{"report_id":"78990e12-baf0-4121-8b95-0b508516ac27","version":6,"status":"done","tags":[],"date":"2026-01-12T11:27:24Z","url":{"schema":"https","addr":"www.wallet-safepal.com/wallet","fqdn":"www.wallet-safepal.com","domain":"wallet-safepal.com","tld":"com"},"ip":{"addr":"34.120.137.41","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.wallet-safepal.com/wallet","fqdn":"www.wallet-safepal.com","domain":"wallet-safepal.com","tld":"com"},"title":"Secure Your Digital Assets with SafePal Wallet | safepal","dom":{"size":119702,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (59093)","md5":"e9a9e1ea941244d998595433185abe91","sha1":"765ed8c3b626e1d8d261ac9d1603e47ce71d4f27","sha256":"b79e7db8787b77c21361fb5d543bdc86a0c219e5cea1f16e49b9682b2085c8e6","sha512":"99945c3a824b20e75f9ce38e49582d7dacece9a5c9483f064600075dbec83c913e93c2652ae5d362f50e47e77b6a295fdd0ae3470055a5c094108b88f0273955","ssdeep":"1536:b59UwMWvverbk+eYBWtURBiaDdpdDvvJgtmtY/xFopE6U:b592eYn0aDdplTyFv6U","tlshash":"a4c36017d9f30216262fbea0e071bb0870a3f71f86a51bd4593182b157e7e6d307ba94","dom_hash":"domhash87a97dc86b1110c835de8f9a6c3e9292","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.wallet-safepal.com/wallet","fqdn":"www.wallet-safepal.com","domain":"wallet-safepal.com","tld":"com"},"ip":{"addr":"34.120.137.41","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-16T11:27:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13","referer":"www.bing.com","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"www.wallet-safepal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"www.wallet-safepal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.wallet-safepal.com","ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":20,"request_count":10,"received_data":1293875,"sent_data":5401,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Hostinger Website Builder","description":"Hostinger Website Builder is a web-based platform that allows users to create and design websites without needing to write code or have extensive technical knowledge.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Page builders"]}]},{"fqdn":"cdn.zyrosite.com","ip":{"addr":"104.18.43.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":566197,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":6,"received_data":101476,"sent_data":3666,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"assets.zyrosite.com","ip":{"addr":"104.18.43.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":521478,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":11,"received_data":369415,"sent_data":7914,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.wallet-safepal.com/_astro-1766951797189/scrollToSection.CGzsTRI9.js","fqdn":"www.wallet-safepal.com","domain":"wallet-safepal.com","tld":"com"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"a098334e6a0c8e9aca6de5de83542e27","sha1":"0526ab13c156476daead71ffef6e6fed46913763","sha256":"70882c3f45494d8ae601e7b953e18e548f67096d6db11acd7aaceef1241d69ff","sha512":"b9dff9746719a4696ae70253457c6056c97d5ecdb9db7a540e68e7d36e9a187a8d0c94a24fc939451f2dc86c373e0ef38176d9bd60b36f76c38bfd4b983f89d0","ssdeep":"384:r8ww1NS3/MCZHYuMGWmhSWnaUPEopFRpyX2FlCWBmjpvGX0fJX5yga:r9w1cvvZHYLmhSC/XpFiX2ycmkX0fh5I","tlshash":"e662f6887083363213ab0aeae1f68a01f5381459b84b84d4f06dad5b7db385511fbfbc","size":14778,"data":"","first_seen":"2025-11-27T01:47:00.82244Z","last_seen":"2026-07-22T07:38:33.24546Z","times_seen":235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallet-safepal.com/_astro-1766951797189/Page.CXqHbBxy.js","fqdn":"www.wallet-safepal.com","domain":"wallet-safepal.com","tld":"com"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"67d27a455cfed93c519d5091aa95653c","sha1":"f205c9e3db17321822e6b9446772478538619169","sha256":"d8c6b2bc7cd977d755af94290b3ef311f3e37d40773d1e27f52abfc8862a4c48","sha512":"8769b68e19aa70200f751f5d1c0bb00ade0e23ef2d9d9a7290da4f266c3b1d949da5384f0752534fead1d5a64925cbe282f87c62f73cbbc3be281bd667fe691f","ssdeep":"12288:fqvuWzRoEFo7go0DCBGXmvDhyB7K78j7Nm0TTC53VnlcXqdwmUPCwoIswqMo9UGl:yvuWzRoEFo7goTBGXmvDhX78j7Nm0TTs","tlshash":"a8f45cc5f0b9643a43b345a9546b0141b61d2f28f19cc8e0f1ead9bd26aac05637bf3d","size":757723,"data":"","first_seen":"2026-01-11T05:14:49.62709Z","last_seen":"2026-01-12T11:27:47.150263Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallet-safepal.com/wallet","fqdn":"www.wallet-safepal.com","domain":"wallet-safepal.com","tld":"com"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b162a6a07d9ba9a8c613770a3dc55296","sha1":"049dcbf8619f9bb2af536de7a3b70889648c86e5","sha256":"8b34aaab821b449e8da2733222b64d5b59596c49e867466a53d80a671b8fe801","sha512":"3484688f670e5790144e0cb8446b85972cd7c60ebffb29da981236b4b4f7de545a8e5749866af56b0e5faab2404ab2f8a1941223a8886fa5289679c759f2d697","ssdeep":"","tlshash":"81d05e48626c2711a09eb0dc85660eac1ebbc2533ed4c8bf0c8d9a0f8a6d00dcf5ca94","size":266,"data":"","first_seen":"2024-12-21T05:33:15.450859Z","last_seen":"2026-07-24T02:46:45.603682Z","times_seen":2665,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallet-safepal.com/wallet","fqdn":"www.wallet-safepal.com","domain":"wallet-safepal.com","tld":"com"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba0f4e77cb3d1968e8bb09e81cc6345e","sha1":"c3dabda4cfc7ed18627ba989f8ae8766b1ce4933","sha256":"7885d6bc09b192bdb9d4b2599239e210ae4b70f1773646a96c97a9a21c184487","sha512":"57baf1a1c836348e36fb6c38e649c142601110dd231faea9bc2a5c9c653c4b014dc4d02b3bbd7dad06a67eb2418bde568ca6f698086f9ce179718b5b1c56261a","ssdeep":"","tlshash":"f3c02bd612f36130f3ab40c7838f31c300207016027840d351014c70101c4494594e30","size":130,"data":"","first_seen":"2023-07-23T05:20:44Z","last_seen":"2026-07-24T07:12:35.27514Z","times_seen":10574,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallet-safepal.com/wallet","fqdn":"www.wallet-safepal.com","domain":"wallet-safepal.com","tld":"com"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"15505b2350e129b787d479f7507edee9","sha1":"09ccb3a84e7f25a30bf97594c9c98b6878fd4483","sha256":"53b6bbda82ae145cfc0fb1941cb035359d1c8b298798339cf53f5a543836ad65","sha512":"970991ac74c61bd2a25fe8a331be62b328d99d1f04b87a83cf50deda9d4d6b68a04403ba120796b1e2f9de04af78d640626fb95d2370907f4b626385f0562178","ssdeep":"","tlshash":"3a61947813111bb33ddda0a9dd286ec3dda51834859a887e784e5cf30658e4381bebb9","size":3462,"data":"","first_seen":"2025-06-11T22:43:11.360804Z","last_seen":"2026-07-24T07:12:35.275598Z","times_seen":12744,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallet-safepal.com/_astro-1766951797189/siteModulesConstants.BJBunYQ-.js","fqdn":"www.wallet-safepal.com","domain":"wallet-safepal.com","tld":"com"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"df1ca6542d7e5fd07ae7f175e54948ce","sha1":"027a883f3f367d802febe4648b76e3aed4d50d0c","sha256":"58ec4f2bb95f1a86a1891ee33273c6dbcc0ab91dd9640bf5dbbab79d670cf951","sha512":"a7ec5021b994c7b12614593f5430ee40363a6b2f8096d16b3de8c2fe9e79c7a8598744bb9866b92ee705822355ec8d4675a78f7f6d69eb0034935057480cfe14","ssdeep":"","tlshash":"4b61666de91017ff44021167a9bb91d093bc570799b021e17cbe885e46fb79e31d2a2c","size":3397,"data":"","first_seen":"2025-11-27T01:47:00.807539Z","last_seen":"2026-07-22T07:38:33.328004Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallet-safepal.com/_astro-1766951797189/addDocumentElements.x-ABAeJg.js","fqdn":"www.wallet-safepal.com","domain":"wallet-safepal.com","tld":"com"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"d43e0b615c43837ec91b086344a0d8e6","sha1":"d5eabca5c9a68431d204f8c4015a98ebab69e051","sha256":"38ba0fa98561eb694eb12e40697dcc12c962ad5345275c47bac6905cdd5d885f","sha512":"38d929043ebbde3393cf0d701e1143e0a470840b8ac943a01c2ab028cc4934114dabaea7fe2e6e753e8970df5a5642e23368e99a07154be0a2d9a02196285f64","ssdeep":"96:jAT1quusJN8OORNEjA8hnte6bov6tHTE0uIrmkS+U:jqwovhORNEjphdbRtHTE0uFk+","tlshash":"0791739ebe04fa3bd6ba40e12632d215b5132619b09694a0e1ed482e5902cc36c77ed6","size":4359,"data":"","first_seen":"2025-12-18T12:13:39.777713Z","last_seen":"2026-07-22T07:38:33.273784Z","times_seen":166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallet-safepal.com/_astro-1766951797189/_plugin-vue_export-helper.KrJQkJWK.js","fqdn":"www.wallet-safepal.com","domain":"wallet-safepal.com","tld":"com"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"cebb4d3d97d5f53568fc3f3d2365cc7a","sha1":"791bf3afc27e24ffb8925becf87dd9526db4fde9","sha256":"a84d2e43794ca6d4a278ff76005cf82be474b6147bf595446e4aa21b7e08154e","sha512":"4d611fed17ffafdbd0bcad17b11508bd9d8aaa50b2522fb78aa20cac3f11359e0ad7946e6590d1f7c9ded16fca30d2ae4ff72460ff33af4cbdd3513b95c4feb6","ssdeep":"1536:jkDDcEpXDT/Mdo5tW6sOl9rEKfPbt9o00yte:E7DrMdorW6sOTno00P","tlshash":"797318f83182b562a3f91ce640b70016f36e2859380e85e8b59daddf3d7640950abf7d","size":73916,"data":"","first_seen":"2025-09-07T00:11:26.255772Z","last_seen":"2026-07