm73IM5nTsV8mExzDyIewJd8Opg29cKwDt2KOnhu6ovexFnjufvDa1O%2BULeRQ%3D%3D\"}]}\r\ncf-ray: 9e7505a9e87f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1247,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3b7a32805e845de5832f541b8e23180d","sha1":"864a5c270e5a415eec471389c3fbed09d08d58fe","sha256":"d30933aace07f5e1c9db581042d8016943601cc8d59fc1c31a01f5d799aad773","sha512":"1124b6ac270da0ffd17c4c1237b5f38fcea6b00b267656959fd86e54bb3854c0c12e808624284ca0c1a7dd5ba433712c91b82a602c23d071400b72f068589a2b","ssdeep":"","tlshash":"4e21eeb060fd602c8a2cd30af7fda4cd972b20eb134205c6b56c74b95f70566aa876c9","first_seen":"2023-10-17T12:13:37Z","last_seen":"2026-04-05T02:11:56.297399Z","times_seen":28,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/sparkline-1.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /sparkline-1.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-1a4f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TZf7qBsQsq4ipSMao3g9ivTsBzAqXxzPaEzoFHpJCpZ9wtdTKofmjWKvLycgRi%2BUjdBAn9UxhnDwn3ximZscvYAt83n6tCZfjV6WkE2oNj5aIVk%2Fjw6z569g%2BZZOr%2F4e%2Fw%3D%3D\"}]}\r\ncf-ray: 9e7505a9e88b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6735,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3b1efb8ae807415a012bf00b385a9641","sha1":"17820e6ccac6f2190acfa0c58a91b8ddc8ad5eb6","sha256":"66567fac512fa24b433acfaccd2470f33b78fc2cf2f36425d881e4fd7e4596ca","sha512":"7da872ba20e3d2a2ea4810ad63759c838ff85010e05088c96f0bf1101ed23e8c640093255df260d2367ecc4e3cd2550c0bd7bdd94a51f54df7dc0c46cd8cd2e6","ssdeep":"192:Ts9mGpmS6OfTa0dqkQaDt4e/sMZTLJC+cgN:TsIG16Of2GyHMZTLJ5N","tlshash":"5dd1d7b42bf896f0720ff3e4a18288ae3a7a14bdbfe549d8c5c47a25c51615c4c1dc67","first_seen":"2026-04-05T02:11:56.298425Z","last_seen":"2026-04-05T02:11:56.298425Z","times_seen":1,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/6421a81f83acef2673280f14_Size=24px,%20Full%20color_=True,%20Coin=Arb,%20Dark_=Default,%20Protocol=Arbitrum%20One,%20Effect=Light%20Borde.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /6421a81f83acef2673280f14_Size=24px,%20Full%20color_=True,%20Coin=Arb,%20Dark_=Default,%20Protocol=Arbitrum%20One,%20Effect=Light%20Borde.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-a3f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K5pXLNyQ4xxCvMva4nto%2FEsW4CxoJFZ35TvKpM6eN%2FKk7BchzGzxTFp3NRFQgxgTmPhwtKDsqSPhKaWXpN9t9YcSi%2F9%2B6kirNyMPm%2B4RujKNIjMoBcpNUwTh%2ByxVnOVX0g%3D%3D\"}]}\r\ncf-ray: 9e7505aa089c3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2623,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aaca19f7b3f7aa75f5f497b2e100e7b4","sha1":"39bf1c17909353c6d996e162d4cdf90c725e1f8d","sha256":"8cc221e47e3b03502fc43007a33450017b9c161d1962371799a1927b0440afd8","sha512":"59b1a11dca4d78e4627cbcdbe3588ffcea549abb2048c234d360b36261032f1873a35ceb33251a07e64c1ec31fc482965a6e5a55a43906b9eda5735b791a5caa","ssdeep":"","tlshash":"925141d223d8b3d05643cfe4980a513734733cfa3e6cdb9941909aa1b4231da9e88dd8","first_seen":"2025-09-17T08:59:29.883614Z","last_seen":"2026-04-05T02:11:56.299248Z","times_seen":2,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/sparkline-5.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /sparkline-5.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-192e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=opq9q%2Bg%2B2dRJAkwAqwtA6c2VP4EawVVM8MkHlQ7FeuV2hla%2BJ%2BE%2BSoJpa9YWcwQujA9SSvjFN%2Bl78Sp8S%2Fqr7nX5qVs0NSOXRIv6jBh%2FbJjwHXLv8My9%2BxmXVxeCtNRuHw%3D%3D\"}]}\r\ncf-ray: 9e7505aa18b03181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6446,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e0f5c30adf15bdd69dacab4e44ff659d","sha1":"7bf4b9b7adda57d0924faafc4f4c5f73a39d0a2d","sha256":"bd2f26369c0628f8b9631c126e0204724e9a68875f611b77ffa05cf7af2f3b16","sha512":"781c95c8e23a2faf3e12c2b5e21bac7e8604ca3089891b05e90a08ad68fb3a0bf2dfe9ad1d028ea68a999ed4558abe4f1cd5139d99226b68ad249947306a0f10","ssdeep":"192:TBCbqHkai9jP3Vt+Hhhi3YNoX9pBGEDl8O74siH:TBCbqHkai5P3yriI6X9mED+O7Py","tlshash":"8cd1417c1ec897f5b1569b41c46bd1c3ef7b0079ba1f9e0e8744aec4add06889c9084e","first_seen":"2026-04-05T02:11:56.300185Z","last_seen":"2026-04-05T02:11:56.300185Z","times_seen":1,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-05T02:11:25.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mARRPWD1VO1K8E3Rp7cYBwjcY14z3oLRj4dK272Qlo2cDH5L%2FYUvRYpnc%2FIHkTVE83FWeeHfOfaxQGFqKODtjGbbJnV7Q9PpdikDpd42yPxrO%2FjMct3qeCJKNu6630tZVg%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9e7505a75ecdb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":126857,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (437)","md5":"6d9c26656f2640b3ecd40e58ecbf820e","sha1":"f11527556a04dcae7ba17034b5451c572484d8e2","sha256":"c4613ccfd21e6963eec70d415bde00baec95aba532e895b600277ce1132d8b4c","sha512":"afce478d75b273df7aaefcceabbd68378d02f6b4107bb12df4f7c712b2a843f989978f561092f6a1e8cfcc3590c2d31c43dc12788173580bcfb44917543cc947","ssdeep":"768:jV0/EHD6CMQKjR9ul/XnVDwC71c02bzP9mQn8Z:ZHaMXVDwayZng","tlshash":"1ac32c7196f405e2518f81a8aa71671f6f85e643ce4b8689b3fc5bd06f83c82dc13a5c","first_seen":"2026-04-05T02:11:56.301036Z","last_seen":"2026-04-05T02:11:56.301036Z","times_seen":1,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":19,"dns":10,"connect":1,"send":0,"wait":216,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/sparkline-22.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /sparkline-22.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-1941\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KG%2BuQykiEzDhGnu7tt%2FGyoL7iL9HmNd0ZlAjC5rOiDtgZ8%2B79K%2FO6lf8ihopl1AR8GLdkwltXA9w5BAJ2spURunnakDhciYWbxk%2FHe2X%2B%2BMoRjf23sx%2BmjhNZ6uiAmJ3Ew%3D%3D\"}]}\r\ncf-ray: 9e7505aa18af3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6465,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0cab48759a0dfe179e34367e78ef4d61","sha1":"3452114010ad13887dfaa536bdb8f9dd534abaa7","sha256":"142b9d74242c119c727228143e8435bac43f5ff58404345fd447d6c1d6b26782","sha512":"2952e7585b5e9ecb78df6b31998a0aad4267f590f018c8f766a3c22d881393aa9181456bcd5d7704a689938d2a33e89281d537dbc8764510ff4d1a9ae450d973","ssdeep":"192:Tn95H8qg8dOu2L4wgrsQ1H7TLcDGgM8d3NMtu2x9u:T95cqg8cnggsH73cDG78d3Otu2xw","tlshash":"abd150bc6e9c93f8b1659b89e06bc5d3bf360061a61ecd4d8341bfd49dd46488c50c9e","first_seen":"2026-04-05T02:11:56.301912Z","last_seen":"2026-04-05T02:11:56.301912Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/6310e7dee49f0862b08eee24_fa-brands-400.woff2","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /6310e7dee49f0862b08eee24_fa-brands-400.woff2 HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/drift-v2-staging.webflow.shared.9dc2af22c.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:27 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 76736\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\netag: \"69cd95c0-12bc0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dKle97Mp4Lu4itQcZ%2F96D3xjZtQnb7eGtvikEiUz9ZNqLjCP%2Bs2HHJVz3GKutjtvE8tgyukniXqlxanVFlQd%2B%2Bf3abmtkdhsR8qIcy5xeNKQ8SjggLtCxAl2bGCSvL%2FctQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7505ace8ec3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76736,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 76736, version 331.-31196","md5":"ed311c7a0ade9a75bb3ebf5a7670f31d","sha1":"0613c7ebba55ee47ef302c0f7766324692f899a7","sha256":"8ea8791754915a898a3100e63e32978a6d1763be6df8e73a39d3a90d691cdeef","sha512":"6048e7ab94134b7200f0d5ed7fb8d577298d4831a2b3a4e0e5baa5c67468f77d4409314d63d34436ba6ba038c86faf87e46dacf98d311a74291b976fa39a9674","ssdeep":"1536:yVIKSdIKO0RtQIJwjZKd4jkC8Voun7L5XpeVQ+OEmdEu:SItm0RtQpAdofaluV99u","tlshash":"4d730196c3ca08de6994937ce960efdd1b0d4dc7aa72c7525e63c9a451c8ec83834b78","first_seen":"2023-04-05T17:41:32Z","last_seen":"2026-04-05T16:13:09.24193Z","times_seen":19116,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":248,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/640f2d042297d84fbc0c261a_matic.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /640f2d042297d84fbc0c261a_matic.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-5f2\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lp930G%2FDF7Woqu1WM8cphnSQVcRladg3gyVyG4f1OOOQy8CeB6pXiheBlLk7sjbdc%2BLxW7nH9QBMYBKYqGVL2oxgaNaX1Yp8lpgtQfPL9ddCVg2SUolte%2Bw4K247tFFu3Q%3D%3D\"}]}\r\ncf-ray: 9e7505a9e88c3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1522,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e194f08a5dbbf4d5610d4926e975e37","sha1":"6003ea71fb0061c919c3e7105e7abe8bb05ffe32","sha256":"d2e1d987c4344c2b36c60f242fc3e12b1ff0b30d11ba7025b001e693ecdee3a8","sha512":"f50e6a0ceb16699cb40e741e77f08790172b876b27b3154cda3ace66e0684ce57cb840279b7aed1f52b4259aa936ea883ffd21fdaea74e8f10a6f168b9e35d6b","ssdeep":"","tlshash":"e33120e2e7c9a6e1d108ffe4ba3b58753a17347dab60d21d82c05e48f5924dca4cc881","first_seen":"2025-09-17T08:59:29.973571Z","last_seen":"2026-04-05T02:11:56.303694Z","times_seen":2,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/drift-v2-staging.webflow.shared.9dc2af22c.min.css","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /drift-v2-staging.webflow.shared.9dc2af22c.min.css HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\netag: W/\"69cd95c0-3552f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BgxYiixNaoX%2FNXbEhX0Orm64uH1%2B4NVpEEXho5OPB9BAFg5CpahsdC0FdlfdfNcZZa4uFM22x3IU46JT9pL5Tswc2xX6yvWX8%2FlC1a938H3cG8dc3q%2BBkHYfLCp1gmteyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9e7505a9e87b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":218415,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65524), with no line terminators","md5":"bb0268bee92556473fa6616467f94ab6","sha1":"11422773845877d7c85b4cf7bb3b4e1432461d84","sha256":"006124bf6c23a0f37e2f7abf5f13fe3b61ac525a42c84c0a976081d1001c9f97","sha512":"c291d5ae56350c56d6e44bc1340aab367b3d463a82c20e52f7c0119d6af5451428c218fbf44e4b414ebd76131149741462c346e6eb2f13224198408b8b0e01af","ssdeep":"1536:KgoCW+vB56xvBg2rDDgdhleifas5tKd8h+U1TnvPD6ftX78R26NzdfHSCo9UtIFy:n2uovpe78978vMDqv","tlshash":"f224b4266f54301cb02b84bae5e1b78cb1159407db6353eff452e526cacb2d32b36a5c","first_seen":"2026-04-05T02:11:56.304651Z","last_seen":"2026-04-05T02:11:56.304651Z","times_seen":1,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/sparkline.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /sparkline.