-22T07:38:33.251092Z","times_seen":997,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallet-safepal.com/wallet","fqdn":"www.wallet-safepal.com","domain":"wallet-safepal.com","tld":"com"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"091fcea2ce8db1aa7fe44a4051e96b41","sha1":"4d1b368bcbddf456742d0abacd23ee510e609158","sha256":"433585662f852c8c76ded9e6f52054e1a120c78c7c0ecb8048fd3b99faa897f7","sha512":"765886ace161a524d53d770197f9f99de2c574df18129c8f32c3d4805f4680e2bd3c538527c6ed7e053b462fd1482e2eae75fcdf545bbeb795feff24d9c77d7f","ssdeep":"","tlshash":"14c02b9512f3e130f2a741c5c3cf32430000725602f841d351055c70401cc8a55a4f30","size":130,"data":"","first_seen":"2023-07-22T04:09:49Z","last_seen":"2026-07-24T07:12:35.276114Z","times_seen":15351,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallet-safepal.com/_astro-1766951797189/Integrations.CopB9lKs.js","fqdn":"www.wallet-safepal.com","domain":"wallet-safepal.com","tld":"com"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0445a299de9d343d2ccc2aa168bc25f2","sha1":"a8ae592cf1eea835ce7350e95c3bb501d18f9e40","sha256":"726c42de2236d634a107fd50aa3ed8bba6d290e0fe431adfbd8ef287357b8be3","sha512":"1656bbdaa5b129bedbff4f872db1dc7b9fbc0114b03262e81c65aca2b3a8f19a0a52bcc081e9d6e99dabedc149a8858e3bfef0ec1f04261fdb43acd0c765ac26","ssdeep":"","tlshash":"c151b506273ef3fca140d6b695e3a4346b472d84af20c4b8d3f94c57d9104ad3a1a993","size":2635,"data":"","first_seen":"2025-09-07T00:11:26.274021Z","last_seen":"2026-07-22T07:38:33.292601Z","times_seen":997,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallet-safepal.com/_astro-1766951797189/ClientHead.DYt03131.js","fqdn":"www.wallet-safepal.com","domain":"wallet-safepal.com","tld":"com"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"125504dbd0c6b9c97d16624dd45e0ba2","sha1":"8428d5b4c120f45132e30c4d7d111cb703e44d1b","sha256":"f42da104599d54f473090763fd6cca5fb1e62e077fed6d079297300e9832e5f7","sha512":"54bc749becf012088e852af9b01ce50cbcda2d409a6293cdac5d357fc6b2ac0b939d41f4ce5777f235114dba70e9921e36b55156df6edb9586bd0069cf12fc9c","ssdeep":"","tlshash":"5b21618ef448f83917e90a48b7da1c1b930a2f4ec51d5890a26c57d52fe1d87902e39f","size":1420,"data":"","first_seen":"2025-12-18T12:13:39.782751Z","last_seen":"2026-07-22T07:38:33.287368Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallet-safepal.com/_astro-1766951797189/client.DI-5_30c.js","fqdn":"www.wallet-safepal.com","domain":"wallet-safepal.com","tld":"com"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1ea0e3ff29f678ac903b0ed038d22ca","sha1":"0da08fd56a991743aca8599a5a99890b044df7da","sha256":"2df4f84f2a81d7d1ebe6e51afad34e92448819623f86608d206e32e015c40bbc","sha512":"21f0829fbcdf0e2d4d464f40e92f495b71c7f1456557f332a37fa8d975d3c6a84c2778a5248df2ec75b79ce0303109e5fe101555be37f8a79c7c6c8dffdb766d","ssdeep":"","tlshash":"5341a8ecf090edb622f95dd0c6291011ba1e146a38bfa8e0f39d5d511274e8d426ef7e","size":2433,"data":"","first_seen":"2025-11-27T01:47:00.805665Z","last_seen":"2026-07-22T07:38:33.317611Z","times_seen":235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.wallet-safepal.com/_astro-1766951797189/Page.CXqHbBxy.js","fqdn":"www.wallet-safepal.com","domain":"wallet-safepal.com","tld":"com"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallet-safepal.com/wallet","date":"2026-01-12T11:27:02.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallet-safepal.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 18:21:29 GMT","end":"Sat, 28 Mar 2026 18:21:28 GMT"},"fingerprint":{"sha1":"06:47:FB:E1:82:64:B9:94:67:83:32:13:72:C6:FE:78:25:D2:33:A4","sha256":"66:77:88:40:BC:02:86:F1:46:78:B4:1B:35:A5:2B:B9:FB:67:E8:34:02:C3:D9:F6:66:0C:10:A2:99:62:28:5A"}}},"request":{"raw":"GET /_astro-1766951797189/Page.CXqHbBxy.js HTTP/1.1\r\nHost: www.wallet-safepal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallet-safepal.com/wallet\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 12 Jan 2026 11:27:02 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=2592000\r\nexpires: Wed, 11 Feb 2026 11:27:02 GMT\r\nlast-modified: Sun, 28 Dec 2025 19:56:56 GMT\r\netag: W/\"67d27a455cfed93c519d5091aa95653c\"\r\ncf-cache-status: HIT\r\nage: 1265275\r\nset-cookie: __cf_bm=bvsCTkYXdE4FM3zdpSylXz0AhoS.KOSNre8aJArRJCw-1768217222-1.0.1.1-DgwZAPYvK.1__K.k1nKlnysYUTyCvx6IPRD8wTqT_7DHLKcYI31XVGP6TF3LXOCm4lpneZ0QFdAIkurnvjvo4eDc7Pza_R_IkgsRZ_TsPCQ; path=/; expires=Mon, 12-Jan-26 11:57:02 GMT; domain=.zyro.com; HttpOnly\r\nvary: Accept-Encoding\r\ncf-ray: 9bcc4d690c6acdaa-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hostinger-datacenter: gcp-euw2\r\nx-hostinger-node: gcp-euw2-builder-edge3\r\ncontent-security-policy: frame-ancestors zyro.com *.zyro.com *.builder-preview.com *.zyro.space *.hostinger.com *.hostinger.io *.hostinger.in *.hostinger.co.uk\r\nlink: \u003chttps://assets.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://userapp.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.googleapis.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin, \u003chttps://cdn.zyrosite.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-powered-by: HostingerWebsiteBuilder\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":757723,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30088)","md5":"67d27a455cfed93c519d5091aa95653c","sha1":"f205c9e3db17321822e6b9446772478538619169","sha256":"d8c6b2bc7cd977d755af94290b3ef311f3e37d40773d1e27f52abfc8862a4c48","sha512":"8769b68e19aa70200f751f5d1c0bb00ade0e23ef2d9d9a7290da4f266c3b1d949da5384f0752534fead1d5a64925cbe282f87c62f73cbbc3be281bd667fe691f","ssdeep":"12288:fqvuWzRoEFo7go0DCBGXmvDhyB7K78j7Nm0TTC53VnlcXqdwmUPCwoIswqMo9UGl:yvuWzRoEFo7goTBGXmvDhX78j7Nm0TTs","tlshash":"a8f45cc5f0b9643a43b345a9546b0141b61d2f28f19cc8e0f1ead9bd26aac05637bf3d","first_seen":"2026-01-11T05:14:49.62709Z","last_seen":"2026-01-12T11:27:47.150263Z","times_seen":2,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"www.wallet-safepal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"www.wallet-safepal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.zyrosite.com/u1/google-fonts/font-file?family=Roboto:wght@400\u0026subset=latin\u0026display=swap","fqdn":"cdn.zyrosite.com","domain":"zyrosite.com","tld":"com"},"ip":{"addr":"104.18.43.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.wallet-safepal.com/wallet","date":"2026-01-12T11:27:02.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zyrosite.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:03:06 GMT","end":"Sat, 21 Mar 2026 17:03:05 GMT"},"fingerprint":{"sha1":"FE:0C:37:AD:68:33:E1:FE:94:E0:47:2E:A8:D5:51:78:07:61:43:6C","sha256":"51:1D:98:EE:3F:37:F8:87:A6:E7:71:74:C9:EC:E3:CE:44:1A:3A:50:D9:8B:21:3F:27:A2:06:B5:B2:75:C0:77"}}},"request":{"raw":"GET /u1/google-fonts/font-file?family=Roboto:wght@400\u0026subset=latin\u0026display=swap HTTP/1.1\r\nHost: cdn.zyrosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.wallet-safepal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.zyrosite.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 12 Jan 2026 11:27:02 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15148\r\ncf-ray: 9bcc4d68ea67120a-OSL\r\nx-correlation-id: DN5j8LuLsKxl-W9c0GOSo\r\nx-request-id: fbcee49151a0442666300dd44234feaf\r\naccess-control-allow-origin: *\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpires: Tue, 12 Jan 2027 11:27:02 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 18 Nov 2025 19:00:53 GMT\r\ncontent-disposition: attachment; filename=KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAr0klQmz24.woff2\r\netag: W/\"3b2c-An4HjmO/XQtP3m3kah3cNE4t1rk\"\r\nstrict-transport-security: max-age=2592000\r\nx-frame-options: sameorigin\r\nx-hostinger-datacenter: gcp\r\nx-hostinger-node: europe-west2\r\ncf-cache-status: HIT\r\nage: 108763\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=ub0mKb_qONjgGATgO9fOFHeqBs7vF3MaFJTLeM6nFGk-1768217222-1.0.1.1-hs..3iw_pI9ZfFSChfbVT_d1GHfsRgtJehdd9U7DlZRKhozuzcQly.hwWsm06jnwLl.hdqMm8ZXtl0_GL3UpOoa4CrwY2FPGKXW8lf6srQ4; path=/; expires=Mon, 12-Jan-26 11:57:02 GMT; domain=.zyrosite.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15148,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15148, version 1.0","md5":"1645ef0e68c3629802316a12c8dc36a9","sha1":"027e078e63bf5d0b4fde6de46a1ddc344e2dd6b9","sha256":"0b94e95b77c51260899e0381862d8bc5a48f23b973f41bf5cb89d43f8c2f4268","sha512":"0924582c979fe280525a0608602a5ee965863ba4a60cebc034e29b87403548e53ee3f6bfc4f719f9ed30344f929587f65197445fd8ab60fad99c0e8930b5c00f","ssdeep":"192:snjhUSNbqrGaUzKc7stlef9B4lEwKdG+CffAa/f68eWW2aGww+apA9FNDgsNodej:+tHxK4B4lEuYaDy2aGwZ0A9PP","tlshash":"1462d0b3eb8517b2ede841ff1a2b8790605e424ee1dd812028db70c4129c7e395b49cd","first_seen":"2025-01-17T22:31:26.641354Z","last_seen":"2026-07-24T01:17:20.636151Z","times_seen":998,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.zyrosite.com/u1/google-fonts/font-file?family=Roboto:wght@500\u0026subset=latin\u0026display=swap","fqdn":"cdn.zyrosite.com","domain":"zyrosite.com","tld":"com"},"ip":{"addr":"104.18.43.