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-1940\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2VoaEr2U9qIBv%2BiuzK9DApytnUGorsZx4gQQDFAMYaZyu5xyosUoZCYykN2wKP2Abjgf8rRlpWL5oryV8VnYX%2FZYRn%2F0tiWEyBLODBGAQ0I%2BV%2BPvw%2F9SDxXgYuBgSiZ3yw%3D%3D\"}]}\r\ncf-ray: 9e7505a9e8843181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6464,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d92121d0a926bc69705b360787cc1bab","sha1":"46b5527c459515c2ca21bc2b189ec6d48254b58c","sha256":"277a51abaa32b12c16d5d6ff01467c320be154be8ba3af4e045f8005024cf07e","sha512":"bcb87b79ca9d3394d8a79642ab592eb634872b28a6a63c364324c08c31dd9bf09594e0d32bdc35c149dc92b181bfaf002282cf0665c0ffa6338c5afa297ef6aa","ssdeep":"192:Tu1c8dxfZSLvfnAtCs6Nr74ydUZf0ML6f92zk:Tu1tdxfIfAtC1NdUZf0ML8gY","tlshash":"ffd15f7c1ec8a7f5b216e785d41bc2c7bf7a0065661ece4e8301afd4add62408ca488e","first_seen":"2026-04-05T02:11:56.3055Z","last_seen":"2026-04-05T02:11:56.3055Z","times_seen":1,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/6480e0e76655ba07487af6a9_op2.avif","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /6480e0e76655ba07487af6a9_op2.avif HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1130\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\netag: \"69cd95c0-46a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T1L7u2zQvwDUPu6h00N3qUtBu%2Fe5zQ2i5h1Ef0kjV09w5mE9xI13BivtJklgAOUtWZcX6QWFd5NuyxuOE5nn0W6dAAG2zjPjOG%2FW8%2BejF5yHZncfoGI2ltc53UC%2BChd2hg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7505aa08a03181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1130,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"beb30eeff3aece137cd17e7d7407f992","sha1":"be75778ac8f8be7695edf2328b544a2beadebcf5","sha256":"0e19c49735f476031c639e0b63c40e8d348529a9ddece7aa2d0b89d287395874","sha512":"a2cd4a2fc76a4b900b91313cb72fbd0fa6217ef9242e800a3444caca13f03ccdf94382b66e85d2028a0ce0d205453cb1918f1af1e86f1f1b83cada6b0dbf49c2","ssdeep":"","tlshash":"ad21425227b08c02ea54463b80690755b7b1e771922f295abd847a3c146d33acc90c3d","first_seen":"2025-09-17T08:59:29.828112Z","last_seen":"2026-04-05T02:11:56.306361Z","times_seen":2,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/65fabdda9953ca61694ae105_Left%20Buildings.avif","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /65fabdda9953ca61694ae105_Left%20Buildings.avif HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:27 GMT\r\ncontent-type: image/avif\r\ncontent-length: 18184\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\netag: \"69cd95c0-4708\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D%2F1GlSZYiXgfDAtZB8WagIF2uJQ42lW8LXwdjRP%2B7uWkqms9oy0DVBnFdEZvwwR8J28M%2Fweumi30n3jfh20NOOYD6w5FiN0gbuLPu4qgTl%2FOrf%2BbfCMd7ZU1QEJPfnGgYw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7505ad38f23181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18184,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"166bd1c61df8d77b7ece3209c1545726","sha1":"379a9efc4442ae1d913a2bacf331f6e7ce740bc2","sha256":"813d0e4aa30bdeeae86e8481477aafcde17bb51f300e98b63391ba60fc7b01ea","sha512":"846c2ec3e2c5b3231b8719dea749c1ecaf3bad3b6e4ffc5cdef16f027e67c8e0020577bea6ea9630c5e19b28f420e8e8f2dba89f698bfc961b1fe66ca237b36c","ssdeep":"384:rsPbHlZxxx7aEqfDxgGsF4aIwR8A+I1HGlXcgpeOUSVAjUfD6B2oBt:8lVxOEI1v4ItA+iuUSVwUfD8Bt","tlshash":"fb82d0a42872fd94e86a933089c576453b95d6ea2151a770ab43f14cbc391c0cbfe4ad","first_seen":"2025-09-17T08:59:29.81891Z","last_seen":"2026-04-05T02:11:56.307566Z","times_seen":2,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/63466d2a5519161232006035_ethereum.webp","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /63466d2a5519161232006035_ethereum.webp HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\netag: W/\"69cd95c0-1b66\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0k8VxwbGRlwIRm8ykQP2g5dqDHLb0P79JInhWSxhwj9V2DeJj6s4QZotwzuVfOmciQsfhQ9N%2F12zQ8g%2FLLqPiHyF5DLUsmywsTqlerpVAel8Y3yPLDNGZ4VqwecAG64wfQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9e7505a9e8873181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7014,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"63722ab81ef50b7400879e0e4d19b212","sha1":"dae4933bf3879cecbc2c9141988dd02a75afe819","sha256":"939a465a5d19c5777535edd1d47ac1a737ab49eebb21ef96ec35fe902aa8462a","sha512":"17d41ba040517ae6682592d80627d814c42bff69defa049626135e927621c9b159d738ef9a8e701bdff17b639f2c6c1cb15086d9e986a1b31e3efa202f6440f3","ssdeep":"192:Tdx/yoVZXCojzkLRrwYQTGaHy0Y5ePWfZFV3x1w4+/VAhs:Tdxq2DjUrwTTGaH1Y5ePQF7m9/As","tlshash":"38e17e886ce91bbec5ddb1b6913d6926c34f1267d0ae53c444bb897900a880b0a7d363","first_seen":"2023-05-14T08:25:50Z","last_seen":"2026-04-05T02:11:56.308513Z","times_seen":160,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/sparkline-4.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /sparkline-4.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-1945\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FPkseP8PLhhq03BaHWnw72d9VS5Z1RDRFwWnzQmSN2KjiKX0BjW5%2FDVozi2xntrCdze3PXMWCXVa5l4f06c%2B%2FkwN4AdM%2Fr2aR0qVUQb%2FuKmrS1nlQAo9mxguXhvsfNaPcg%3D%3D\"}]}\r\ncf-ray: 9e7505aa08a53181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6469,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4042daa688cc1391bbd670d7fd4647ec","sha1":"043c6429b912781b46562a9835d2fe0fc34b84ad","sha256":"270c0d48be094f8c07147e6e4c48628309ee92133e89c2203c1661e501ef868a","sha512":"9715dba1f803f926903cb02ef57ab115bb050a6d89a65cdd3dbd893d2affa6bcf8b64c28211bb48e405e9f4b241829c554e1e613e298ee1e75fe64ad9e0d0369","ssdeep":"192:TVm4NhIXpEZbizmvK1kADV2YJD3arkg0rODeeTz5rk:TVm4NhIXp8izmvK1k4tsr70rODe0z5Q","tlshash":"35d142fc2e8897f5b164ab988157c2c7ff770066654ede1ec740bee4adc11488c6489e","first_seen":"2026-04-05T02:11:56.309025Z","last_seen":"2026-04-05T02:11:56.309025Z","times_seen":1,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/64539f5966edcb4bdfb60ddf_Size=24px,%20Full%20color_=True,%20Coin=Sui,%20Dark_=Default.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /64539f5966edcb4bdfb60ddf_Size=24px,%20Full%20color_=True,%20Coin=Sui,%20Dark_=Default.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-716\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6XRTFta9%2BUmEsz7WhtR2T6fT1lNqjT33T07r81f1Kn8QewcugqrKv5mkB3qfpuK7k77byFePA4hKGHRzZJQbmZawr5sQ9EBDLOVOlSYHrKela5h1tudEtocewbf9kf3o4A%3D%3D\"}]}\r\ncf-ray: 9e7505aa08a83181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1814,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c3e01d37827ea621cdbcafae35aad837","sha1":"3d9e4801acd2881f42a5560d3d70dc32daf14516","sha256":"14ff0d1f95336ace79b5f038d99e47172089311456e4a96c2b8fb9cd56e89002","sha512":"f750a5b9f6703548b60af6ffb3e2914912e03060823fe17edd66514106c686e3f6aa977c7e615e52f6f02864089e0186f19cb9ccc8180272d5a74309978c2f4b","ssdeep":"","tlshash":"973111e7d7d8a3d0e907f3e0c63a6571b22b34bd770ad34c0790a98da751099898a5e4","first_seen":"2025-09-17T08:59:29.937036Z","last_seen":"2026-04-05T02:11:56.310028Z","times_seen":2,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/634d36ebfeb1d6b29b9d5930_ABCMarfa-Semibold-Trial.otf","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /634d36ebfeb1d6b29b9d5930_ABCMarfa-Semibold-Trial.otf HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/drift-v2-staging.webflow.shared.9dc2af22c.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 141272\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\netag: \"69cd95c0-227d8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ioktvL2era7OmwbywLu6Dxdflqkge7hY0eaS9G%2FU8ZuQcLPfYuiPZ3692F8SenBx6pB6jZQd0TKj63rqGkNnIpDZOTPkg2YNt2zx9jAigfzQw4MzLNJmyCmlCySzALzKBQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7505acd8e93181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141272,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"15d6a974db4558d828e041b83da9ff11","sha1":"0e35786798a109bca437e138312b605b17049eae","sha256":"2e6bdcad69698a6e93fed8ac32b57cbc0d83b762bdba68ea6e0b266fa9500f0d","sha512":"72cd8e182ada15dd16013e3ab545ad89d71c7fb1e2e2550092d7a868e197c87c0f3527f9c9bd5dedce82cefa5b4c7dd736952b5ff32944042c468b86d56d5473","ssdeep":"1536:khZY1XckQdJAomAgM+sYDEf0XNkByHzAoLKU9WlTcfot18888KyitqCECkXo1HBb:CV/mAgM+Fb9tK7lTqoiRqCEzXiByHlWT","tlshash":"a5d3ad69be87a701e5659f315da2e370632af51bbf228b07713830041dd19e0af7f689","first_seen":"2025-09-17T08:59:29.889887Z","last_seen":"2026-04-05T02:11:56.311215Z","times_seen":2,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":137,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/660c132eec16e382d8840370_bittnesor-tao%201.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /660c132eec16e382d8840370_bittnesor-tao%201.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-87a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6u52XlqLTUtzxpX4iBvbcYoVIzNDoQAAP8D6RnyxZxxnI5urGn88F%2FuTzicvowdVC9sPwtdFuTm9CEq%2Fh1YjgjH74p3sU7F6Kit1O%2FelLCuASEYZc1QjVFWtdbwPxzthuw%3D%3D\"}]}\r\ncf-ray: 9e7505aa08a43181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2170,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d4bdcc26b755897ca4218f623c3c03a8","sha1":"0833063583a8c6bc36ee26728b78d65a33fa3b0a","sha256":"adb12fce6daea424962720e947fe3608e8e20a54cc6d9eed061f20837f637632","sha512":"2ff2f1d9c43b2557ee9cce6db3efa24ba753f761b5deed43dfdef7eb994ea15085565b4bd3cf97f89ce2143fdbe742d536e70574627ce6b42485d127aa0c9ca0","ssdeep":"","tlshash":"e3410c3870d1791e52988744f577b15fccd5c1838396c04ef458b28a9a6f825362d37d","first_seen":"2025-09-17T08:59:29.917275Z","last_seen":"2026-04-05T02:11:56.312087Z","times_seen":2,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/6536f8f3d42c74fdfbf80709_Size=16px,%20Full%20color_=True,%20Coin=INJ,%20Dark_=Default.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /6536f8f3d42c74fdfbf80709_Size=16px,%20Full%20color_=True,%20Coin=INJ,%20Dark_=Default.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-976\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B%2Fm%2Bc%2BOlwkK5cD2kRwSNMQG%2FFbjGMFbzK0nQi2s4Dm5HRS8TCgzCyTYdxTKZDTKWGWVLDw4iV2CySZTH83KgFaCcfgMAH78q9fvgTli5y%2FQO9uDs3IuxIZYHLes2ilTM0Q%3D%3D\"}]}\r\ncf-ray: 9e7505aa08a63181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2422,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ebb201da108844e4f417110d0cb7caa8","sha1":"84ba9e60cb36f6076bbf47272decb40cdcb11a08","sha256":"7b74387fe106f3947638c64370a96c9e6429a2e6e23a9aa9c612ce70a235f21c","sha512":"b8f22b548cc2b1c3a2d42cb50aabf6f0561aca9fa477e4e9dc9484c96bb6ef2932279c17c614f8f68d2a51eb05d7243ef7cb8809d0605fcfe0fcc1fe027074a7","ssdeep":"","tlshash":"b94162f7f718b1e5ead1c348da030436611b64b77e861bc491e4ff9db7688d0494c988","first_seen":"2025-09-17T08:59:29.850441Z","last_seen":"2026-04-05T02:11:56.313275Z","times_seen":2,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/660c151e32ac7930edc329d8_tia%201.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /660c151e32ac7930edc329d8_tia%201.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-3036\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7WwFSVeBns7YSIioofnVxTTIaaYoOMT%2FWZnLa2k7XrylGwAr%2FD5soRgWp%2FqQgwB14EDr2X1hlhV%2BpxU0vaCbNOzOTxsMJ4bX%2B34nvGIV6pEx5I5DO2g%2FfPtm%2F5k7f3t2rA%3D%3D\"}]}\r\ncf-ray: 9e7505aa08ac3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12342,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a3f358191f656d6df4ccc1e2658a201","sha1":"16723a463147b7d76634f7fd26374301804a8f1e","sha256":"4135db46c6f2510b2ffafae0ad211497b11fbcc4c9cb6e6a7aa6e14837d11969","sha512":"18fca2d9b24d561f812dd9b16fe5a0c87166d3f90a838030402e6e2f69f7501efa84d78780f344f8d57c61e9944cab928c999fc466c452f79185961537ef752d","ssdeep":"192:6zDz8OjvcckGmqKZbNuQZUMsxFGUvXB20feBnVh/1g+ZERL:6zDAcRIq6uMSI6XjfaZm","tlshash":"2142d0d5f348b08782d4e70d32d9b45e8cff6280d80994edb5a6ebc15d3b65104e58ac","first_seen":"2025-09-17T08:59:29.90599Z","last_seen":"2026-04-05T02:11:56.314134Z","times_seen":2,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/sparkline-25.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /sparkline-25.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-192d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GEds1AEjybfm6cblWszTd7%2FUYSMCLUCSdVSYbziAbHzGb4cdRdk9F3DKH85ZYeyWSJDNnTHC2frwNycgFUOZkEzQS8BguBDuT0hiCq736hRG%2FhuKBXA19Ht96NGSQtWnHg%3D%3D\"}]}\r\ncf-ray: 9e7505aa18b23181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6445,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"07889a397a0db70c2a9dfd747c34a0de","sha1":"e963973245c16c1103d12d8ac5e7973918d50783","sha256":"e2f546feae073663bfa08bc3b2db51ead17552973d2c32648cf7a95414de8363","sha512":"a95941e80b3e2f35564e9ffc400a386824284ee8bfbcc2e11f408465e9e601298bdb3ba5c94a5a77da9adf6f8d8c705e8cac4e6b3baa6a7dd05c7916063ab44e","ssdeep":"192:TbikO0BbQAo0nXVwtD2oWiSoYBXiPiKPzzv+:Tbi70SlaetDFWcYBXiPHPPm","tlshash":"06d1b66c2e58a3f87015eb99d187c2c3af7714a5aa27cd0fc384afd09dc52085c2488f","first_seen":"2026-04-05T02:11:56.315005Z","last_seen":"2026-04-05T02:11:56.315005Z","times_seen":1,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/63adcc1db02d660497f9957e_Drift%20Full%20Logo%20White.avif","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /63adcc1db02d660497f9957e_Drift%20Full%20Logo%20White.avif HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:27 GMT\r\ncontent-type: image/avif\r\ncontent-length: 4633\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\netag: \"69cd95c0-1219\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XwRKSGInvMPYhKKrKp8MXDv3pKOBc7DP20yKiebvsB%2Fc0z5Glk8tfe94wmV7aOgm0ZNM6sqcGofdtHUNTNIgwPJi%2BfOELkJLxZ3oV9oBo43MaA8Cq%2FqyeCzyc4D%2B6sbjgg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7505ad38ee3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4633,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"4432d75507fffcedc4ea96ad5725c087","sha1":"767d40cf0ea761e71eba63898aa2b16c94df77bf","sha256":"1927ab878432bbd699073d4df00bc66fdbee472ba6820e8a2c0d8255b4c67699","sha512":"bc25bfb225a0d48ee4a041dae66ef9681f5c11bde064535859355d492913251a06c22ecb4783e8d4e776d3a31db5ac41c24f7a5daaf928acacc7f8815466b241","ssdeep":"96:rGYR3H4xRjI+X1GFI9NdFLGCu+wsO62gI0KEZBoQQ5FC9MEkbCI2cg:rGi3H9+X1qI9Nd9G71/QNb3Bj9ibCI2N","tlshash":"bea17d62be551df6f1d842b8661cd6027188f48c27db3f89c882f7632444b65e928b0a","first_seen":"2025-09-17T08:59:29.89201Z","last_seen":"2026-04-05T02:11:56.315983Z","times_seen":2,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/sparkline-15.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /sparkline-15.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-1939\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AoeU2%2BkOHeFrMWgTz9Zn8JEUxOfLk9uvoVFUU%2BPcoo8cqLkm%2FpabNgIAAymirFfzfAJoBT%2FiZdG52cBHYQj8TXUMq1lBMaluYbYuwPtrwZJ0moRz8RWJKnnmjc2SljbCYQ%3D%3D\"}]}\r\ncf-ray: 9e7505a9f8993181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6457,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"45abd0944fbef873e5cba88ab41dd075","sha1":"0de57f4409bb8591772f7a1c113edad9eca740c6","sha256":"02a3ce570d7eeb010b0761ff4c56d220c2cfc5899fa5bc184fbba0bddceb9a83","sha512":"259c84219124de3f91acbe9a652c61b07697304964b6b19a2b283af6033243147c76633ab6b75aebe6303fe7dae4ed34b7291363ee4e113d0eb08e4c5b36d544","ssdeep":"192:TAKt7s9jmo54cAapijlHGfnN7upNFPD44HUnIjjq+7huj:TAKt7s9jm2gjpONCpvr4IUnIjjq+9U","tlshash":"8ad183bc1fc893f5b256a789c417cac79f3f0069a55e9d0e8781bec0add52408d90c8e","first_seen":"2026-04-05T02:11:56.317119Z","last_seen":"2026-04-05T02:11:56.317119Z","times_seen":1,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/sparkline-18.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /sparkline-18.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-192c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6GgyvHtYAPqLSAH2KtBzSKgA313WTSCNqWWwOcSbo1KPmGdC7ICPqSPtRib425aDqDEsJQm5EcQK00Xs9WvphR1BWpBg43rVHLoCWdoBMxoyELAZM1XhLpuCWADutz25cg%3D%3D\"}]}\r\ncf-ray: 9e7505aa089f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6444,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a7e8c056bc2817922a6444cd12c3d194","sha1":"32d4908641717200534e3805be53d0ee382e2f8a","sha256":"16cf0b471524bf5b6acd40b0d325582430782e4278ed1070253f764631b3d228","sha512":"6baa4bc3534f0df3e1b644c9e5a4eee882696a4e630d67f9367bdd1e3612d13fe2de39fc043f1d4e9437085d2b33011523e31e49b0945ab30cdcdf2b22e91ce8","ssdeep":"192:T9qsxh8r7VFHfp7nBLTO6isq5GAGVuGty49IhmLx:T9qKh8r7VX7nB/RiL5oVuL46+x","tlshash":"e8d170bc2ecc4be5b1599798c417c1c3eeba0875aa1f8e0e8344eed05dc62889c5489f","first_seen":"2026-04-05T02:11:56.318073Z","last_seen":"2026-04-05T02:11:56.318073Z","times_seen":1,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/65fabdda4991b90bf2a4fa83_Stars.png","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /65fabdda4991b90bf2a4fa83_Stars.png HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/drift-v2-staging.webflow.shared.9dc2af22c.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 30613\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\netag: \"69cd95c0-7795\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BfdvnlQItwF7uf%2BCH38dxaq1Nz4Kh6qKIKSUZ7352k4QRn8pf%2FgOksq2N467xqvX4zJJWRAu1zMlDf0QKuarkMf61vA9QRRJs%2B1IAHDrIQrIMngGM2e2OJY9AwXBxFbOkA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7505aca8e13181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30613,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2880 x 1864, 4-bit colormap, non-interlaced","md5":"5924e45025858340aa38b5a02406e908","sha1":"d23b4c4bfb04ec5b952f748f4493ae1de15591a7","sha256":"1fea472c852e07023655c6cc132fc125d86a127c2219ea1f3f7930210f219447","sha512":"5e8c6be34565307a6182c8a5a3883f75610ae02fd94d0b0eeb8d8b652b7ca290a57d4df4afe89be6db7a9333837af246f5b0960f731b0ce639d69fd5fc816c7e","ssdeep":"768:9IlCJL5FziJJkZPgd85EkoT6w+LLowYkZ:qa5FziwPgjkoTULosZ","tlshash":"23d2e10b45b07040c11507bf5b996f769ab19c278bba7ac2d3c202c51630ea9fdde6c6","first_seen":"2025-09-17T08:59:29.927577Z","last_seen":"2026-04-05T02:11:56.318925Z","times_seen":2,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/672cc816dfdc767e8df396e7_Vault.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /672cc816dfdc767e8df396e7_Vault.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:27 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-393\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fFfW4WGkXVP1lIBKU2QYrjHtMOqiY3UKCOMnHW9uzg0uvuyQlWLpY3eJTvE1NhjoWulfT2h8wadMJurRwN61Glwp0LCDLArSBgMyPnG7hltBlKv9RC4xZIPgSl1G%2BqBERA%3D%3D\"}]}\r\ncf-ray: 9e7505ad38ef3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":915,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"87b906bb36c422f8437e7de8cfeaacfa","sha1":"878f71e8ed5c4c6755b49357f0ec8fc653d3d0f7","sha256":"d349672d156be5a2d0563400f6eb8ad1f71f3e6703f004c12674ab24ca02789a","sha512":"6675ecdd207e17bfdf0dd7427b650aef5ef6c99f69be4f753f7f5d7ad83ccb4b9fc7319a3d3b40fa9036e8e759dc422602da87cb666aa9c984c2fdf5e1045257","ssdeep":"","tlshash":"3f1180fadbc4eac15c4143e1d0796210b35764bd8304dc74d778eaa8ba69c5a4e5dd20","first_seen":"2025-09-17T08:59:29.920765Z","last_seen":"2026-04-05T02:11:56.319935Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/642f108d536fd56e5175cfff_dogex2.avif","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /642f108d536fd56e5175cfff_dogex2.avif HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1440\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\netag: \"69cd95c0-5a0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p9JDw0jjX8mW5wRAtyWOPIIs39alef%2Buv9zHiy52A72OXDKYui0k87ApaDQmIHu8bsmpzvWs%2FA8%2BXmskR5VaAp2TAqyEfI7BtvES1l0HB%2BriNUoxEZtsRm1UCmC3y2sDng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7505a9f8943181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1440,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"e57b58c220aaa8280a11ae168517739f","sha1":"bb0450736cc264d1c279c5ad364c038596af92d4","sha256":"de5873eb0ac9c898bcfbfcbc851421e63ea3232166e89110d1ae423683ec8b2e","sha512":"91365b112359cb6c73cc6aa212bf112ad9d0a604080b324b75fd07585867338d6bd5b1be22719c42614e4c1f40465647499f313f7f339d1ce3efe82ae28d3676","ssdeep":"","tlshash":"f721b6a217b0ec13f1585672b8484b553b60832992731eaf1d027a255669733e984c2d","first_seen":"2025-09-17T08:59:29.899977Z","last_seen":"2026-04-05T02:11:56.320741Z","times_seen":2,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/sparkline-7.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /sparkline-7.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-1941\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lpHJPiRdPTuR2KSFOPIk6UVGiNTLqOLAXOBEzJqFwhaZQtaP59buJjyfEDAhGZXk5i0CAUaKENTB49d50BxYmjVt2%2BzYtX8NI%2BlIMWlAVhl6UZgwG7f2AjzBK10PuxkUkQ%3D%3D\"}]}\r\ncf-ray: 9e7505aa18b53181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6465,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f6ce26aec267cdcfd35718767956c8eb","sha1":"9fc8529be6de9032cb3db04489da154c606dd0a7","sha256":"f16e7baac0a6bd215a3e91cee180fbfcfb22487ebc36172ca20b6a3169d62d58","sha512":"0ab503c701377bedcd67ec22c7a510c2ed2a91c684f849f6cbb5b25516e84949f9e70225c395062387f58483d4df49208bd7b7216bac528f3a7027c5b7676746","ssdeep":"192:TA7oHG3xjP9vhNKnjQs+c5QEfcxQc5+OOvfGJ7xd:TA7om3xbLNKjfR90Gc59OvItd","tlshash":"dad16fbc0ec85be9b1149799e06bc1c7be7600b5aa1e9e0ec344bed4add12488c5088f","first_seen":"2026-04-05T02:11:56.321585Z","last_seen":"2026-04-05T02:11:56.321585Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/634d368e3b32696da2019b73_ABCMarfa-Regular-Trial.otf","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /634d368e3b32696da2019b73_ABCMarfa-Regular-Trial.otf HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/drift-v2-staging.webflow.shared.9dc2af22c.