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.wallet-safepal.com/wallet","date":"2026-01-12T11:27:02.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zyrosite.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:03:06 GMT","end":"Sat, 21 Mar 2026 17:03:05 GMT"},"fingerprint":{"sha1":"FE:0C:37:AD:68:33:E1:FE:94:E0:47:2E:A8:D5:51:78:07:61:43:6C","sha256":"51:1D:98:EE:3F:37:F8:87:A6:E7:71:74:C9:EC:E3:CE:44:1A:3A:50:D9:8B:21:3F:27:A2:06:B5:B2:75:C0:77"}}},"request":{"raw":"GET /u1/google-fonts/font-file?family=Roboto:wght@500\u0026subset=latin\u0026display=swap HTTP/1.1\r\nHost: cdn.zyrosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.wallet-safepal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.zyrosite.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 12 Jan 2026 11:27:02 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15424\r\ncf-ray: 9bcc4d68ea89120a-OSL\r\nx-correlation-id: 2WJOMJ2T4tLRSX3aYl5XN\r\nx-request-id: db2d921835c5fbe0096870c665127cb6\r\naccess-control-allow-origin: *\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpires: Tue, 12 Jan 2027 11:27:02 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 18 Nov 2025 19:00:53 GMT\r\ncontent-disposition: attachment; filename=KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWub2bVmUiAr0klQmz24.woff2\r\netag: W/\"3c40-j4ZYA8EwezQ9tDOWa1+0yxJVxSo\"\r\nstrict-transport-security: max-age=2592000\r\nx-frame-options: sameorigin\r\nx-hostinger-datacenter: gcp\r\nx-hostinger-node: europe-west2\r\ncf-cache-status: HIT\r\nage: 108763\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=QlA81wcAA0lY4n0a9HAk_NB2r5vAdmcvL_t2yHE0vSg-1768217222-1.0.1.1-XSMZIMp3AP2HbozNl5i8cSp03Nj4rEk3pNFiMVjT0moURiBPqsWyu4EQrymDxuTF6IU0ZHBkPg6VG9q7V5ZJVudT0yGTtf5eTj_IkeOcuxE; path=/; expires=Mon, 12-Jan-26 11:57:02 GMT; domain=.zyrosite.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":15424,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15424, version 1.0","md5":"1c90741ab702dbf9e43c3b8aff677212","sha1":"8f865803c1307b343db433966b5fb4cb1255c52a","sha256":"534817f78f7493f2ba8a7a15d6b9b3635ff4fb98c944745a10a6f0f9ead5fa94","sha512":"524049a2f0c8cd2f7b565b3e81427de029dd23b9ddde4e894b25c6a6aa88899aa011f6957bd6c14655a085eef9e695ce197050d66d8b0a274d9bd10d68c81ff1","ssdeep":"384:DW0B58bidit7pn6SHINMVa9kQwoPcBeKsuZA5NwM:VB58biMtJh4Ca9kQwBeKsuZONwM","tlshash":"3e62c01785a0e09dd68a0db05e241d7deef89b089fe3d07242c0ef93a669d015ea1cf1","first_seen":"2025-02-04T14:10:41.623089Z","last_seen":"2026-07-22T19:42:12.943797Z","times_seen":323,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.zyrosite.com/lx0agckiwR8jMi3J/icon-lower-AE0ry6M552TX0axl.svg","fqdn":"assets.zyrosite.com","domain":"zyrosite.com","tld":"com"},"ip":{"addr":"104.18.43.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.wallet-safepal.com/wallet","date":"2026-01-12T11:27:02.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zyrosite.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:03:06 GMT","end":"Sat, 21 Mar 2026 17:03:05 GMT"},"fingerprint":{"sha1":"FE:0C:37:AD:68:33:E1:FE:94:E0:47:2E:A8:D5:51:78:07:61:43:6C","sha256":"51:1D:98:EE:3F:37:F8:87:A6:E7:71:74:C9:EC:E3:CE:44:1A:3A:50:D9:8B:21:3F:27:A2:06:B5:B2:75:C0:77"}}},"request":{"raw":"GET /lx0agckiwR8jMi3J/icon-lower-AE0ry6M552TX0axl.svg HTTP/1.1\r\nHost: assets.zyrosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallet-safepal.com/\r\nCookie: __cf_bm=Joaw20sgcVGgwf2qXdubBcteSC9sn1DMDLj5DmbSW28-1768217222-1.0.1.1-WWHMRMA0Qkh3EpoEh_ROS1kwthlPxwl4cTD01q2qdpFExwB988qHRRMpAkBw_tYEZbw4HCg43iNwT9HJjHy6HiAw2AF.Zkzq8nKdoMxgsQs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 12 Jan 2026 11:27:02 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: br\r\ncache-control: public, max-age=2592000\r\nexpires: Wed, 11 Feb 2026 11:27:02 GMT\r\nlast-modified: Tue, 23 Dec 2025 18:47:06 GMT\r\netag: W/\"0f808c13b8d9881d97682cda7cffaa7f\"\r\ncf-cache-status: HIT\r\nage: 108764\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 9bcc4d693b74120a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":216726,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0f808c13b8d9881d97682cda7cffaa7f","sha1":"30de8708ba905cd99feb4e778700f185d0d9b818","sha256":"1593365015b6b0cca35e013845df66849f8b416911930d6c89868512f859c047","sha512":"7431e3bb5aa2bb11b08a679ba9c43d18aedf85014e8f176b89224fe315f35dc9f48d56df65b7b0af9e81ea414a788f41193e9b53d8dc8a7d0a2182a3e05f82db","ssdeep":"768:rmLmTVhTgIgqEWY67CcbULpfk0fldHbBJtlGR+nfxMcuKfT3DNjiWy5gSUb8227w:qvIbEWknZbZoR+nfxDu0pib8b82M1+","tlshash":"5f242adc7ba8986acf34ec4dc58d96d9414fa11d4e0601deefc2690d3ef236add2814a","first_seen":"2025-06-30T13:55:53.936849Z","last_seen":"2026-01-12T11:27:47.152278Z","times_seen":3,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallet-safepal.com/_astro-1766951797189/_plugin-vue_export-helper.KrJQkJWK.js","fqdn":"www.wallet-safepal.com","domain":"wallet-safepal.com","tld":"com"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallet-safepal.com/wallet","date":"2026-01-12T11:27:02.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallet-safepal.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 18:21:29 GMT","end":"Sat, 28 Mar 2026 18:21:28 GMT"},"fingerprint":{"sha1":"06:47:FB:E1:82:64:B9:94:67:83:32:13:72:C6:FE:78:25:D2:33:A4","sha256":"66:77:88:40:BC:02:86:F1:46:78:B4:1B:35:A5:2B:B9:FB:67:E8:34:02:C3:D9:F6:66:0C:10:A2:99:62:28:5A"}}},"request":{"raw":"GET /_astro-1766951797189/_plugin-vue_export-helper.KrJQkJWK.js HTTP/1.1\r\nHost: www.wallet-safepal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallet-safepal.com/_astro-1766951797189/ClientHead.DYt03131.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 12 Jan 2026 11:27:02 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=2592000\r\nexpires: Wed, 11 Feb 2026 11:27:02 GMT\r\nlast-modified: Sun, 28 Dec 2025 19:56:56 GMT\r\netag: W/\"cebb4d3d97d5f53568fc3f3d2365cc7a\"\r\ncf-cache-status: HIT\r\nage: 1265275\r\nset-cookie: __cf_bm=ZX8oOq4SR6x_Fc_CORIyr7tJhizl4U4vHM80rgihm4w-1768217222-1.0.1.1-S5uIKSSd7pJHGs7MOA5Kz569m9eZEvwTpzCC5vqJZIcnYKe2N_0cHQpydvQFsg6WrD8XnwgVPZCWMBlHPD_W0AtGdhPeP7YgKtjTi0RtoVY; path=/; expires=Mon, 12-Jan-26 11:57:02 GMT; domain=.zyro.com; HttpOnly\r\nvary: Accept-Encoding\r\ncf-ray: 9bcc4d69b9be001c-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hostinger-datacenter: gcp-euw2\r\nx-hostinger-node: gcp-euw2-builder-edge3\r\ncontent-security-policy: frame-ancestors zyro.com *.zyro.com *.builder-preview.com *.zyro.space *.hostinger.com *.hostinger.io *.hostinger.in *.hostinger.co.uk\r\nlink: \u003chttps://assets.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://userapp.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.googleapis.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin, \u003chttps://cdn.zyrosite.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-powered-by: HostingerWebsiteBuilder\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73916,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (33592)","md5":"cebb4d3d97d5f53568fc3f3d2365cc7a","sha1":"791bf3afc27e24ffb8925becf87dd9526db4fde9","sha256":"a84d2e43794ca6d4a278ff76005cf82be474b6147bf595446e4aa21b7e08154e","sha512":"4d611fed17ffafdbd0bcad17b11508bd9d8aaa50b2522fb78aa20cac3f11359e0ad7946e6590d1f7c9ded16fca30d2ae4ff72460ff33af4cbdd3513b95c4feb6","ssdeep":"1536:jkDDcEpXDT/Mdo5tW6sOl9rEKfPbt9o00yte:E7DrMdorW6sOTno00P","tlshash":"797318f83182b562a3f91ce640b70016f36e2859380e85e8b59daddf3d7640950abf7d","first_seen":"2025-09-07T00:11:26.255772Z","last_seen":"2026-07-22T07:38:33.251092Z","times_seen":997,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"www.wallet-safepal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"www.wallet-safepal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallet-safepal.com/_astro-1766951797189/addDocumentElements.x-ABAeJg.js","fqdn":"www.wallet-safepal.com","domain":"wallet-safepal.com","tld":"com"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallet-safepal.com/wallet","date":"2026-01-12T11:27:02.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallet-safepal.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 18:21:29 GMT","end":"Sat, 28 Mar 2026 18:21:28 GMT"},"fingerprint":{"sha1":"06:47:FB:E1:82:64:B9:94:67:83:32:13:72:C6:FE:78:25:D2:33:A4","sha256":"66:77:88:40:BC:02:86:F1:46:78:B4:1B:35:A5:2B:B9:FB:67:E8:34:02:C3:D9:F6:66:0C:10:A2:99:62:28:5A"}}},"request":{"raw":"GET /_astro-1766951797189/addDocumentElements.x-ABAeJg.js HTTP/1.1\r\nHost: www.wallet-safepal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallet-safepal.com/_astro-1766951797189/ClientHead.DYt03131.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 12 Jan 2026 11:27:02 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=2592000\r\nexpires: Wed, 11 Feb 2026 11:27:02 GMT\r\nlast-modified: Sun, 28 Dec 2025 19:56:56 GMT\r\netag: W/\"d43e0b615c43837ec91b086344a0d8e6\"\r\ncf-cache-status: HIT\r\nage: 110181\r\nset-cookie: __cf_bm=hGr8IC.NEV9upzfEPQRB4GsNz3TJtuuhOGIwUWNOl_Y-1768217222-1.0.1.1-9QuLY22gi633u0KiUKNnK11AqJIfMIabZXVRkrAWOSxtKb0DHMUFttzDb0mdWBzyqSxdXeS2XE_YEjiZNfvRuao0cfq37WnBVsGZpFLId08; path=/; expires=Mon, 12-Jan-26 11:57:02 GMT; domain=.zyro.com; HttpOnly\r\nvary: Accept-Encoding\r\ncf-ray: 9bcc4d69b970651e-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hostinger-datacenter: gcp-euw2\r\nx-hostinger-node: gcp-euw2-builder-edge3\r\ncontent-security-policy: frame-ancestors zyro.com *.zyro.com *.builder-preview.com *.zyro.space *.hostinger.com *.hostinger.io *.hostinger.in *.hostinger.co.uk\r\nlink: \u003chttps://assets.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://userapp.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.googleapis.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin, \u003chttps://cdn.zyrosite.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-powered-by: HostingerWebsiteBuilder\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4359,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1450)","md5":"d43e0b615c43837ec91b086344a0d8e6","sha1":"d5eabca5c9a68431d204f8c4015a98ebab69e051","sha256":"38ba0fa98561eb694eb12e40697dcc12c962ad5345275c47bac6905cdd5d885f","sha512":"38d929043ebbde3393cf0d701e1143e0a470840b8ac943a01c2ab028cc4934114dabaea7fe2e6e753e8970df5a5642e23368e99a07154be0a2d9a02196285f64","ssdeep":"96:jAT1quusJN8OORNEjA8hnte6bov6tHTE0uIrmkS+U:jqwovhORNEjphdbRtHTE0uFk+","tlshash":"0791739ebe04fa3bd6ba40e12632d215b5132619b09694a0e1ed482e5902cc36c77ed6","first_seen":"2025-12-18T12:13:39.777713Z","last_seen":"2026-07-22T07:38:33.273784Z","times_seen":166,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"www.wallet-safepal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"www.wallet-safepal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallet-safepal.com/_astro-1766951797189/scrollToSection.CGzsTRI9.js","fqdn":"www.wallet-safepal.com","domain":"wallet-safepal.com","tld":"com"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallet-safepal.com/wallet","date":"2026-01-12T11:27:02.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallet-safepal.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 18:21:29 GMT","end":"Sat, 28 Mar 2026 18:21:28 GMT"},"fingerprint":{"sha1":"06:47:FB:E1:82:64:B9:94:67:83:32:13:72:C6:FE:78:25:D2:33:A4","sha256":"66:77:88:40:BC:02:86:F1:46:78:B4:1B:35:A5:2B:B9:FB:67:E8:34:02:C3:D9:F6:66:0C:10:A2:99:62:28:5A"}}},"request":{"raw":"GET /_astro-1766951797189/scrollToSection.CGzsTRI9.js HTTP/1.1\r\nHost: www.wallet-safepal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallet-safepal.com/_astro-1766951797189/client.DI-5_30c.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 12 Jan 2026 11:27:02 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=2592000\r\nexpires: Wed, 11 Feb 2026 11:27:02 GMT\r\nlast-modified: Sun, 28 Dec 2025 19:56:56 GMT\r\netag: W/\"a098334e6a0c8e9aca6de5de83542e27\"\r\ncf-cache-status: HIT\r\nage: 1265275\r\nset-cookie: __cf_bm=OEVocJh0ds84HkICm24mPNyRDvvsY.LSOGGhbamSeeg-1768217222-1.0.1.1-uBQeY.pCLSQi3Y5em8_7Yj0_T5VcwsKEYigKMT348ezimJ9e36ox0DrcPuwThtXbxJAWNem607l5gJv.5wdexyK8ET9eR61Kn3DNn9Bu1GI; path=/; expires=Mon, 12-Jan-26 11:57:02 GMT; domain=.zyro.com; HttpOnly\r\nvary: Accept-Encoding\r\ncf-ray: 9bcc4d69bfc4edf6-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hostinger-datacenter: gcp-euw2\r\nx-hostinger-node: gcp-euw2-builder-edge3\r\ncontent-security-policy: frame-ancestors zyro.com *.zyro.com *.builder-preview.com *.zyro.space *.hostinger.com *.hostinger.io *.hostinger.in *.hostinger.co.uk\r\nlink: \u003chttps://assets.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://userapp.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.googleapis.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin, \u003chttps://cdn.zyrosite.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-powered-by: HostingerWebsiteBuilder\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14778,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14221)","md5":"a098334e6a0c8e9aca6de5de83542e27","sha1":"0526ab13c156476daead71ffef6e6fed46913763","sha256":"70882c3f45494d8ae601e7b953e18e548f67096d6db11acd7aaceef1241d69ff","sha512":"b9dff9746719a4696ae70253457c6056c97d5ecdb9db7a540e68e7d36e9a187a8d0c94a24fc939451f2dc86c373e0ef38176d9bd60b36f76c38bfd4b983f89d0","ssdeep":"384:r8ww1NS3/MCZHYuMGWmhSWnaUPEopFRpyX2FlCWBmjpvGX0fJX5yga:r9w1cvvZHYLmhSC/XpFiX2ycmkX0fh5I","tlshash":"e662f6887083363213ab0aeae1f68a01f5381459b84b84d4f06dad5b7db385511fbfbc","first_seen":"2025-11-27T01:47:00.82244Z","last_seen":"2026-07-22T07:38:33.24546Z","times_seen":235,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"www.wallet-safepal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"www.wallet-safepal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallet-safepal.com/wallet","fqdn":"www.wallet-safepal.com","domain":"wallet-safepal.com","tld":"com"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-12T11:27:01.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallet-safepal.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 18:21:29 GMT","end":"Sat, 28 Mar 2026 18:21:28 GMT"},"fingerprint":{"sha1":"06:47:FB:E1:82:64:B9:94:67:83:32:13:72:C6:FE:78:25:D2:33:A4","sha256":"66:77:88:40:BC:02:86:F1:46:78:B4:1B:35:A5:2B:B9:FB:67:E8:34:02:C3:D9:F6:66:0C:10:A2:99:62:28:5A"}}},"request":{"raw":"GET /wallet HTTP/1.1\r\nHost: www.wallet-safepal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 12 Jan 2026 11:27:02 GMT\r\ncontent-type: text/html\r\ncontent-encoding: gzip\r\ncache-control: max-age=0, no-store\r\nexpires: Sat, 10 Jan 2026 18:31:44 GMT\r\nlast-modified: Sun, 28 Dec 2025 19:56:53 GMT\r\ncf-cache-status: HIT\r\nage: 147318\r\nset-cookie: __cf_bm=Vxuugg3ygYj8zJDsDSKn4R0aeOpz.3lDANznIQEj1ls-1768217222-1.0.1.1-dWHaAE8EhP28V16CHMqVTIJAU6e_5rVUWbUSiicXxR.C5Vk2OkFzn.lRNPGa7TfZ11jJiGnBz4.vu.S43WrpEVNu5yFLGBMZPYRXZnyHJFY; path=/; expires=Mon, 12-Jan-26 11:57:02 GMT; domain=.zyro.com; HttpOnly\r\nvary: Accept-Encoding\r\ncf-ray: 9bcc4d664d9a20c8-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hostinger-datacenter: gcp-euw2\r\nx-hostinger-node: gcp-euw2-builder-edge3\r\ncontent-security-policy: frame-ancestors zyro.com *.zyro.com *.builder-preview.com *.zyro.space *.hostinger.com *.hostinger.io *.hostinger.in *.hostinger.co.uk\r\nlink: \u003chttps://assets.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://userapp.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.googleapis.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin, \u003chttps://cdn.zyrosite.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-powered-by: HostingerWebsiteBuilder\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Hostinger Website Builder","description":"Hostinger Website Builder is a web-based platform that allows users to create and design websites without needing to write code or have extensive technical knowledge.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Page builders"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":116006,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (59077)","md5":"344fa33ac689916356d5d1e724a66bb1","sha1":"9dbd790af77642aa64c9dbd7e86f2eacce237412","sha256":"8d273256d64de70825d001daf56d738be5374c1fe081d7d3050cbf79c5ca39b2","sha512":"19c5c2cc0e2f6b7466c145a1e42bbf2f2451ca05e14e79f3f64f0745d73288f8f1d899635201af20a038fe01e4530e98d216a3903d02d085e145e3fde5c2c962","ssdeep":"1536:B59UwVWvvurbk+TlCqeheufajEpsovvCa4DWY743h/I:B59XxlN0ajEpvF93y","tlshash":"e6b36017d9f30216262fbea0e171b70870a3f71f86b51bc4593082b227e796d307ba94","first_seen":"2026-01-12T11:27:47.155039Z","last_seen":"2026-01-12T11:27:47.155039Z","times_seen":1,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":167,"dns":66,"connect":28,"send":0,"wait":84,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"www.wallet-safepal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"www.wallet-safepal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.zyrosite.com/cdn-cgi/image/format=auto,w=375,h=385,fit=crop/lx0agckiwR8jMi3J/multiple_security_designs-mxBX5D085JTVjv1z.webp","fqdn":"assets.zyrosite.com","domain":"zyrosite.com","tld":"com"},"ip":{"addr":"104.18.43.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.wallet-safepal.com/wallet","date":"2026-01-12T11:27:02.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zyrosite.