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 123656\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\netag: \"69cd95c0-1e308\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X%2BOwN7wQjCThJMTjdYFvOw8RokyiYiVr58ekeHJifUgxHh2ClDBBJ7rCkQj5v7iJ5NRQsHVj09WfD%2BQlW%2FhX6N8c2DqoYh0PrjG%2Bjqb%2Fv%2BT0n28luyc0%2FjFn8M8ieXzQZw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7505acb8e43181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123656,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"64360d3bd73b1dcd0a95f312a4ea62db","sha1":"4238d8fd243c80105ada2984560a6c889da422fb","sha256":"95558bfb35968dab727cafe4dbc753422fcb2d4563e6b3cc4de889015c9f8152","sha512":"46bb4c30ac4bd095b8f9fd4db8f248b2c8b204517ef5764c2da684103176a9db0deb39e0caf96c9510f34ea4a32fd88076f4d7005b3279ec3b9fb985561d2764","ssdeep":"1536:p5t4MMVQK5ZKMxBSCZyE/QAiLIAdHLD91rg4Y/9FHlYIT:GVG8ShEtWnmjHl/","tlshash":"3ac3ae34bb87a751d672db314e61d378a722f62bbf278f07b57a62044cd09901e3e605","first_seen":"2025-09-17T08:59:29.833908Z","last_seen":"2026-04-05T02:11:56.322421Z","times_seen":2,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":111,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/634d36a78eff79534a3315c7_ABCMarfa-Bold-Trial.otf","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /634d36a78eff79534a3315c7_ABCMarfa-Bold-Trial.otf HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/drift-v2-staging.webflow.shared.9dc2af22c.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:27 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 141552\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\netag: \"69cd95c0-228f0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4LiN8qbzCtAZD2Sn%2FgLpsSk9PmhwjTljgLfDu4oCp6Tkvh2WNl7gJ6TVlHlX%2FhVJx4IwXTURJz21bpig8zdnfALs7OKyz6VAN2RaBY8No84OAGF9HiUrMrDCkcAprhXc%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7505acc8e63181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":141552,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"4f2d582b3d2488460a3232c28e97b4f1","sha1":"f0c24e2846cc4fc845731cd6f90274d265d5a554","sha256":"ea0ca15a5403ef9e1b15588f7258a075c94e74548877adfddeed77268df37763","sha512":"5bdaa474e2b65cfbfed623d87b617285626efa645bfd9871965fbcdaf5d8c671b8e052763b9c4d4ca7b662336d73afee782e89e98e9c302384320a79aefc8804","ssdeep":"3072:AJexYS4mVzwugNuFCl5Gql7jk0tHjbCcHlv:Uexhdl4zv5k0hWa","tlshash":"6fd3ae69bb879741c5b6df3a9da2e3346322fa1faf1ad7077070650909c4e502e3f648","first_seen":"2025-09-17T08:59:29.978035Z","last_seen":"2026-04-05T02:11:56.323409Z","times_seen":2,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":138,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/660c109fee8f95258e29ebac_rndr.webp","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /660c109fee8f95258e29ebac_rndr.webp HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\netag: W/\"69cd95c0-892\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g4h8cZkmI5X61mTORgFNaGiRjB9HhiZA9etM0LU95EADxqwy4h0wmE91fuUGRo7WaARubrXMb1dWAh4UjOvS87zXexp8wQ5OmVOcYINHt2ix9mx7oAewnLOeXlVzRkwfoQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9e7505aa089e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2194,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"60f1030f58cb8e8567240970c3616bd9","sha1":"f607809bd78689149f594ddaa2e1b12228a8e5e1","sha256":"ecfbc99ca541a5fe379382cfd54f0f0d932f2ce2694859811280373490183e8f","sha512":"bc1120727d65261cf362209c31a50c3c1f96042375b58b2f9616afa063a33b73a772b1d5110c1647da3b7b367c545d440f965cb6bf45c205f2a909dfe12a2c2f","ssdeep":"","tlshash":"3a412c568c08ec2f8c9b69c96694e04b1172451161ef0fb64d534f9e4b81268fe45f7a","first_seen":"2025-09-17T08:59:29.915847Z","last_seen":"2026-04-05T02:11:56.324306Z","times_seen":5,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/sparkline-23.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /sparkline-23.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-1955\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MuJ6qu5AewNcwf%2F%2Bd10wGC%2FtZLL7yoWxdP9Zm7MVgIHdUEOzQ3oXfNYCbBT9t%2Bihd5wrAbp7o5Lc8G0LG55R%2FD4mxQjz14JLelubRvXT6INR98tlftJtqLaJOBvroeu02g%3D%3D\"}]}\r\ncf-ray: 9e7505aa08ad3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6485,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b514ec54df03bdb74b523fc4b422da19","sha1":"a16c946d05e414ff9e385e7d4d0c0297a5a7dfd3","sha256":"519becec91812988fc5efb0ba1324dc062c3e7566605b10e47c3acde66462a7b","sha512":"7290f9ee07279c2e58327c8ed756a7a60952fb22a429ab6d1c03522e267d979d569624dc9ef6c4c08a217924becf69d5ab6cb6038c4f63e8001f308d95657226","ssdeep":"192:TuZG0MLtIsHGLgK7/pZWDyd6INpIt2FErVj+yxjvaLy:TuZG0MhIsmLb/fgQ6IIt2FErdhjC2","tlshash":"64d130bc6e8997f4b168d789d0d7c6c3af3b00656a1b8e1ec344bec49dc520d9c9188e","first_seen":"2026-04-05T02:11:56.325475Z","last_seen":"2026-04-05T02:11:56.325475Z","times_seen":1,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/65eeddfb6a8f8ff05fa914ad_Moon%201%20(1).avif","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /65eeddfb6a8f8ff05fa914ad_Moon%201%20(1).avif HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/drift-v2-staging.webflow.shared.9dc2af22c.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:28 GMT\r\ncontent-type: image/avif\r\ncontent-length: 22501\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\netag: \"69cd95c0-57e5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BIFOgr694GIiw8lKlpD1bDeEAF97IYVjkm35vYYHK93ienEwGKiuGq7rtowjrMKtlQNRkO4i%2FKavhqbAGTrTWMVPR42PEshM4tQf3TXjF9dUizeO3u6mkxy0O3RBUgptqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7505acb8e33181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22501,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"0d9617e6a0820beb725463aaeaac15a8","sha1":"e478310d16e4896c3c36d73ab57cddc06d818fb9","sha256":"501aeaed6db684fe0ed2adf82a2b973203a53a170618098fe3a7407ef4f177a0","sha512":"63fb700fb8e9198f7b5f1dc42a4faab3b200e0aa8dbbb087cfc8800e03291ac03faab4924149dfc045f9b84d405faba9a3de6814bb469f55cc54ad9c8b124fed","ssdeep":"384:riF7RqWpsPh6YqqeXmhlPowZDkz3dC2R5g6gkW/KOi/0Qg65c0ZHxfTBNI9gpI:mF7RnsInWnP7ZwfRnECi6TRfTBUt","tlshash":"93a2e1d5139c600df142837f7b76014f6aa1266e347cb71e3ea3b4af8b2d7111a3a805","first_seen":"2025-09-17T08:59:29.832065Z","last_seen":"2026-04-05T02:11:56.326179Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1283,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1255,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/65ba6f678129c7a7881867be_jup.avif","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /65ba6f678129c7a7881867be_jup.avif HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 878\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\netag: \"69cd95c0-36e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=19qDURjy9hwWwUHjAoNmKz%2FPhI5voNaJjHocEk8io3TfnBWFICvQamJ28H5xb00nGEPZ3%2BAxcFNK1O5EPgyh59cGh1CYORCfmosPeeHBH2lASiBohcAlrrEWoaXU1LRSng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7505aa08ae3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":878,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"afefe9719eda0e90c4859f093ddf78d6","sha1":"6766d8a542bacd78c6fb7211668ff13a4a8bba4c","sha256":"4accb04e51a1dd3fddc5cdb40bfa329cd3e0726ba45a054d49850694f70777e2","sha512":"7c29c7ec31eca9efb7f837cdcfde4221de32e279798efee879261aad6f48ab1ba13f8725ba7edd56d777eedf712c72a8bc6c07273b3fe3810c2e10c96eeb9ecc","ssdeep":"","tlshash":"6d1146142690bd91dc2c037804ed031631fa5665a2376fe3ecc67104c4b6276dd09e28","first_seen":"2025-09-17T08:59:29.93835Z","last_seen":"2026-04-05T02:11:56.327137Z","times_seen":2,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/65eeddef0842d42be9745bfa_Ellipse%205893%20(2)%201.avif","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /65eeddef0842d42be9745bfa_Ellipse%205893%20(2)%201.avif HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/drift-v2-staging.webflow.shared.9dc2af22c.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 2622\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\netag: \"69cd95c0-a3e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FPcoBCOIxjRu3IbJTCuoLGUB9veVhMGrx1G%2FQL1v2C2D8JSz2jSkRtqMOROmHQ%2FoMioKjf1vRITCwIQHC%2Bx9MFAfjsFLGDVBHoS3YEZ7ciOvu3T1I2BVTBizQj%2Bq9bfgEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7505aca8e03181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2622,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"9a60552a7c8b8da74a5bba1f7c2645f3","sha1":"39a79dbea44055794cea982eaa987ce7da12eb59","sha256":"88da3397f05e54db693b2755fdc4b4aff22dd6b9c3f58a596b46b1845a0307f3","sha512":"bb7cc7e15f179f6367a6e43da571f3516bd480cbaa53ed817bf905ae8984da4ca8cedd863bfc24e176e3e569cd646902ff95fc2d6bb132726380dd3ace86e53c","ssdeep":"","tlshash":"ec513a26f6a19490e15065b8e8cb0a153aa0e97e0ed21275c1bb703ddd2ff65d56450c","first_seen":"2025-09-17T08:59:29.853848Z","last_seen":"2026-04-05T02:11:56.328008Z","times_seen":2,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/6683e27402efdd0d0a5a25dc_wif-hat-1-6683e2688ebb9.webp","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /6683e27402efdd0d0a5a25dc_wif-hat-1-6683e2688ebb9.webp HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\netag: W/\"69cd95c0-3a7c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kdIBDC8gmRnessC2dvps%2BHnGMQn68KAxlOoYlbAR1mt3jDdg2e%2BigxuDEOV5RiwuXVm%2FbxysxBPLdjkURnU1PZBMSB%2BgaugfUHA37w2O2VhrkrVBcxMhrd3XihU4bV8HBQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9e7505a9f89a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14972,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a8e46141930f059e6240f0a58f46a323","sha1":"19b53cf31f07f9cd0ce20cf511a0d7403a7eda79","sha256":"325d156fc7f6148e430004b27f71eb27b764933283bdb894ba6d57082859292d","sha512":"d803124217a953e8bdeb11e6e5613e3bbc08441f5d1c307def411388c5638ebcc9051e5004fbefdf70dac254367cc383f942d5b81d86011d188d32e0f79f3066","ssdeep":"192:Umvunsk5KPCOtcoma+E+/GVd/02twVwhWvTaozLPXp6ZDDSOXFcVlxvtC26RmuX3:UmGdKT+9/chliwhGjrXIZ3uLfC2wdsO3","tlshash":"b162d054a3ba996d8b85f43b0e473d3148c2b5451949f092e6ea00693acecd84a20efe","first_seen":"2025-09-17T08:59:29.984395Z","last_seen":"2026-04-05T02:11:56.328877Z","times_seen":2,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/65fabdbfa19c2c887d7082ac_icon%20(2).svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /65fabdbfa19c2c887d7082ac_icon%20(2).svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:27 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-8da\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ri7BsQpjt7mCYdyqq0mRtgD23PFX%2FZlWz2ZTJpd1Pv9FxBeuJLOtgIE5oqu4AYl9OUjEDp4hHiAxomfQYxDUNEYTx7uBSlWtId5unQQC5BnJNbHhcjAYScyztqPN%2B771%2Bg%3D%3D\"}]}\r\ncf-ray: 9e7505ad48f53181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2266,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4c18ceafe15a8c8daf5e66e3232a0eda","sha1":"3571f501dea712ff5442e20d62b1b6fea2ced543","sha256":"2f5233f96c0152905bc64e8e0534596d6e5dc16d78cc62067305527ba29cc9aa","sha512":"099a651c9664614a4838075ecc186a5bc8468b3c571c2e9bfdff58f1ab7e5b86d02a211bc1048b7d6974c92927ab3c659286d9fbf141c3465cb1ee518365fb36","ssdeep":"","tlshash":"90416365f3e69872765422fce37468147111009dd313e21cd4f37b67b028895ddbe5ca","first_seen":"2025-09-17T08:59:29.821721Z","last_seen":"2026-04-05T02:11:56.329649Z","times_seen":2,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/6310e7dee49f0866da8eed4c/68749cf2d18cf6ec4043bdb6_256%20(1).png","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:27.