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:03:06 GMT","end":"Sat, 21 Mar 2026 17:03:05 GMT"},"fingerprint":{"sha1":"FE:0C:37:AD:68:33:E1:FE:94:E0:47:2E:A8:D5:51:78:07:61:43:6C","sha256":"51:1D:98:EE:3F:37:F8:87:A6:E7:71:74:C9:EC:E3:CE:44:1A:3A:50:D9:8B:21:3F:27:A2:06:B5:B2:75:C0:77"}}},"request":{"raw":"GET /cdn-cgi/image/format=auto,w=375,h=385,fit=crop/lx0agckiwR8jMi3J/multiple_security_designs-mxBX5D085JTVjv1z.webp HTTP/1.1\r\nHost: assets.zyrosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallet-safepal.com/\r\nCookie: __cf_bm=Joaw20sgcVGgwf2qXdubBcteSC9sn1DMDLj5DmbSW28-1768217222-1.0.1.1-WWHMRMA0Qkh3EpoEh_ROS1kwthlPxwl4cTD01q2qdpFExwB988qHRRMpAkBw_tYEZbw4HCg43iNwT9HJjHy6HiAw2AF.Zkzq8nKdoMxgsQs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 12 Jan 2026 11:27:02 GMT\r\ncontent-type: image/avif\r\ncontent-length: 20901\r\nserver: cloudflare\r\ncf-ray: 9bcc4d693b71120a-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\netag: \"cfCnzEHTbsYw753KUwGLSNJmZVo7XdLoKQLTpdFb-tDQ:0f0d3c92b0b865211271da75f46ea2d8\"\r\nlast-modified: Tue, 23 Dec 2025 18:47:06 GMT\r\nvary: Accept, Accept-Encoding\r\ncf-resized: internal=ok/h q=0 n=13+66 c=0+0 v=2026.1.2 l=20901 f=false wv=2025.11.4\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20901,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"92d31b6f396e8a5df0826b48090f86da","sha1":"d3064c46e6e5451d28e7c516b7f95f20ab436d32","sha256":"d462398cd770a6041a6c2b3eefa9087d7e622c21f3ae6d3b2881430ba0a7b9e7","sha512":"84669f5f7c548d101b09809ca7815c663027c07be5e5dfe304800268e85a14d4428ae8cc7e19f2d7cc1f876d74d2b0091ecdecc33d4308af2a9e1125889f6d17","ssdeep":"384:SUh5NtGBx0A/x+JzssjH31QO+x6iUpX0yx99CcozCX1DvFF2EK:SUr4KAp+RuOfimXVozqp4EK","tlshash":"7e92e10f24e7a709d49811f1adc0f66193103bb832ab791b08196be2c13e387f76d54b","first_seen":"2026-01-12T11:27:47.155938Z","last_seen":"2026-01-12T11:27:47.155938Z","times_seen":1,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.zyrosite.com/cdn-cgi/image/format=auto,w=1440,fit=crop/lx0agckiwR8jMi3J/fon1-m5KnxM8ZnOiJ7Z9e.jpg","fqdn":"assets.zyrosite.com","domain":"zyrosite.com","tld":"com"},"ip":{"addr":"104.18.43.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.wallet-safepal.com/wallet","date":"2026-01-12T11:27:02.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zyrosite.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:03:06 GMT","end":"Sat, 21 Mar 2026 17:03:05 GMT"},"fingerprint":{"sha1":"FE:0C:37:AD:68:33:E1:FE:94:E0:47:2E:A8:D5:51:78:07:61:43:6C","sha256":"51:1D:98:EE:3F:37:F8:87:A6:E7:71:74:C9:EC:E3:CE:44:1A:3A:50:D9:8B:21:3F:27:A2:06:B5:B2:75:C0:77"}}},"request":{"raw":"GET /cdn-cgi/image/format=auto,w=1440,fit=crop/lx0agckiwR8jMi3J/fon1-m5KnxM8ZnOiJ7Z9e.jpg HTTP/1.1\r\nHost: assets.zyrosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallet-safepal.com/\r\nCookie: __cf_bm=Joaw20sgcVGgwf2qXdubBcteSC9sn1DMDLj5DmbSW28-1768217222-1.0.1.1-WWHMRMA0Qkh3EpoEh_ROS1kwthlPxwl4cTD01q2qdpFExwB988qHRRMpAkBw_tYEZbw4HCg43iNwT9HJjHy6HiAw2AF.Zkzq8nKdoMxgsQs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 12 Jan 2026 11:27:02 GMT\r\ncontent-type: image/avif\r\ncontent-length: 9498\r\nserver: cloudflare\r\ncf-ray: 9bcc4d693b77120a-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 298495\r\ncache-control: public, max-age=2592000\r\netag: \"cfjIQD8yPpddiLIpS1X_svax0h9chm62VnURw7qqwqDQ:c04841e2dde515ecf16f2501a21a817c\"\r\nlast-modified: Tue, 23 Dec 2025 18:47:06 GMT\r\nvary: Accept, Accept-Encoding\r\ncf-resized: internal=ok/h q=0 n=17+68 c=0+0 v=2025.11.6 l=9498 f=false wv=2025.11.4\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nwarning: cf-images 299 \"crop fit mode needs both width and height\"\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9498,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"646f6e97c8d0317c8c29deb05ed8164e","sha1":"e5ba7b2423cfd2d72125239226f720ca0c8670ed","sha256":"66fb5ca04e4afda7e9ea36f33f157d6fad011f96751c9fe80698f09d7bf305c1","sha512":"de4b22c6d452bc0966e8663c78ba75a47fd6e7f4c18c87ac05135cbcc250e4a07ffb9ea0984a0ba2c5c60360e3762cfab0582bf2eaf29db4fe0bd7051d17092e","ssdeep":"192:2wsBFDvidcCT6RTmBsCVzVxxA+etFTfp0AxTmXkUrjFa2Y3Ngsq:IBBaRWmBsGa/tFzp06TmUcJjY3/q","tlshash":"45129e855a54dc57fc24c0bdfeb1c1de6c68b141120249bba817acd9e527ab3db09832","first_seen":"2025-06-30T13:55:53.947461Z","last_seen":"2026-01-12T11:27:47.156901Z","times_seen":3,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.zyrosite.com/lx0agckiwR8jMi3J/lg-d954Pa3yLjt4kl0P.svg","fqdn":"assets.zyrosite.com","domain":"zyrosite.com","tld":"com"},"ip":{"addr":"104.18.43.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.wallet-safepal.com/wallet","date":"2026-01-12T11:27:02.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zyrosite.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:03:06 GMT","end":"Sat, 21 Mar 2026 17:03:05 GMT"},"fingerprint":{"sha1":"FE:0C:37:AD:68:33:E1:FE:94:E0:47:2E:A8:D5:51:78:07:61:43:6C","sha256":"51:1D:98:EE:3F:37:F8:87:A6:E7:71:74:C9:EC:E3:CE:44:1A:3A:50:D9:8B:21:3F:27:A2:06:B5:B2:75:C0:77"}}},"request":{"raw":"GET /lx0agckiwR8jMi3J/lg-d954Pa3yLjt4kl0P.svg HTTP/1.1\r\nHost: assets.zyrosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallet-safepal.com/\r\nCookie: __cf_bm=Joaw20sgcVGgwf2qXdubBcteSC9sn1DMDLj5DmbSW28-1768217222-1.0.1.1-WWHMRMA0Qkh3EpoEh_ROS1kwthlPxwl4cTD01q2qdpFExwB988qHRRMpAkBw_tYEZbw4HCg43iNwT9HJjHy6HiAw2AF.Zkzq8nKdoMxgsQs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 12 Jan 2026 11:27:02 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: br\r\ncache-control: public, max-age=2592000\r\nexpires: Wed, 11 Feb 2026 11:27:02 GMT\r\nlast-modified: Tue, 23 Dec 2025 18:47:06 GMT\r\netag: W/\"61fa515051f5e247c01807efb948998f\"\r\ncf-cache-status: HIT\r\nage: 108764\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 9bcc4d694b7a120a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5999,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"61fa515051f5e247c01807efb948998f","sha1":"c45d63875d0fd3370660068d7b45c599cfba2b0f","sha256":"648a8622d8dc6ffffe8521fc8e0f30f99e8e8b8ed4d294888508961d3d599279","sha512":"066cee36cf6bb75a6c836982c7e7251d815d5754083f170b9e118eb01cfcceb5c68d20ac23d4fbc7b79aa6f164441e705cf8b1d8685e62739b78396c4b6fe5be","ssdeep":"96:LW3uY6DppC+rkRj5XAI3sS6tl6UBec8fa1lT83MTDPhpMh70v6vYvo9hTLw1hGQn:MgpC+A3XX3sS6f6P4PvKvYvQFM2gR","tlshash":"64c1a6ce93d467f4e549a7fcc71264b83a0b34fbba92cd79c7997d50a05218d4ca8c82","first_seen":"2025-06-30T13:55:53.955334Z","last_seen":"2026-01-12T11:27:47.157464Z","times_seen":3,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.zyrosite.com/cdn-cgi/image/format=auto,w=192,h=192,fit=crop,f=png/lx0agckiwR8jMi3J/photo_2023-02-03_11-58-45-AQEZG1jWL7F11N7l.jpg","fqdn":"assets.zyrosite.com","domain":"zyrosite.com","tld":"com"},"ip":{"addr":"104.18.43.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wallet-safepal.com/wallet","date":"2026-01-12T11:27:02.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zyrosite.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:03:06 GMT","end":"Sat, 21 Mar 2026 17:03:05 GMT"},"fingerprint":{"sha1":"FE:0C:37:AD:68:33:E1:FE:94:E0:47:2E:A8:D5:51:78:07:61:43:6C","sha256":"51:1D:98:EE:3F:37:F8:87:A6:E7:71:74:C9:EC:E3:CE:44:1A:3A:50:D9:8B:21:3F:27:A2:06:B5:B2:75:C0:77"}}},"request":{"raw":"GET /cdn-cgi/image/format=auto,w=192,h=192,fit=crop,f=png/lx0agckiwR8jMi3J/photo_2023-02-03_11-58-45-AQEZG1jWL7F11N7l.jpg HTTP/1.1\r\nHost: assets.zyrosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallet-safepal.com/\r\nCookie: __cf_bm=Joaw20sgcVGgwf2qXdubBcteSC9sn1DMDLj5DmbSW28-1768217222-1.0.1.1-WWHMRMA0Qkh3EpoEh_ROS1kwthlPxwl4cTD01q2qdpFExwB988qHRRMpAkBw_tYEZbw4HCg43iNwT9HJjHy6HiAw2AF.Zkzq8nKdoMxgsQs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 12 Jan 2026 11:27:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2500\r\nserver: cloudflare\r\ncf-ray: 9bcc4d6b8ac4120a-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\netag: \"cfUfNtZd8OEucej2Z9IbcgKSONMHWkH0HhJQwGCV43DQ:7b148c0cfb7dad240e9ddf0f41bb118d\"\r\nlast-modified: Tue, 23 Dec 2025 18:47:06 GMT\r\nvary: Accept, Accept-Encoding\r\ncf-resized: internal=ram/- q=0 n=0+0 c=0+0 v=2025.11.6 l=2500 wv=2025.11.4\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\npriority: u=1;i=?0,cf-chb=(260;u=3;i=?0 546;u=5;i=?0 1849;u=6;i=?0)\r\nwarning: cf-images 299 \"JPEG vs PNG selection is automatic\"\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2500,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 192x192, components 3","md5":"e8ea81296d062775ad44f880f1078f75","sha1":"5239e74a5793c47e3c6b6fa4eaa6313e45a2d1e4","sha256":"af3f160b9c8c8772d2a157e5e3117e9aa5f87ce50e5f2c65492febdf0f9a9fc4","sha512":"23905df23ee3e9846726a7396ecad26091b30dfa2cb8b310a307e3aaed8a9288bc173dc63fc6a8923336306d71870c66bbd471e271d414ac9a76c080bdce766a","ssdeep":"","tlshash":"b1512a519738714af85babf146cd5fbc710a80d344afb33b9ac2294795ae849c096118","first_seen":"2025-06-30T13:55:53.944886Z","last_seen":"2026-01-12T11:27:47.158488Z","times_seen":3,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.zyrosite.com/lx0agckiwR8jMi3J/traffic.txt","fqdn":"assets.zyrosite.com","domain":"zyrosite.com","tld":"com"},"ip":{"addr":"104.18.43.