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 00:51:58 GMT","end":"Thu, 07 May 2026 01:51:37 GMT"},"fingerprint":{"sha1":"57:A1:73:C0:08:07:F2:DD:56:2A:DD:FF:51:D4:A5:62:53:C7:9A:8E","sha256":"E9:8A:00:BD:F9:8C:57:70:7F:31:ED:E2:BE:3D:E8:0B:D1:09:B4:07:B7:19:9F:0A:04:46:22:1B:EA:3D:8D:24"}}},"request":{"raw":"GET /6310e7dee49f0866da8eed4c/68749cf2d18cf6ec4043bdb6_256%20(1).png HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Apr 2026 02:11:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 29509\r\ncf-ray: 9e7505b158dbb4f7-OSL\r\nx-amz-id-2: u6IQaLBO98q1BS8UBS3d4nRhJN0kuFY2vpDU1xz5U4KfzeAYL/pe3r23FW1NUhfGFjP3+38bGkjANinHfCRC02GwPwovoVp8\r\nx-amz-request-id: EFPX25F19DSBP0B2\r\nlast-modified: Mon, 14 Jul 2025 06:00:21 GMT\r\netag: \"63d23f79537f63fbf46a24b189229464\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000, must-revalidate\r\nx-amz-version-id: ADIhshSyxXz4YLFKEuVbwSh1YIcch1f6\r\naccept-ranges: bytes\r\nage: 2712681\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29509,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"63d23f79537f63fbf46a24b189229464","sha1":"6437e55fabba2c53ef3370980361a43df4234227","sha256":"a67ead33eaf31a3f3a701e7b5df8160b27dfd44f9f84d959566696668424d665","sha512":"67253cf7b0253d2a78d32a5e306589016aa20706bb4bf91a5865cfe3536468df3a2250bb90adf00673512b628d60266b2a658a568e17c48590f9d9aba8b36603","ssdeep":"384:UkoN/34Del2ckCOC48rxE9MhD+DU0V3f8bIcORu3mXenfDk85chEcc3dtT4+M+TR:zXckXWO3kr1rnLuZc3dt0n+O8Jl6Nup","tlshash":"1dd2f16efff649e06aeb15054581037dd66e55cda6ee3104e03d0853d31b8e29eb8c3a","first_seen":"2025-09-17T08:59:29.842589Z","last_seen":"2026-04-05T02:11:56.330474Z","times_seen":2,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":44,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/65fabdda28225ecdad7e0a01_Bloom%20(1)%20(1).avif","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /65fabdda28225ecdad7e0a01_Bloom%20(1)%20(1).avif HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/drift-v2-staging.webflow.shared.9dc2af22c.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:27 GMT\r\ncontent-type: image/avif\r\ncontent-length: 6385\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\netag: \"69cd95c0-18f1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N02I4D4J1wfcVAMuRmlhsWpJ%2BSOecru7%2F%2BiNp%2BZqcP67hHQZDfi4AIPZXDDC3jghtK16B4xsDsB7%2FdvG9uu7dmAGXPkORZZpalN%2FLB%2Bo97qBzsIn0DUAI09uUpJw%2FM8bcA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7505aca8dd3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6385,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"ad6bb822ac5fda3f46b35d89dab430fb","sha1":"6188e5b209b7c73de8693099cb141984145636d6","sha256":"5e611b7abbc2bfcd8cdfbe0bf5d1ef25ccc8851923be02cbec0b4dc19633cf59","sha512":"0b08fd4b69ecf973e6d1db47f9c97df33cbd3f249094255fae448acf16355b46c97e4bf455a02089c2d3a5eea97a910afd0a498958ab091c0b7bda44c572e656","ssdeep":"96:rGY+7WCVsalugoxzf7XKPBy8KnEZ7/kv7T8S5rOM08lpehkjAXsHyjU3Vv:rGV73mPxzfWBytE9Mv7TFpO+rSQ3R","tlshash":"efd19d7a5ed61900de800bbd4e468a6fa379645f605338df34913ede484240f4676e1b","first_seen":"2025-09-17T08:59:29.83016Z","last_seen":"2026-04-05T02:11:56.331309Z","times_seen":2,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/6536f8f3d9daff543054a893_Size=16px,%20Full%20color_=True,%20Coin=LINK,%20Dark_=Default.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /6536f8f3d9daff543054a893_Size=16px,%20Full%20color_=True,%20Coin=LINK,%20Dark_=Default.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-353\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OXC1zXHPW%2FYyyWjDmhiFScf9PeSv6SPDs6zZUCkgW%2FmldRDALjDZ0F9%2FGz0IBcAu%2F5D2ONoSGEQ3rAZ%2FAvOfjmnxTwjHe4eE%2Bu%2FwyuUEEwijIdtsmORiqK2uhPrKEXn%2BKw%3D%3D\"}]}\r\ncf-ray: 9e7505a9f8983181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":851,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c613d1bd75c21a8f5f26e96baa96582f","sha1":"c78b91d48868d451402139f0c104a387614d0f8c","sha256":"439ae40d19cbf469c43e194aa383c6fddde86a041cd7684b2a54366d5c51d426","sha512":"a359154b03055eb5f81f09920529d9da9ac858a0d1872ccb99653f74fa914c9530cbd5ed1cd07b9977ededee4053f2bf592f23aefc3fe4d306f2b31d846d1a09","ssdeep":"","tlshash":"7101ccfa717cc5c8e614a709165ba258a05fe0bc859e4029f398783a253c2d96b64398","first_seen":"2025-09-17T08:59:29.844756Z","last_seen":"2026-04-05T02:11:56.33235Z","times_seen":2,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/sparkline-3.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /sparkline-3.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-192f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m0bkz2dFqOmmUcl30X5KLqFegIuV3voK79zmtqbV4sTILky89mCPBwHB1CIKSansYcK5FVdGdnOuKBnKiCGPtZnH00Rqov1ufajiRK7tCq8ivk4vRue3y3XTrtctXg2s%2FQ%3D%3D\"}]}\r\ncf-ray: 9e7505aa08a33181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6447,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bad5087ee0494531938cc1b735849eff","sha1":"98820205ad61f199363beb3e919f459cf36c7346","sha256":"90129fa3d10561a60d4efa65adb7ae09356bedc56b1291ef0f21427a441fbed2","sha512":"dc86bde4e0175330716919d50ac80c6b6a12791254a9402209ad7d39ee3ef1d30221ced87a0fe4a248a69242bec9684cfe446b6e317aa9d8a26aaebd6325836d","ssdeep":"192:TDkZ0GePGbdWeZFAS100Jy0RiYBsTQhkz5VAl:TDkZ0Ge8seZFHK080HBgQhkzHAl","tlshash":"5ad151bc6ec8a7f4b554a788d017c5c7af361074aa2fde1e8344bfc4acd02845c9489e","first_seen":"2026-04-05T02:11:56.333251Z","last_seen":"2026-04-05T02:11:56.333251Z","times_seen":1,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/634d37122d6ff755a4bc123e_ABCMarfa-Medium-Trial.otf","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /634d37122d6ff755a4bc123e_ABCMarfa-Medium-Trial.otf HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/drift-v2-staging.webflow.shared.9dc2af22c.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:27 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 140256\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\netag: \"69cd95c0-223e0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B2Y%2BtODyUpFVbao2J4%2BqcHHCxxmfka0n%2B5MOTFSCKkp5%2FgZRr78fgJ5c5FwDK738Hga2wROgrK5VyvJbKPO1xh1PycQDs6%2BDfjbji1qHnE6MtgjMt45osxwpHG1c4pfGMQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7505acc8e83181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":140256,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"2e09f5b1b0827ebaca4f4cb5ec2302f7","sha1":"fa58ae8b8cdef4f03523275351e4afcbdaa5e74b","sha256":"c280c773d645ffd8799402615a8efea7a80621933bb069dd9c9b6d5d71859b46","sha512":"1603839ec2266ddda93cdb47d00d359a7038be5e71896c9d27e278d4ca758465de5acf00d1de32ee47e91cf77c79c85494a8d9c3ed5634e88f7f09edc69d2d6f","ssdeep":"1536:tp6YGdX5Z63eDBYsVI9LKWSDRo2oqortKFzMg8ElFowtKRna3mf016xuFHlYP:uAaxWpX2Hox8zPPlFo2KRna3aTx2Hl2","tlshash":"72d37c707b921b00f6a99f319d62d370a336f61baf278717b53a60000dd6ad06f7e685","first_seen":"2024-08-19T21:28:39.94515Z","last_seen":"2026-04-05T02:11:56.349501Z","times_seen":3,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/64384ebb8b3a19491feb6bb0_Size=32px,%20Full%20color_=True,%20Coin=BNB,%20Dark_=Default.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /64384ebb8b3a19491feb6bb0_Size=32px,%20Full%20color_=True,%20Coin=BNB,%20Dark_=Default.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-3f5\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5o%2FLGTaiDvqJPy49i0ao36iWZtKEzpjY21OfzpEFRlKEZpim9bTIVSN%2BU3xkX%2ByAh%2FmrneL%2B9oTSyizWhzYT69pvxOQLsezUb7orV0n5r3qok0VAryVhWANhiVFnerIpaA%3D%3D\"}]}\r\ncf-ray: 9e7505a9f8903181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1013,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2906460756aa8f1d501937b2ca9000e5","sha1":"cf8095dd98f6e8907941c4fb332280c7cf5f66a6","sha256":"417c3fdcf84169b97abbdefd3525f3ed9b3f91ea44b2abaacde0bf76b8d1e762","sha512":"6e2d28ece76ea014c49cdb63544579434567ec2d0cc66aa8f0f8c53c8f94af29d4b7f79266c48f5020be2f2c76e94b659f6b2a8d1c7af0b034e6aac4c0d886c4","ssdeep":"","tlshash":"8211cef95898c3d0840f7f9872036839702771bd7ead4969a3c4155ae46f49e0a2c280","first_seen":"2025-09-17T08:59:29.92597Z","last_seen":"2026-04-05T02:11:56.350662Z","times_seen":2,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/660c0b9638848b43344018a5_Avalanche_Circle_RedWhite_Trans%20(1).webp","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /660c0b9638848b43344018a5_Avalanche_Circle_RedWhite_Trans%20(1).webp HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\netag: W/\"69cd95c0-56c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kSatWDprT3CcOj9n787Znf98V69mOJiw9XyFhsQrKbQeQiW0%2FtZORQy87ddbBnEvHSsX5281uqgEDiKCjmyp09LgCmSHaaOpyBPkqIn5wl%2FZLUo%2FglUCGxAJV%2BQPtV%2F4pA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9e7505a9f8963181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1388,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4bb75137bff8485ce38168faaeff2c9f","sha1":"19ba3668fd78c25ad0ee3c63a8409e78eb0d3614","sha256":"24cbbfb6639eceba21bfd865ae8a75c59d8886f55bdf5845909dcb1f7fd60669","sha512":"4d34d1e8033f0a8eb25b7244806d5601fa5c905f10e2c62f2663df63f3561179d3393de3d07115c135e60cf9a80c8536ecc75e8c209b6be77fed820e43b56835","ssdeep":"","tlshash":"ad21d89c24f147ae46ce61fd539987443e06e38a09c99db376630d3e002996d0ee315d","first_seen":"2025-02-11T12:35:52.349514Z","last_seen":"2026-04-05T02:11:56.351587Z","times_seen":6,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/sparkline-19.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /sparkline-19.