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.wallet-safepal.com/wallet","date":"2026-01-12T11:27:03.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zyrosite.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:03:06 GMT","end":"Sat, 21 Mar 2026 17:03:05 GMT"},"fingerprint":{"sha1":"FE:0C:37:AD:68:33:E1:FE:94:E0:47:2E:A8:D5:51:78:07:61:43:6C","sha256":"51:1D:98:EE:3F:37:F8:87:A6:E7:71:74:C9:EC:E3:CE:44:1A:3A:50:D9:8B:21:3F:27:A2:06:B5:B2:75:C0:77"}}},"request":{"raw":"GET /lx0agckiwR8jMi3J/traffic.txt HTTP/1.1\r\nHost: assets.zyrosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallet-safepal.com/\r\nCookie: __cf_bm=Joaw20sgcVGgwf2qXdubBcteSC9sn1DMDLj5DmbSW28-1768217222-1.0.1.1-WWHMRMA0Qkh3EpoEh_ROS1kwthlPxwl4cTD01q2qdpFExwB988qHRRMpAkBw_tYEZbw4HCg43iNwT9HJjHy6HiAw2AF.Zkzq8nKdoMxgsQs\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 12 Jan 2026 11:27:03 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\ncf-ray: 9bcc4d6c2c8e120a-OSL\r\ncache-control: public, max-age=0\r\nexpires: Wed, 11 Feb 2026 11:27:03 GMT\r\nlast-modified: Sun, 28 Dec 2025 19:19:49 GMT\r\netag: \"d41d8cd98f00b204e9800998ecf8427e\"\r\ncf-cache-status: HIT\r\nage: 108763\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T07:50:59.280742Z","times_seen":17496376,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.zyrosite.com/u1/google-fonts/font-faces?family=Roboto:wght@400;500;600;700\u0026display=swap","fqdn":"cdn.zyrosite.com","domain":"zyrosite.com","tld":"com"},"ip":{"addr":"104.18.43.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.wallet-safepal.com/wallet","date":"2026-01-12T11:27:02.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zyrosite.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:03:06 GMT","end":"Sat, 21 Mar 2026 17:03:05 GMT"},"fingerprint":{"sha1":"FE:0C:37:AD:68:33:E1:FE:94:E0:47:2E:A8:D5:51:78:07:61:43:6C","sha256":"51:1D:98:EE:3F:37:F8:87:A6:E7:71:74:C9:EC:E3:CE:44:1A:3A:50:D9:8B:21:3F:27:A2:06:B5:B2:75:C0:77"}}},"request":{"raw":"GET /u1/google-fonts/font-faces?family=Roboto:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: cdn.zyrosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallet-safepal.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 12 Jan 2026 11:27:02 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: br\r\nx-correlation-id: 47pKrJ-KyNIyLEbYnGqx6\r\nx-request-id: 573eb6a5328c7948890cbef788f4f7e2\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site, Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=2592000\r\nexpires: Mon, 19 Jan 2026 11:27:02 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Sat, 10 Jan 2026 04:20:35 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\netag: W/\"59a4-3YKhHxND28SqZTC8a6nDko7K9OE\"\r\nx-hostinger-datacenter: gcp\r\nx-hostinger-node: europe-west2\r\ncf-cache-status: HIT\r\nage: 157389\r\nset-cookie: __cf_bm=Br3U7W5mmFohsBUhzPS5hyudWa7Ia_OUS_EQdpZBPyU-1768217222-1.0.1.1-Uln3tTLOVcjKx7kQIhxdzhtIZockPnHQt4X1QXUIAy9m_hRCr1brZ2UWxJiUJHHe1eYknpvgFEyMvP5siOhki.baJlMZlCPt6vC8qMydzqQ; path=/; expires=Mon, 12-Jan-26 11:57:02 GMT; domain=.zyrosite.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9bcc4d67ceee120a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":22948,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"9aca5e96f4d2cf7dd764bc841c57c189","sha1":"dd82a11f1343dbc4aa6530bc6ba9c3928ecaf4e1","sha256":"c9daf468dd6d52c8f2eb2fb5f76870d946cce0602088f35dcd55941d9d46bf75","sha512":"668512bb1be6fbb72cb51675a9d458034100adf55813c37f9d1c521f70e42d7104670fc85825f5c6276bd8a8c201cf83ac990ac95e05de9cf08263895dd21e4f","ssdeep":"384:hSRBX3G87qY4O20mBZyZ1jDT+qY49hruFsXBP/4OpqY48kmqtzwRxjV9cqY4TvVE:hWBX3G8/pTmBUZ1jDTyKluFaBP/4ORPy","tlshash":"cda23fa0082a0100975398e633d97f36fd6e86487140d579abfc5b0beedfdb9126435e","first_seen":"2025-02-07T05:50:21.689263Z","last_seen":"2026-06-06T21:08:16.599067Z","times_seen":18,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":31,"dns":5,"connect":4,"send":0,"wait":17,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.zyrosite.com/cdn-cgi/image/format=auto,w=375,fit=crop,q=95/lx0agckiwR8jMi3J/lg1-Yg2yXrkjwWfWlp7E.png","fqdn":"assets.zyrosite.com","domain":"zyrosite.com","tld":"com"},"ip":{"addr":"104.18.43.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wallet-safepal.com/wallet","date":"2026-01-12T11:27:02.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zyrosite.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:03:06 GMT","end":"Sat, 21 Mar 2026 17:03:05 GMT"},"fingerprint":{"sha1":"FE:0C:37:AD:68:33:E1:FE:94:E0:47:2E:A8:D5:51:78:07:61:43:6C","sha256":"51:1D:98:EE:3F:37:F8:87:A6:E7:71:74:C9:EC:E3:CE:44:1A:3A:50:D9:8B:21:3F:27:A2:06:B5:B2:75:C0:77"}}},"request":{"raw":"GET /cdn-cgi/image/format=auto,w=375,fit=crop,q=95/lx0agckiwR8jMi3J/lg1-Yg2yXrkjwWfWlp7E.png HTTP/1.1\r\nHost: assets.zyrosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallet-safepal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 12 Jan 2026 11:27:02 GMT\r\ncontent-type: image/avif\r\ncontent-length: 7317\r\nserver: cloudflare\r\ncf-ray: 9bcc4d67def7120a-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 739569\r\ncache-control: public, max-age=2592000\r\netag: \"cfr7XGl8jvLyKhEAW7eZTYJAArVciXeJM_s178FtpGDQ:e35230f1bc1f453432a06ae32d079d27\"\r\nlast-modified: Tue, 23 Dec 2025 18:47:06 GMT\r\nvary: Accept, Accept-Encoding\r\ncf-resized: internal=ok/h q=0 n=18+34 c=0+33 v=2025.11.6 l=7317 f=false c2=0 wv=2025.11.4\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nwarning: cf-images 299 \"crop fit mode needs both width and height\"\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=y9lcPCBIy2eqjH0ZChb3g4eaj_NUGGd1G3JLKohXCjY-1768217222-1.0.1.1-HyvW43w2qmmPf.VBeNvkqRPnZRR2iV.IaZzNjwoLXkieHGua33i7kLysUsYeo_xS1am9qPyWCihdPZKaO2fwgxbqk_PrdYBNZWYTKsrBAi4; path=/; expires=Mon, 12-Jan-26 11:57:02 GMT; domain=.zyrosite.com; HttpOnly; Secure; SameSite=None\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":7317,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"597b908227ab36ddb043ba60db388b9d","sha1":"199372d4a806ec330ec4c84e48db72cc86b810c1","sha256":"1416d45696ba948ccb6b5261c18ad259367d4d354ad164a244f35f0a983e17ba","sha512":"989872259aa2d03dc2890433e52f94955109c0baf32ed87df04d0a551822f1babe973a078d2a2df74e6e5f4a437e054a808aac0d7499ce9340925814e854500a","ssdeep":"96:20K8LJRCfcCc7VXy6p6h1fLvRTa5hk8eJuGvZSDO4gCGKeoHCV6ryComa2rwEe:2X87ZCc7VgdRTabkJuGvo3gCG2HF5Pe","tlshash":"21e18eabe3688ee1e89d4d322e9fa39d7358455f934a56211103312e1b941b7d304c0f","first_seen":"2026-01-11T05:14:49.606333Z","last_seen":"2026-01-12T11:27:47.160746Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallet-safepal.com/_astro-1766951797189/ClientHead.DYt03131.js","fqdn":"www.wallet-safepal.com","domain":"wallet-safepal.com","tld":"com"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallet-safepal.com/wallet","date":"2026-01-12T11:27:02.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallet-safepal.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 18:21:29 GMT","end":"Sat, 28 Mar 2026 18:21:28 GMT"},"fingerprint":{"sha1":"06:47:FB:E1:82:64:B9:94:67:83:32:13:72:C6:FE:78:25:D2:33:A4","sha256":"66:77:88:40:BC:02:86:F1:46:78:B4:1B:35:A5:2B:B9:FB:67:E8:34:02:C3:D9:F6:66:0C:10:A2:99:62:28:5A"}}},"request":{"raw":"GET /_astro-1766951797189/ClientHead.DYt03131.js HTTP/1.1\r\nHost: www.wallet-safepal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallet-safepal.com/wallet\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 12 Jan 2026 11:27:02 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=2592000\r\nexpires: Wed, 11 Feb 2026 11:27:02 GMT\r\nlast-modified: Sun, 28 Dec 2025 19:56:56 GMT\r\netag: W/\"125504dbd0c6b9c97d16624dd45e0ba2\"\r\ncf-cache-status: HIT\r\nage: 238664\r\nset-cookie: __cf_bm=f3KlagSSBvY0x9fd_VYuV1Yz57rSOS01EcFaH63j5Pw-1768217222-1.0.1.1-.DuUMU3irzilxa8sz9cLvLBvaZcauCFb6s7Ir3rhBE90Z5ouHhU9hPwhWZ91M3RYxUgjpyRSvsSRVT5QN68yaBREI4eVaHAiKfFs2f.kPJw; path=/; expires=Mon, 12-Jan-26 11:57:02 GMT; domain=.zyro.com; HttpOnly\r\nvary: Accept-Encoding\r\ncf-ray: 9bcc4d68fc48ecdb-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hostinger-datacenter: gcp-euw2\r\nx-hostinger-node: gcp-euw2-builder-edge3\r\ncontent-security-policy: frame-ancestors zyro.com *.zyro.com *.builder-preview.com *.zyro.space *.hostinger.com *.hostinger.io *.hostinger.in *.hostinger.co.uk\r\nlink: \u003chttps://assets.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://userapp.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.googleapis.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin, \u003chttps://cdn.zyrosite.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-powered-by: HostingerWebsiteBuilder\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1420,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1419)","md5":"125504dbd0c6b9c97d16624dd45e0ba2","sha1":"8428d5b4c120f45132e30c4d7d111cb703e44d1b","sha256":"f42da104599d54f473090763fd6cca5fb1e62e077fed6d079297300e9832e5f7","sha512":"54bc749becf012088e852af9b01ce50cbcda2d409a6293cdac5d357fc6b2ac0b939d41f4ce5777f235114dba70e9921e36b55156df6edb9586bd0069cf12fc9c","ssdeep":"","tlshash":"5b21618ef448f83917e90a48b7da1c1b930a2f4ec51d5890a26c57d52fe1d87902e39f","first_seen":"2025-12-18T12:13:39.782751Z","last_seen":"2026-07-22T07:38:33.287368Z","times_seen":116,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"www.wallet-safepal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"www.wallet-safepal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wallet-safepal.com/_astro-1766951797189/siteModulesConstants.BJBunYQ-.js","fqdn":"www.wallet-safepal.com","domain":"wallet-safepal.com","tld":"com"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallet-safepal.com/wallet","date":"2026-01-12T11:27:02.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallet-safepal.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 18:21:29 GMT","end":"Sat, 28 Mar 2026 18:21:28 GMT"},"fingerprint":{"sha1":"06:47:FB:E1:82:64:B9:94:67:83:32:13:72:C6:FE:78:25:D2:33:A4","sha256":"66:77:88:40:BC:02:86:F1:46:78:B4:1B:35:A5:2B:B9:FB:67:E8:34:02:C3:D9:F6:66:0C:10:A2:99:62:28:5A"}}},"request":{"raw":"GET /_astro-1766951797189/siteModulesConstants.BJBunYQ-.js HTTP/1.1\r\nHost: www.wallet-safepal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallet-safepal.com/_astro-1766951797189/ClientHead.DYt03131.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 12 Jan 2026 11:27:02 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=2592000\r\nexpires: Wed, 11 Feb 2026 11:27:02 GMT\r\nlast-modified: Sun, 28 Dec 2025 19:56:56 GMT\r\netag: W/\"df1ca6542d7e5fd07ae7f175e54948ce\"\r\ncf-cache-status: HIT\r\nage: 1265275\r\nset-cookie: __cf_bm=T_K0NcEAV8BT5YCoxBkpxXlFzbpC_5JqPkEnvkP._XI-1768217222-1.0.1.1-9phXR1pHobIm9_wuNDDu2SvlDJedYi5kx0hkIz8_jF7_zq1fMbR6zUE3QzqD7_5WuteLXGiwbmMF_GHKR5C.xZ2vqqYD1E8BQwhoH93yKsM; path=/; expires=Mon, 12-Jan-26 11:57:02 GMT; domain=.zyro.com; HttpOnly\r\nvary: Accept-Encoding\r\ncf-ray: 9bcc4d69bbb4bed2-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hostinger-datacenter: gcp-euw2\r\nx-hostinger-node: gcp-euw2-builder-edge3\r\ncontent-security-policy: frame-ancestors zyro.com *.zyro.com *.builder-preview.com *.zyro.space *.hostinger.com *.hostinger.io *.hostinger.in *.hostinger.co.uk\r\nlink: \u003chttps://assets.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://userapp.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.googleapis.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin, \u003chttps://cdn.zyrosite.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-powered-by: HostingerWebsiteBuilder\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":3397,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (3396)","md5":"df1ca6542d7e5fd07ae7f175e54948ce","sha1":"027a883f3f367d802febe4648b76e3aed4d50d0c","sha256":"58ec4f2bb95f1a86a1891ee33273c6dbcc0ab91dd9640bf5dbbab79d670cf951","sha512":"a7ec5021b994c7b12614593f5430ee40363a6b2f8096d16b3de8c2fe9e79c7a8598744bb9866b92ee705822355ec8d4675a78f7f6d69eb0034935057480cfe14","ssdeep":"","tlshash":"4b61666de91017ff44021167a9bb91d093bc570799b021e17cbe885e46fb79e31d2a2c","first_seen":"2025-11-27T01:47:00.807539Z","last_seen":"2026-07-22T07:38:33.328004Z","times_seen":334,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"www.wallet-safepal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"www.wallet-safepal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.zyrosite.com/cdn-cgi/image/format=auto,w=180,h=180,fit=crop,f=png/lx0agckiwR8jMi3J/photo_2023-02-03_11-58-45-AQEZG1jWL7F11N7l.jpg","fqdn":"assets.zyrosite.com","domain":"zyrosite.com","tld":"com"},"ip":{"addr":"104.18.43.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wallet-safepal.com/wallet","date":"2026-01-12T11:27:02.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zyrosite.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:03:06 GMT","end":"Sat, 21 Mar 2026 17:03:05 GMT"},"fingerprint":{"sha1":"FE:0C:37:AD:68:33:E1:FE:94:E0:47:2E:A8:D5:51:78:07:61:43:6C","sha256":"51:1D:98:EE:3F:37:F8:87:A6:E7:71:74:C9:EC:E3:CE:44:1A:3A:50:D9:8B:21:3F:27:A2:06:B5:B2:75:C0:77"}}},"request":{"raw":"GET /cdn-cgi/image/format=auto,w=180,h=180,fit=crop,f=png/lx0agckiwR8jMi3J/photo_2023-02-03_11-58-45-AQEZG1jWL7F11N7l.jpg HTTP/1.1\r\nHost: assets.zyrosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallet-safepal.com/\r\nCookie: __cf_bm=Joaw20sgcVGgwf2qXdubBcteSC9sn1DMDLj5DmbSW28-1768217222-1.0.1.1-WWHMRMA0Qkh3EpoEh_ROS1kwthlPxwl4cTD01q2qdpFExwB988qHRRMpAkBw_tYEZbw4HCg43iNwT9HJjHy6HiAw2AF.Zkzq8nKdoMxgsQs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 12 Jan 2026 11:27:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2605\r\nserver: cloudflare\r\ncf-ray: 9bcc4d6b7aba120a-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1267541\r\ncache-control: public, max-age=2592000\r\netag: \"cfKhHOmFRXKd2MEq_NmLW3fueGechD0FZ0LNH0XLi7DQ:7b148c0cfb7dad240e9ddf0f41bb118d\"\r\nlast-modified: Tue, 23 Dec 2025 18:47:06 GMT\r\nvary: Accept, Accept-Encoding\r\ncf-resized: internal=ok/h q=0 n=27+11 c=2+8 v=2025.11.6 l=2605 f=false c2=0 wv=2025.11.4\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\npriority: u=1;i=?0,cf-chb=(262;u=3;i=?0 540;u=5;i=?0 1099;u=6;i=?0)\r\nwarning: cf-images 299 \"JPEG vs PNG selection is automatic\"\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2605,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 180x180, components 3","md5":"85012144f14faab4be49742e9dec93ac","sha1":"4abd2b23591ed232a8404138ef430c96a815b40f","sha256":"357bca88a7c018f45aacea67ab617bddf09d27b67481b3222fc3af07d4241551","sha512":"7813a1c37cc291f19b3bda61eef94a2c39f6135723049fe2dd6e4fd81b01166c5d2f5e37e0070e10fbf217af23fefe724ddd8c26973cf3fcc732a7af3b45dcf3","ssdeep":"","tlshash":"73513abb3f26d4e0e47477f145b0b64f32942f47a1c9734105dc26519c786c50522b45","first_seen":"2026-01-11T05:14:49.609903Z","last_seen":"2026-01-12T11:27:47.162897Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallet-safepal.com/_astro-1766951797189/_slug_.CI1WaYZy.css","fqdn":"www.wallet-safepal.com","domain":"wallet-safepal.com","tld":"com"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.wallet-safepal.com/wallet","date":"2026-01-12T11:27:02.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallet-safepal.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 18:21:29 GMT","end":"Sat, 28 Mar 2026 18:21:28 GMT"},"fingerprint":{"sha1":"06:47:FB:E1:82:64:B9:94:67:83:32:13:72:C6:FE:78:25:D2:33:A4","sha256":"66:77:88:40:BC:02:86:F1:46:78:B4:1B:35:A5:2B:B9:FB:67:E8:34:02:C3:D9:F6:66:0C:10:A2:99:62:28:5A"}}},"request":{"raw":"GET /_astro-1766951797189/_slug_.CI1WaYZy.css HTTP/1.1\r\nHost: www.wallet-safepal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallet-safepal.com/wallet\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 12 Jan 2026 11:27:02 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=2592000\r\nexpires: Wed, 11 Feb 2026 11:27:02 GMT\r\nlast-modified: Sun, 28 Dec 2025 19:56:56 GMT\r\netag: W/\"1ae6e8380756630c97abadc1a2af07fa\"\r\ncf-cache-status: HIT\r\nage: 1265391\r\nset-cookie: __cf_bm=9sWLP4QbyBt_Tx3wL9mf0SoAJLuXh_dx3ZXI1CM4VBg-1768217222-1.0.1.1-9FQDAPI9H.xxJf98m08lcjKeoXLETfU7HhDundX7dg_zCEvA0BvKGrByE6qmp.HhawxOUnydeDnkbTTCZHlC7XrVGayJvYDTUsc1DrVOwJc; path=/; expires=Mon, 12-Jan-26 11:57:02 GMT; domain=.zyro.com; HttpOnly\r\nvary: Accept-Encoding\r\ncf-ray: 9bcc4d67dead773b-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hostinger-datacenter: gcp-euw2\r\nx-hostinger-node: gcp-euw2-builder-edge3\r\ncontent-security-policy: frame-ancestors zyro.com *.zyro.com *.builder-preview.com *.zyro.space *.hostinger.com *.hostinger.io *.hostinger.in *.hostinger.co.uk\r\nlink: \u003chttps://assets.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://userapp.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.googleapis.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin, \u003chttps://cdn.zyrosite.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-powered-by: HostingerWebsiteBuilder\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":302852,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"1ae6e8380756630c97abadc1a2af07fa","sha1":"8076060e885e4f1388f6f0a446421b12455bd1b6","sha256":"75bf352001833c34a3d3ddfcdb5f493aed312167e618330fdc70f4085c125016","sha512":"3cdf065a97f607be7e0f13bee4601f2486ee9269fcca8807a94816f4fcea9394bbdfb6e1d3d792897af9f26f3f7d1e417c690181e2c6c5d96dc8d3f2add6e96e","ssdeep":"1536:K0SYTJn2XGrdLxHp31iY+nlAWCROXRDdiCg3mJby934PHyPtVp5m5mc/VaZGkhU7:K8kQxBJs6P7vdpRI","tlshash":"2054d5a6f224a03a7537993f67dced0c7714a902ca178be4ff415004a5c7af327b664a","first_seen":"2025-12-24T21:56:41.352752Z","last_seen":"2026-07-22T07:38:33.261762Z","times_seen":74,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"www.wallet-safepal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"www.wallet-safepal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.zyrosite.com/cdn-cgi/image/format=auto,w=1440,fit=crop/lx0agckiwR8jMi3J/original-3047e9cc-b386-407b-9aab-1580d41382d3.jpeg-AzGN0Z8E98ULRP4K.jpg","fqdn":"assets.zyrosite.com","domain":"zyrosite.com","tld":"com"},"ip":{"addr":"104.18.43.