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-193a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vzGSr2dop%2BhqWsU9VezVeLj89zx1LvJr4TKFyWii62bkMJwqrOiRXYbqdh0xAnfHSNTxc8wA%2BUaHG0WuHHHkBUKGFcC9eMNlzVLdx2WH%2B5nPL7CrKNffX82D1PmhMbon%2FA%3D%3D\"}]}\r\ncf-ray: 9e7505aa08a13181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6458,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a65ba6526079f828ccf4c15d0da75c92","sha1":"a273df401353d3842d02139dae395d4a31b9c2a4","sha256":"ddfc79224a94b91ab309fd09975ca2410f5cfeda305bbf5521ee5d488f818389","sha512":"128e788250343c7dbec8e0276cd2fa184801756f3c7f9b92a7e0107cc7f0a95c6ebe903dde600a3bd73a5feef20853918098855ab098a5238854d354a4791429","ssdeep":"192:TPcHVnj7bPOGL1KJRb2fcSOzaTSla0j+/Mf9j/Ci9dqtUeq8:TPWVnj3mGxKJRb2USOznE0jWMf9jCwd4","tlshash":"1ed1767c5ec943f4b1646b96d127d1c3af3b00a5a60fde0e8344eed09dc13489ca889e","first_seen":"2026-04-05T02:11:56.352517Z","last_seen":"2026-04-05T02:11:56.352517Z","times_seen":1,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/65fabdbfa0b964a10914343c_icon%20(1).svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /65fabdbfa0b964a10914343c_icon%20(1).svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:27 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-beb\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dWJAL3fnJJ3C%2Ftg6vCz6sEItSzlriH44NtiOix8IOI63PXRWQfseAK7Nqkhqfy2iQ4kz9VjsGv7nRpSDYF2x61rOndGDKYObrxeDb6sqR%2FZ7%2BXNIfq2QTMer9R5hdrLofw%3D%3D\"}]}\r\ncf-ray: 9e7505ad48f63181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3051,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"438ccf97922fd87c66378b4d3767d727","sha1":"b2203f2757328ce846f7954a55b29644c0e649df","sha256":"ea94006999d9d21d878df22c01912dee243315960fc092cfe22b9f93a0d6df4b","sha512":"25fc587acf95804cd23a139a17b89afd0a2a1573d541d3de6a33a184d0134e9f7641302f77e856d167780b7b7c12a9f43709a62b844f95118f73a67ab6de98df","ssdeep":"","tlshash":"f7513260a3369935f508d1fcd5e0783ca61227e3f212d158eaa73d26c1638ed6939dcb","first_seen":"2025-09-17T08:59:29.823391Z","last_seen":"2026-04-05T02:11:56.353449Z","times_seen":2,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/6310e7dee49f0854bc8eee00_English_language.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /6310e7dee49f0854bc8eee00_English_language.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-875\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DGAU3bvBLq1rELBc0qatQtSy6cADPwceEcUpwbzY6NUczfBWlIHHzrzNAh1IGVk17vcN1sop8Rxb13nhlm9fVIYOAd6q9Bm%2FlQtH8AG%2FIfDeUuhQ7WRjFuAj1vNUbFFEJA%3D%3D\"}]}\r\ncf-ray: 9e7505a9e87e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2165,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"811009910959e271211ed4ebd4b4436d","sha1":"94b7dc71502f8aa7676b4861f4a95a5bc9443d47","sha256":"8f0035722acde579a87d0d416240f7489514a1d723baf9e3f2949b198dddf56d","sha512":"cd652ac4f9979159d62bdf9c70b95084f2d4d1514ca046008d9ce385a324e7e0bc21589bf5c4a9b5de661277621c997d1f51b242b5bec2a610ce11d219c54cf9","ssdeep":"","tlshash":"7a41bb86d546581e4b3833ece2bfbcdcc1171872a19a0943f5607e2f80bfba93670548","first_seen":"2025-04-08T11:39:13.809788Z","last_seen":"2026-04-05T02:11:56.354401Z","times_seen":7,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/64b06282dd859049da43a92a_Size=32px,%20Full%20color_=True,%20Coin=XRP,%20Dark_=Default.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /64b06282dd859049da43a92a_Size=32px,%20Full%20color_=True,%20Coin=XRP,%20Dark_=Default.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-305\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9taBlHSVVxygsofRLc700SLQH5wZz3DQ5kR9S8I4ZuF3Pc0BjtPbm83Qc12DxRsjqfDPNk%2FicWvltBGUfg0r9XYaVLca6tbdOUO5XkqggffoFXqrUdm3hc3R4%2BKwJQnbIQ%3D%3D\"}]}\r\ncf-ray: 9e7505a9f8923181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":773,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"52baa3795c0c63fdb6a235efbbe8f2dd","sha1":"8f0b3de05d671c00e9775c3d10341b57c3880b3d","sha256":"cc7b06363fa37b31ff6e20f2f7d856705076a698504c0ada75daa09c6a5ed6c1","sha512":"5e1101eefef62dd532150736d7d8247d8866fef8580c983727a3bdb5fc7d962266afd5cdd5430413fce9948d884199755391fe869f0e74c43f6f715fb6407360","ssdeep":"","tlshash":"3c0165f60bfc71d69418eb58ee3900b6a06234fc7338c5e282106e207327087d2dd9c4","first_seen":"2025-09-17T08:59:29.932834Z","last_seen":"2026-04-05T02:11:56.355475Z","times_seen":2,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/sparkline-13.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /sparkline-13.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-193b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JFhIchmredwRay9heLhoE2jGKH%2BavOtpCN47k7u8hSLpkCV6%2B5ytO8wCBzkVymwjtfCWGIjhAjZiBNrJFeyaXmbduIsFaYYEbPwu9AJtsRHLGnqNWoBQF1%2F6rGnt3pzugA%3D%3D\"}]}\r\ncf-ray: 9e7505a9f8953181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6459,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1f081f916093789bfcaefa14066ce375","sha1":"7abebd21bcc8f54473fd40ceab55e7b3034a6f31","sha256":"45b816f1d233da82cbf121a39a4bc957630a558ef45ad2f47a49288abd416c0e","sha512":"a8b3f9c3dcd773338398a1ddaf2c28d113e94be366bf6490c491726e9b33d341181a9706cf641016e7f9b3f064015b5a972a340fc3f1a3535a4a479e62597972","ssdeep":"192:TzQH/1aYC53rUuzQbnWhkknxo6t1qT0H5aVp13jg:TzQf1axJ4aQbnwkSxo6t1qT0HOp1zg","tlshash":"85d1507c2ecc47f9b214ab8ad017d1d3af7600756a0fee4e8345bed86dd41488c658ae","first_seen":"2026-04-05T02:11:56.356352Z","last_seen":"2026-04-05T02:11:56.356352Z","times_seen":1,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/sparkline-6.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /sparkline-6.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-1934\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tV7KAQoqHPbLuwEA%2B0owfmBpK2DQeET86FMJuKY5lYaFh64eyc4CeFJvlIgB6Tm0vLEdHRpbB3n2O09%2FTPFSqgyGF3%2BmjnPEADUrgHgWQH1zKJjUr%2F25vI0VaCU7UFFSdQ%3D%3D\"}]}\r\ncf-ray: 9e7505aa18b43181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6452,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dfa388f96468298168e6f88e918f0e87","sha1":"7f28c89b4af532a6a0c8d9d28f188a820bf57b61","sha256":"66be3e6e8d86bdf05718393618396e58482a27f1bd9300e591cf63f3e312684a","sha512":"480a8d80614ffbdbccbb4eeb3a25537ad1bab633c77100151f75ff2afd1e484884b0096b6870a1247a6f500832b1e2ac8bb30e1fc2a3a84f4bcaf5a5e668ee8e","ssdeep":"192:T8cmV8CVXHi0XV9tnbTrJuHbN0HxzrTeR4yfSviyX3q55:T8cOd1HbbTrJQbN0Rz/VyfSayqP","tlshash":"a8d163bc1e8963f9b215e784c117c1c3bf7b0066561ece1e8381eec4acd51488c5188e","first_seen":"2026-04-05T02:11:56.357391Z","last_seen":"2026-04-05T02:11:56.357391Z","times_seen":1,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/686fcc42477da2f6520c959f_favicon.png","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:27.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /686fcc42477da2f6520c959f_favicon.png HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1564\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\netag: \"69cd95c0-61c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kst%2BqBQMYruMfE9o5RF45KKapJzJovUbUXc0wt3LUlnv0HixuJfzbMawcgb%2FPHJm1W9wdYheYt0LPCs2uu2ZpxVNiHUr7rXhMT%2F4yhOhvDmVbWUYi4Ik3uk4sAX4IxHnRA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9e7505b129313181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1564,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"1968d8423469e404194cc675e1554cc0","sha1":"d6e72377a7ef0068a39592cd67aa8460e4c99695","sha256":"70d18b0c67f76d6ae48ce4ede8cc68503a570f4842e3c80a6e36ba4fdae3b917","sha512":"1c5ddf1e24a583ddf656b706622ad3fe474e81cf532b03f179f44de20496d29800711e074bf219bc73b9d255f3c7fc301ba1e4d8556326b6a87daa859c340431","ssdeep":"","tlshash":"8f31ea8e0019cbb7a85e7515601387a9725b06ed421f0c1ac974d9350a5f0d6e033217","first_seen":"2025-09-17T08:59:29.929438Z","last_seen":"2026-04-05T02:11:56.35828Z","times_seen":2,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/sparkline-2.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /sparkline-2.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-1930\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5HV%2FXqxpusS0R4fBC2WdtdSqWqtFjn3zapQOBn7UmrmSxYedPHOwDClrJk%2FqCSa8MLTA3LymXXweZD9SBkvcptRbGjFNnzjZmFYUKtZQgSlzPi6bProIWBjYWCJWqbBjQA%3D%3D\"}]}\r\ncf-ray: 9e7505a9f8913181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6448,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7282941f82a6cb69b82b563c610d156f","sha1":"a35570f16024156334144a970cd73a6b2800181e","sha256":"24851c92f2e45d36c67a4e5f31c8a33867d5bcc8d765a0a3f0db7e0441fabefa","sha512":"158e325265216b13f23729e457d37b5628d8a868f4a9780b6ada4ae04894e6eb9e7ed5beeefe4769a6ceed474c5b5faa7ec318e28844011dafe0f0c5c5250d9c","ssdeep":"192:Tfzwb/ugM7pTmu4coHMe3FiHj4nfF63V+lRlb:TfzmxCpThnoHMMFcMnN63V2P","tlshash":"e8d1b66c1ecd57e8f266ab84c45bd5c3ef36005a6e2ade4e83407ed4acd42888d50c9f","first_seen":"2026-04-05T02:11:56.359058Z","last_seen":"2026-04-05T02:11:56.359058Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/sparkline-14.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /sparkline-14.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-193a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WFhTKxQ3EQdHiy%2BaIW75WjrZOvJXnhC%2Fme2wsVltqD5inOzeXNNWJC4fVAy3bSAhgghz6bWWNnqGu%2FH6SOC8eZ8Wh9ZBlH3pga7Tx4GiWG0dhwZIyMISnkqjuLYfH4Rd8g%3D%3D\"}]}\r\ncf-ray: 9e7505a9f8973181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6458,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f1cadd5cddd09c6021c4cadfca88a6b1","sha1":"a612b0cf1a21bdf7e28e7c7097bdfda008e480c9","sha256":"4db9d7cbb184e5b34f114eef94f5deb5334bc9861ab92cbf263788c8945ecb1e","sha512":"007a47b733e21066434bd519b94e99051f231affb0dd1ca8efb4f81b8b115efa6a45ef5870548a1a7c561052a3ad0fca5438b1d6813828d94761175ebd884065","ssdeep":"192:THlHd8MvvZCgz227Uf+kwHYTP6F5EDgSW/qhZE0H:THlHd8MvvkgyQK+kAYTCF5EDgJ/qhZp","tlshash":"83d1626c2ec8a7f8b116ca99d45bc2d3be3710665d4bcd8ec745aec4acc53988c90c5e","first_seen":"2026-04-05T02:11:56.359897Z","last_seen":"2026-04-05T02:11:56.359897Z","times_seen":1,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/sparkline-21.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /sparkline-21.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-1a6c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yrDqevlDIP6eNn4Q%2Bb7ZBul1tp8lBtthe9CJ8%2B9vDr8OpYcU%2BDrKedjT%2B8UGkx5TTRRzeGiyiaKxbBkHnYF3wbTRJSK5dqF0YktvdFzzjwGNOsxyqVIyjFXl5vjrey%2FJmw%3D%3D\"}]}\r\ncf-ray: 9e7505aa08a93181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6764,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d0096c011ef53c920d29aa61883bc015","sha1":"e09969ad4f25b6d8dabdf0a9c749c03107db7cdb","sha256":"6c81447fa7f1c2905df35d021fad2b2d512bd79172b09f2ad4cb803776f721ba","sha512":"13dc0a8d2fd9ca5d670a414c28d88541d2452cc0a0cb654b550199cea96d3500073812cececb9e997cc6ec3fd59609cc605bdee41640fb2f7ae5e08154952342","ssdeep":"96:TaBd66Mff3VXuZ6MHD1FXiT+FitQxtqo1a74gMAjTEarZ1Bj0Xiuowit0Y:Tk1Mffs6MHpBiT+Lx/1a74ghQYEawi6Y","tlshash":"00d1b6f803b86af0a20ba3f8a582859d3b7610bcbbdd4ed4c6c47971d1561498c19c97","first_seen":"2026-04-05T02:11:56.360899Z","last_seen":"2026-04-05T02:11:56.360899Z","times_seen":1,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/css.css","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /css.css HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\netag: W/\"69cd95c0-7bc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B6x%2FMoWDKXyZxtCyiPGMAtp3oCA%2FcrxL7WCyBKUSMOmtw68KDjRuyqM8YsbSI0gzHEHBKVmlAhsXGV1WvcSuvgkLsjutxs5E8AGDdqW8UX1YXRSq9AZukoZGxh%2BKSxk6uA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9e7505a9e87d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1980,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"444c7df2a4d27a8da533596c4e98af39","sha1":"47a20e7b5cf02f8da7565707a252db1e72044eba","sha256":"e686f67309e5084f60ff27f2004319961099e7b07fe20395e639b668b63750a0","sha512":"382192d768584e2037f4fce7615e6853d061364f400502bd995a8e3bd2eb3ca909eefdff01fb5e4cbad70239ae14efbd4f4b5babfc43ee739d8911d0a9310247","ssdeep":"","tlshash":"4d419d50087eb50497a32cc122cd3e32df1eb280a4499d306ffe1458fd5ad69a3b278d","first_seen":"2025-09-17T08:59:29.941008Z","last_seen":"2026-04-05T02:11:56.36174Z","times_seen":2,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/6310e7dee49f0844798eed7e_icon%20solana.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /6310e7dee49f0844798eed7e_icon%20solana.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-6f7\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tah7tyjmwT2%2FEClTUmt7uk0nQKPY8WQFU4PxQze4OzHmvP9P5a2gbpks%2FSrHdNcx7XaVgCKpXNvvFZyFNIl91IE8zo2cU8JYoQsR7GrnChjS4SCU6T9H5VqNwQ1tLjyyTw%3D%3D\"}]}\r\ncf-ray: 9e7505a9e8823181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1783,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"affb3f1415aeb955847d8dd543dc0c76","sha1":"9c27a123404882e8a2e73ddd624445c20d010447","sha256":"9bebbf4a6f620ca6e44cb5a0eadda0ad95d883012f94c714f41e8b584c3ce6a1","sha512":"cb642dfbaea01ed47d1195ed3b761214e825a7d49ddf84cf8cbbac40490b7a03afe66455f496efa6572e2e0bea00aabe09e4fe74429f0fe8e983ad1694379137","ssdeep":"","tlshash":"31310c2ef39ebc13e208dbd8ee159635246700f77a82826287d1bf1a24302cd1a4d5e6","first_seen":"2025-09-17T08:59:29.970933Z","last_seen":"2026-04-05T02:11:56.362712Z","times_seen":2,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/sparkline-9.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /sparkline-9.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-1911\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZN2GuJbyalONZM4Zaw9RoMd828Q3uYfBnUQ4bTPcP3i4%2B3HyMoLv2wPmytnFqk7X1jXljRI4ZSfZqhkf5ENERiG3xLCRC2s%2FvxJRgAMwTF3QjUADTvGIOEGHGQ75vm5uFg%3D%3D\"}]}\r\ncf-ray: 9e7505a9e8863181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6417,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a9b1ba433369b4291a69f374044b85a9","sha1":"f377412bddf4ea54381452266857887a7b743d39","sha256":"0bd01471eaada2bef34b22de8315d5b638edca126ce9775b0fa3f0ba42424f0e","sha512":"c4805c8c88ad05314fea327624536575d0a43f765dda21ed922e8a3745e1a0a5f2388ee58bdee7d2114dad817fba4681ee1e31f20448b550b267a7ddbf6c73fd","ssdeep":"192:T7ztilsHd3l/rrCcUGmnr6KD6UYAgZActgOA:T/tt9ZrCcUGEr6c5YAgZActS","tlshash":"bcd162ac5ed987f572158399d51bc5cbaf3a00759a1b9e4e8744efc8acd12484c60ccf","first_seen":"2026-04-05T02:11:56.363672Z","last_seen":"2026-04-05T02:11:56.363672Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/sparkline-10.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /sparkline-10.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-183\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Itb02b9%2B7whCx5VAcCFZKyGcqm70TBY7Guz3JMbQ%2BTBYOk3M%2FmSAEgjbBCgXS2zXA70EKRiLXfbOotExuw8RZhTWbaEg7MACvQeceR2rJnJqaAzfsSy27MVZn3g8gVYb%2Fg%3D%3D\"}]}\r\ncf-ray: 9e7505a9e88d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":387,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b53d615ce93801ced53608ae41918fe0","sha1":"32e188296724cc84b5415e9fa42010ce341171a3","sha256":"7b18e078089ba5204c0018e9ef68007fc1dc56f28bed25a64cad5c4a239d0c95","sha512":"09a981f4e993c6ebff11ad8e44971eee28a0270be4d7ea7c7c5cead7d8b844f4e5910022c64c8818cdcd0517b550d46c05253f81545b4a787f62f27c2d5f4618","ssdeep":"","tlshash":"f8e0615c8644996290998251f27c69d4653b80c3d6ce119decc13535e0a47b76a3a2ed","first_seen":"2026-04-05T02:11:56.364558Z","last_seen":"2026-04-05T02:11:56.364558Z","times_seen":1,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/65fabdda55899f2912a9d202_Car.avif","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /65fabdda55899f2912a9d202_Car.avif HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 9682\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\netag: \"69cd95c0-25d2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9WY2lB8aM2q%2B6%2BarXmIqntppmfAnEZfCAzQx37Bl8mqZRJ%2BPdBiEMoJuvsAsrYZQALMO0Dkh6K3QMBWFqbldDJI9XI44npvLtg5a2MgImouMd58JX7QqlUwLHUecLC83yQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7505aa18b63181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9682,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"9711f08485918cf0bd1fd2a8b6d75f7f","sha1":"155074443d6dd2d622d8fe01ec31f4d43c4704e5","sha256":"22c52482f37c9fdd7847cc6e806d381c8d7bb6a009a1a07228aa5375f0e4654a","sha512":"050abcb4474bcc836c0e97d651db305ac0c07ac6196e64870bfa99b7c44965d73c5265a6621f66b7283b2b8d0ddf601f550a89173035e7c83292fadd4c650f7c","ssdeep":"192:rGktyW62/u/Nr7lFUD/wGElyaqkRNatxhk4m+OqAQdiwhgng5iM:rwu2F73UDfEE2N0k4m11wMg5iM","tlshash":"c112bf11e3d0db90fb8a5275cdd3f28362b073235762f40d955076a9c4799b83f4ad89","first_seen":"2025-09-17T08:59:29.939559Z","last_seen":"2026-04-05T02:11:56.365757Z","times_seen":2,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/sparkline-8.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /sparkline-8.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-1926\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zz2WU1d0iI8JFpJHC1f3O%2BcBxv9foZ0zTn%2F5Qi6hjNA8cUsVBv56VZo41Ts2NQ28xHoPMmCD2xEtdEiWfMUJobrjdHs9OLVeSrTFFwG4Dn1APcsS0hUviDjD4hqBiQ2M6A%3D%3D\"}]}\r\ncf-ray: 9e7505a9e8893181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6438,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c2728035b2dcad18dd5eed4ec1543a4f","sha1":"adfa604ba0add0293a292498094a54e92952e666","sha256":"0824ae2c3421cdfc656917867e08fabe28a7531e02547013f0174c1b9390171b","sha512":"ad584389995e173cc96fb943c29b8ad92ef93fe3dd612f8b9f9fdc59ade6a81fccf87db4ed4aa08fd454e34224d73fc51bfba5dd89b3141042fb921a9a1a7281","ssdeep":"192:TGOoLT08EXOPIZtKaR2+TJ1ExfdqSzws2NU91HMNSDlpn:TGOoHyXOgtKaI+d6hL2NUvHMNSppn","tlshash":"25d1a4ac1dcd53f5b1559b99c417c1c3ae3a0479aa1ace0f4384fdd4ace12888ca489f","first_seen":"2026-04-05T02:11:56.367161Z","last_seen":"2026-04-05T02:11:56.367161Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/65eb49ad16d6b6a3d81393c5_ABCMarfa-Light-Trial.otf","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /65eb49ad16d6b6a3d81393c5_ABCMarfa-Light-Trial.otf HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/drift-v2-staging.webflow.shared.9dc2af22c.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 127728\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\netag: \"69cd95c0-1f2f0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EqjHiQ7wpY63ruP6VQ21b9kXRBgkqCl%2F2oE%2Fya5zSOup04dlOMniuzrW6iX8SOnqsHixMEcYhsbfJYyuOtht%2F7Syknjc4XE3Ov%2BIfhoNJs16aBLJ8WKf%2BcvCoGvaECFneA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7505acc8e73181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127728,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"4bcc240e69b23cc08e853ca05d4f6e60","sha1":"501fb62cc9d06233b2ea6b65fcd534f141bf8a51","sha256":"323122b76fe20311b9e5214c0b1fe5462b16e580a62ebae15ce56f24bdd14499","sha512":"5378ef34c9f1b7e921a45616a2f9ccb578035a11631482ff213780f614b1709c0427ee612c07a1d04edff33c8bc059b0e6d7c4e43caadeb3d102b4d728cfc3f0","ssdeep":"3072:GM2IpR2gXn4Ng9zcQnnjSIGTkFJmyzHlW:GMtR5X4Ng9ouakFJmyc","tlshash":"fbc3ae217b93c701d6369f358ea2f3716b25b637af23870b32b996005dc1aa02f7d245","first_seen":"2025-09-17T08:59:29.909195Z","last_seen":"2026-04-05T02:11:56.372262Z","times_seen":2,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/68dcce83b291a6b98e887c56_bg-without-car-small.avif","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /68dcce83b291a6b98e887c56_bg-without-car-small.avif HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 158756\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\netag: \"69cd95c0-26c24\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hNCCjJEBeLFqhoujmnHLAZsXne9Z089lD%2BG5loOVrDZyFpSmowPA9usdFt779LIRaqb6uScBobbzXoQQ8QDREBWcV%2ByomQzZIkHBQzXrstuAanvaBoePmREVwqmUe4ZaNA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7505a9e8813181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":158756,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"35fffdbef4cb24856916cda01709fc26","sha1":"3528e6be5462ca4f6a123fb69225e7bb8fa7db0c","sha256":"96770c368ec5485079b4c00f675cbbcd737fc802fdb6c4480af1d38c46b6701f","sha512":"cf028b2ed7a95c0701543a32b434682f93aedfd4bdc7e5f519866a6f02f70ecddef1fc7ea5da2d063a508c5e553ea1bd155b5dbd7e398ac952951f2f8e06c3eb","ssdeep":"3072:k8DF3l21UoqZNhn2fy9urMN28ywxPmwSvZ3UcV1tOhJE7CH0qZ:XDS15EN52fy9um2ax43vxeEPS","tlshash":"27f322fdb7e199cd91bcc4b4d61598ba3d908932fda7a622a0c31b54840a731fd60fd8","first_seen":"2026-04-05T02:11:56.37402Z","last_seen":"2026-04-05T02:11:56.37402Z","times_seen":1,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/65774a0ad41359b0f6e268e7_Size=16px,%20Full%20color_=True,%20Coin=JTO,%20Dark_=Default.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /65774a0ad41359b0f6e268e7_Size=16px,%20Full%20color_=True,%20Coin=JTO,%20Dark_=Default.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-2390\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jamb87ZYrMR%2FXQRpFJXSgQvNvpKrFX9voNwt6GQgmeZIxMSD%2FWtkv2OPJfKzQ%2Bcxnc27Tebw7JN7h9W0C%2BM7NjEEEfkt90m1UMOD6G0wgZdBmXpxwc6otrK0xDf9qzBTJw%3D%3D\"}]}\r\ncf-ray: 9e7505a9f88e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9104,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eed4b671ce43e145907944e3c8ec6ced","sha1":"e3e6d456ffcfa49979fc40b5b1687ae27a9aaada","sha256":"f9ab3abc2e94a2978b8400112f0ba46038e6742ebe40552e56d4af595a3962f7","sha512":"953047799440ea42c81c693a7f68efc172709a334c523efbeafe75f697de1a1208d98925cd64655de17d30d8d0b31855ab780bfbef4f5483273a12a8f65ef4ff","ssdeep":"192:CPCztlwYmhqxXg2yGI7oqoXY/5Blgur2RIcOtgeFAXIaRQBBjvE:J0YvJg2yvcc3nTtgeFAHmc","tlshash":"9c12c9d4a2ccd2c46906db70d8220262ea5f38f1bfd1d69683c4def498552e9cfc4c94","first_seen":"2025-09-17T08:59:29.944453Z","last_seen":"2026-04-05T02:11:56.376103Z","times_seen":3,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/65fabdda952eda84ad22a68d_Right%20Buildings.avif","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /65fabdda952eda84ad22a68d_Right%20Buildings.avif HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:28 GMT\r\ncontent-type: image/avif\r\ncontent-length: 25074\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\netag: \"69cd95c0-61f2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SNdb02fLdpHuOuvb1XM6xc6fLEoSvce82OaDJva4435tV4ofSAUZhZuyMpToP16hnwXPvGNHUZbCEa2pLvwRnwtQ50O4I2ZaWu0aCsDaNha42kTLVen6p25ai%2BIACpKpyA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7505ad38f33181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25074,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"5a7473252e2216b03d42700206b75b58","sha1":"dee38e98817df56e61c38822df9c67b5ac319aff","sha256":"3132f9fa2e6db08d10345c9bd14ecbe9f249c88aaedaa6218b639a7bc19597bc","sha512":"3fd6c31a5ecef23649814f84ffc3ab7466e6b670736f728dce45793a86e62cfaa6f0385cb9f7b161a37c48bb003aa6770da4db344b960a56fab9af867ee3d67a","ssdeep":"384:rtNxpmdpcUKiRc7l9U+Xp8O6UY2pz0AlAv5kqrXAvuNsTJa9eKzsZoW4Vo/:LKpcvXJNp8LUYJvTiqsTJuzsZoJVg","tlshash":"ceb2d15212dcce50c2dc7338a3d8691123f1303c1859fc790e9596699fbb3a6fcae1a6","first_seen":"2025-09-17T08:59:29.871317Z","last_seen":"2026-04-05T02:11:56.377221Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1276,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/65fabddae5727eac088239e7_Rocket%20+%20Bloom.avif","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /65fabddae5727eac088239e7_Rocket%20+%20Bloom.avif HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:27 GMT\r\ncontent-type: image/avif\r\ncontent-length: 26484\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\netag: \"69cd95c0-6774\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Dl8KQubqdioLVcUIwP1ihNIS87h8MP7NzTUwWgvpE2dec3aL4l4FYT%2B3dssm8HxtZttDsMS%2Bzqf5MWldRmYKf6Ss0cYkW9FAF%2BH9lqSBnjJ9zlmCDarsVMcFw%2FZ%2FyKWjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7505ad48f43181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26484,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"18911e5e789af4d3bd0c9bc2771a516c","sha1":"059a6e27d1aca9862b75b21f71fe65606e5a4673","sha256":"219cdbb483b9cde7aa287bc6ac1f9dd65d0a5deae6dd8da5e3ab7a5d11a77cd7","sha512":"a5506930c4a0aab6d15c365d7723fa5bfd8de5067b5d4bd76d68e5bd830d1d6b9fe238ebee0f2d13f3cc8979498767726dc2f13fd41bd92de6141910efaf7a6b","ssdeep":"768:0MRMfWFZpAimXxtE/RdrEfz567dcarPBG:0MRMfWFZqiYPE/RZEfg7dTG","tlshash":"18c2e2daf96da143fd4ac67b82f71576217d12eb02708438360afda152f2a2dc45fc15","first_seen":"2025-09-17T08:59:29.802124Z","last_seen":"2026-04-05T02:11:56.378273Z","times_seen":2,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/sparkline-11.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /sparkline-11.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-195c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tbVYVHtyuUqCN2P0qKEoNw8BSKQVt1RpHja5SgThdpXX376cRh3K6XpPCKogII4Wd1wDCHwVJs%2BMx1N6RqCwdTb77DAofrwgvlIhbTPYskG5I7W%2B7HBkRCCKLAjCrIJo1w%3D%3D\"}]}\r\ncf-ray: 9e7505a9f88f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6492,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"89e4f9c76fdb63e338ae186b5bc2cf66","sha1":"654a90f8c1d738fea2399bcc2fe44f4d74887f71","sha256":"226c3173e328b22c8bd7b0a4bba84607e8eaa7dbd5d35c5a7dfd7d9969f13b1f","sha512":"c2795e99b5933e599758a8fea544a90914d5a4e687e9a6ae46ab642f0dbd9d0e5249bd49024590394019e136b5e5551c688c51212443cb9120101aad5255219e","ssdeep":"192:Tz2XwUWPsdnlimqIeEcmRgUhqvmt7vBWiC4xKgiS:Tz2XwUWPwlF5eRmyReJvBWiC4xKgf","tlshash":"cdd172bc1d9863f4b51497c48697c6c7bf7604daaa1bde0ec344eee49cd520c8c6488e","first_seen":"2026-04-05T02:11:56.379235Z","last_seen":"2026-04-05T02:11:56.379235Z","times_seen":1,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/65fabdda193a1f401a5672c4_BG.avif","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /65fabdda193a1f401a5672c4_BG.avif HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/drift-v2-staging.webflow.shared.9dc2af22c.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:27 GMT\r\ncontent-type: image/avif\r\ncontent-length: 16002\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\netag: \"69cd95c0-3e82\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mNmsFkKsGN73Nc%2Bb0vKdS7yJauV%2F4r0vni6cvvo0j1w9JvaJlbdFeqjLPuWYiKC0udCLPy06uk7f1ZsxFCiATYv%2BXF%2F8xX1YI9Wcjcr60jJ40rSeNEhRew0yP6P15acAxA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7505aca8de3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16002,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"e1ec51c9a025d68a43077926d2364cfa","sha1":"026ed366da501c08322c1658e8e73d931ae29130","sha256":"30b84b677fba6c1f7d8a9bf53c9ad9d410a55e04f5f414c247906fd11ec828f3","sha512":"aec01ac03cfd37ac42afeb538920d1ed60bd111a21cda5cc52552184dfb68f0647f7ad7cb0895220198021c21819c6d113adceb2d4a87f073785b012309f7dbc","ssdeep":"384:ro8oxfPyXp3MHWS4dBVBOfHSMt7/I3P0LwaIXPNApJ6aaj8:M8gfq5pdBXeNwf0kgJ6aaY","tlshash":"ad72d15c778a3009c93706398ff4a9d89216e9a2cf279681fe5f0e784440f71756f396","first_seen":"2025-09-17T08:59:29.935635Z","last_seen":"2026-04-05T02:11:56.380199Z","times_seen":2,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/6480e0e71984b2d81809e026_pepe2.avif","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /6480e0e71984b2d81809e026_pepe2.avif HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1705\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\netag: \"69cd95c0-6a9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qxVog35Iw%2BHt3M5ZHLuqpQRPbopDMfJrbxtJTyY4%2FY6LpIbjqdHiImTgoUAWNXd%2F9bqpgTZtOF7ybU94xUwlU%2B2dbrE7irnOMr%2BS%2BZMVyXGp4wu6HJwqwAs74Tz7G4JFHA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7505aa08a23181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1705,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"c407b5e7863cc2865424254b57e17641","sha1":"4b373c3ab85451605013e9063a68fcc8fe2dd011","sha256":"4ba50f1ee4df778de0788793007bdab8a15a2ee9b94459edd2eba6eddcef87c0","sha512":"186e72a1b030a52c8aadf094c9690e97e0f94c8b81897aa2a66f578cbd65f6b170f29fe7a2a6027601b28fda1fbb0c897081e183b931f18f3b2f14294f6f89d4","ssdeep":"","tlshash":"d131c619379c9938f5cc4374012891476f32dea70b8b63cb7d917a1889b82e5cea5a26","first_seen":"2025-09-17T08:59:29.950015Z","last_seen":"2026-04-05T02:11:56.381211Z","times_seen":2,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/6763fcc729d09ac7fe8fe8d5_primary_button.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /6763fcc729d09ac7fe8fe8d5_primary_button.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/drift-v2-staging.webflow.shared.9dc2af22c.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-1ad\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H64HwmED1G7Qm72IXzkVlMDQswb8GUgqlTpQCKLMjJjvAx%2BCobfiHt5rKG2vQfxTbHifVNIA39w4nHi11rw59L6hulKw%2BQvnVDk7Z3oY%2BQHbc0bY15UAXAScxm8rh5zfxQ%3D%3D\"}]}\r\ncf-ray: 9e7505aca8df3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":429,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1dcef0f25c1962aa88bfa7d363aab37e","sha1":"e72ce9dd959c89e1a858e8bd6c95a3332f9b7fc2","sha256":"7258216de589e09c7aef8ae89f2f5655bba017c968663a6e55ededf2cacf56a2","sha512":"ab3e957e83b34a8347788139fb2bcfd9143f59a30134570f45585809ee46e8aa2d439c9fb4e129994674c322e86d7088de9dabfbb0df8cb013d07c7e885c06e8","ssdeep":"","tlshash":"e8e05c3ae59adf3ad358c44cd114cc2b1558e16395848160e1c0ff3e30191c37c1a7e8","first_seen":"2025-09-17T08:59:29.975919Z","last_seen":"2026-04-05T02:11:56.382191Z","times_seen":2,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/sparkline-20.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /sparkline-20.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:26 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-1948\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7qBPEdsCDJZsgOvbe2CvFPPK6290fmwQKpZZQrKjmopZfAxfXjiNZd2OA%2B6uAswRDRAF2kOJRqGkKpgPvoo%2BXrLDG340cSf%2BrXeE1NwV2NTb01j7Do9DBQrWjyflPud6zQ%3D%3D\"}]}\r\ncf-ray: 9e7505aa08a73181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6472,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"860b7bfca5b197219b7b30dac81075d2","sha1":"6a01eb2742446ec5ddc4dad1ece4ea187ce70dd0","sha256":"dcacafbfb2146d698302c2595c7c6c5182c935da67a715a67502134b6f706fc2","sha512":"70ea8b2c5443d1a3be5e5a01f0425ace766e684d1166f47b5bb8cef1d74b8da0a7ce2b41ac1483d01217378b026194fb1e9804f392dff98fa25bec410184d7b4","ssdeep":"192:T4+TFdzo+98KF246Z9p8GPb+aoHye0ILNIvPH0D6tIlx1CRZy:T4+TFdfL2Z9p8GD+7Hye0iZDIIliZy","tlshash":"81d1a3bc2e885bf4b544e795d11bc4c3bf7a1061aa1f9e0e8784fed4adc12448c988de","first_seen":"2026-04-05T02:11:56.383208Z","last_seen":"2026-04-05T02:11:56.383208Z","times_seen":1,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drift-safe.com/672cc89b0c5b95410b282c84_sol.svg","fqdn":"drift-safe.com","domain":"drift-safe.com","tld":"com"},"ip":{"addr":"104.21.78.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://drift-safe.com/","date":"2026-04-05T02:11:26.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drift-safe.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 21:07:52 GMT","end":"Tue, 30 Jun 2026 21:07:51 GMT"},"fingerprint":{"sha1":"54:F1:09:8F:9E:16:13:15:4A:73:EF:9F:13:EB:5C:ED:FD:0C:37:8D","sha256":"CF:B3:93:EA:C8:2A:0A:FF:24:24:CA:28:E1:CB:CB:85:A5:41:D6:D7:A6:0D:50:D1:26:57:CD:37:57:6E:22:08"}}},"request":{"raw":"GET /672cc89b0c5b95410b282c84_sol.svg HTTP/1.1\r\nHost: drift-safe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drift-safe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 05 Apr 2026 02:11:27 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 01 Apr 2026 22:01:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69cd95c0-99a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j8bAfxbSSLdvenLV5qeh%2FpIF27R4ObPLYqmeJBtgeUiLPGNpmG9r1ohy5RwKMixgEZYMsSv3bs5q1LLTyTYDf5fkgyvG%2BJ7DFA0tA9HnIVTUyakR8NFuMNtRZ42dtprYDw%3D%3D\"}]}\r\ncf-ray: 9e7505ad38f03181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2458,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"db786c13afaf3212a036715707afb1b9","sha1":"ac328c33077d9b53f90ce57f313603f80711fb17","sha256":"e62176c3a1c7522e41524617d82114a5a09fd113760f0684d3091e23ad8cc12a","sha512":"f1801e9f181f7f5883a375d05d0d743630153cb0c63adcc0ca035ff4fd9a35b2d52f4b88f186b90dded1be0d000a4387e00aefe42ba3275aa2e57debe46751e6","ssdeep":"","tlshash":"2c5141f722e47994c40bdf66e417ee2220ef68fdbd914387c1419a96ed402ca8e2dc95","first_seen":"2025-09-17T08:59:29.885494Z","last_seen":"2026-04-05T02:11:56.384736Z","times_seen":2,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"drift-safe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}