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.wallet-safepal.com/wallet","date":"2026-01-12T11:27:02.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zyrosite.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:03:06 GMT","end":"Sat, 21 Mar 2026 17:03:05 GMT"},"fingerprint":{"sha1":"FE:0C:37:AD:68:33:E1:FE:94:E0:47:2E:A8:D5:51:78:07:61:43:6C","sha256":"51:1D:98:EE:3F:37:F8:87:A6:E7:71:74:C9:EC:E3:CE:44:1A:3A:50:D9:8B:21:3F:27:A2:06:B5:B2:75:C0:77"}}},"request":{"raw":"GET /cdn-cgi/image/format=auto,w=1440,fit=crop/lx0agckiwR8jMi3J/original-3047e9cc-b386-407b-9aab-1580d41382d3.jpeg-AzGN0Z8E98ULRP4K.jpg HTTP/1.1\r\nHost: assets.zyrosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallet-safepal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 12 Jan 2026 11:27:02 GMT\r\ncontent-type: image/avif\r\ncontent-length: 75055\r\nserver: cloudflare\r\ncf-ray: 9bcc4d67def4120a-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\netag: \"cfgDK1OPkFMYRLsa-N4StiaLKR9chm62VnURw7qqwqDQ:4790cf40ed9d97fc56756de2ebe9f74f\"\r\nlast-modified: Tue, 23 Dec 2025 18:47:06 GMT\r\nvary: Accept, Accept-Encoding\r\ncf-resized: internal=ok/h q=0 n=10+235 c=0+0 v=2025.11.6 l=75055 f=false wv=2025.11.4\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nwarning: cf-images 299 \"crop fit mode needs both width and height\"\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=Joaw20sgcVGgwf2qXdubBcteSC9sn1DMDLj5DmbSW28-1768217222-1.0.1.1-WWHMRMA0Qkh3EpoEh_ROS1kwthlPxwl4cTD01q2qdpFExwB988qHRRMpAkBw_tYEZbw4HCg43iNwT9HJjHy6HiAw2AF.Zkzq8nKdoMxgsQs; path=/; expires=Mon, 12-Jan-26 11:57:02 GMT; domain=.zyrosite.com; HttpOnly; Secure; SameSite=None\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75055,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"b836103e87ba2a07df2f3213e2b7a063","sha1":"50973cd0c08bd4fe3e4a8a0e045cc42cfb4be4f2","sha256":"e18542cbadd0cc4e3a3407dec3014c818002cb0e21ea756f30da1d68648e5171","sha512":"9ffd1bc688dd3f0edae8bdc0595511c339ee4320a1beff566649252304baea28293db3ad47e1c7845f6e4f99c84a6d565e93013027f4ea22e5b6dfb0e7008113","ssdeep":"1536:Y6CmvWw9hIOC5PK+NzoPAFvxZcIoOR4MxZe/mVZ8TfOi7W:Lew9hS5PV1zLO+V8Fy","tlshash":"9973127321add589bf2a3c75d670b15d2d7bf5ad2ea222a9d5097b22e20427110bcccc","first_seen":"2026-01-12T11:27:47.164384Z","last_seen":"2026-01-12T11:27:47.164384Z","times_seen":1,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":135,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallet-safepal.com/_astro-1766951797189/Integrations.CopB9lKs.js","fqdn":"www.wallet-safepal.com","domain":"wallet-safepal.com","tld":"com"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallet-safepal.com/wallet","date":"2026-01-12T11:27:02.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallet-safepal.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 18:21:29 GMT","end":"Sat, 28 Mar 2026 18:21:28 GMT"},"fingerprint":{"sha1":"06:47:FB:E1:82:64:B9:94:67:83:32:13:72:C6:FE:78:25:D2:33:A4","sha256":"66:77:88:40:BC:02:86:F1:46:78:B4:1B:35:A5:2B:B9:FB:67:E8:34:02:C3:D9:F6:66:0C:10:A2:99:62:28:5A"}}},"request":{"raw":"GET /_astro-1766951797189/Integrations.CopB9lKs.js HTTP/1.1\r\nHost: www.wallet-safepal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallet-safepal.com/wallet\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 12 Jan 2026 11:27:02 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=2592000\r\nexpires: Wed, 11 Feb 2026 11:27:02 GMT\r\nlast-modified: Sun, 28 Dec 2025 19:56:56 GMT\r\netag: W/\"0445a299de9d343d2ccc2aa168bc25f2\"\r\ncf-cache-status: HIT\r\nage: 1265275\r\nset-cookie: __cf_bm=NdNiE9Q1DoPalIRz6Itb0NVqX_HW1OgeIXazIV374Wo-1768217222-1.0.1.1-41PbsUXaxjfuLav6RoXwQFPWi2759huqSpXrumtG_yHFZsTkpfN0LudZcyfO8b5K6Po6Q2QgqWYcbil0Qhq0i.j1t1.qPfOQn7bTcItkeRg; path=/; expires=Mon, 12-Jan-26 11:57:02 GMT; domain=.zyro.com; HttpOnly\r\nvary: Accept-Encoding\r\ncf-ray: 9bcc4d690bc7945a-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hostinger-datacenter: gcp-euw2\r\nx-hostinger-node: gcp-euw2-builder-edge3\r\ncontent-security-policy: frame-ancestors zyro.com *.zyro.com *.builder-preview.com *.zyro.space *.hostinger.com *.hostinger.io *.hostinger.in *.hostinger.co.uk\r\nlink: \u003chttps://assets.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://userapp.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.googleapis.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin, \u003chttps://cdn.zyrosite.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-powered-by: HostingerWebsiteBuilder\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2635,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (951)","md5":"0445a299de9d343d2ccc2aa168bc25f2","sha1":"a8ae592cf1eea835ce7350e95c3bb501d18f9e40","sha256":"726c42de2236d634a107fd50aa3ed8bba6d290e0fe431adfbd8ef287357b8be3","sha512":"1656bbdaa5b129bedbff4f872db1dc7b9fbc0114b03262e81c65aca2b3a8f19a0a52bcc081e9d6e99dabedc149a8858e3bfef0ec1f04261fdb43acd0c765ac26","ssdeep":"","tlshash":"c151b506273ef3fca140d6b695e3a4346b472d84af20c4b8d3f94c57d9104ad3a1a993","first_seen":"2025-09-07T00:11:26.274021Z","last_seen":"2026-07-22T07:38:33.292601Z","times_seen":997,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"www.wallet-safepal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"www.wallet-safepal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.zyrosite.com/u1/google-fonts/font-file?family=Roboto:wght@600\u0026subset=latin\u0026display=swap","fqdn":"cdn.zyrosite.com","domain":"zyrosite.com","tld":"com"},"ip":{"addr":"104.18.43.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.wallet-safepal.com/wallet","date":"2026-01-12T11:27:02.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zyrosite.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:03:06 GMT","end":"Sat, 21 Mar 2026 17:03:05 GMT"},"fingerprint":{"sha1":"FE:0C:37:AD:68:33:E1:FE:94:E0:47:2E:A8:D5:51:78:07:61:43:6C","sha256":"51:1D:98:EE:3F:37:F8:87:A6:E7:71:74:C9:EC:E3:CE:44:1A:3A:50:D9:8B:21:3F:27:A2:06:B5:B2:75:C0:77"}}},"request":{"raw":"GET /u1/google-fonts/font-file?family=Roboto:wght@600\u0026subset=latin\u0026display=swap HTTP/1.1\r\nHost: cdn.zyrosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.wallet-safepal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.zyrosite.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 12 Jan 2026 11:27:02 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15468\r\ncf-ray: 9bcc4d68fab1120a-OSL\r\nx-correlation-id: U8l9ZrN9mvKY8kmDhSXQD\r\nx-request-id: 7dfe7cd911f9fa48f8aac31a1d6968e1\r\naccess-control-allow-origin: *\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpires: Tue, 12 Jan 2027 11:27:02 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 18 Nov 2025 19:00:53 GMT\r\ncontent-disposition: attachment; filename=KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWuYaalmUiAr0klQmz24.woff2\r\netag: W/\"3c6c-CPmJt1iKKOIzHQSRzyIqyIXUac8\"\r\nstrict-transport-security: max-age=2592000\r\nx-frame-options: sameorigin\r\nx-hostinger-datacenter: gcp\r\nx-hostinger-node: europe-west2\r\ncf-cache-status: HIT\r\nage: 108763\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=7jfL1ZA_yqsMPUP4VrXRFVgyWJdMms3sQaB8BYYfqgg-1768217222-1.0.1.1-IV_8YLCGQmKacWXHnmZvYEvw8U4Un2xyA_ghACwsqffaxwBWWVEEswXkJDU034DclhbHELiAqf1zaBtmXmVsy9t0IhlZQibjqdNO9d27gPk; path=/; expires=Mon, 12-Jan-26 11:57:02 GMT; domain=.zyrosite.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15468,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15468, version 1.0","md5":"b0ae3edda4554a3753a4284dcfb56987","sha1":"08f989b7588a28e2331d0491cf222ac885d469cf","sha256":"e350bc1645983580c08d1fcb05e6d6d7992f665b6522e240ae324a2065004886","sha512":"9e9c64909546024ba5a4fe19a3b65bdb068ad950de13230cecb5962670e0472edd95f96658c695b48323cd5a0d96c69182dc2c185cada96f55967adb12b16dfa","ssdeep":"384:MEtbO8EHI64ur4fy3IElD7kvZjZZ06htTPe0KdM9JzW4BxyMz:RtbOLI6BrTBfkfVe0rfWwyMz","tlshash":"7562d02c7551119e45ae39fc93a6bac43e616094e9cc8bf6d1ce204afdf0e08d2653cb","first_seen":"2025-02-07T05:50:21.686477Z","last_seen":"2026-05-05T18:29:47.61162Z","times_seen":277,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.zyrosite.com/u1/google-fonts/font-file?family=Roboto:wght@400\u0026subset=cyrillic\u0026display=swap","fqdn":"cdn.zyrosite.com","domain":"zyrosite.com","tld":"com"},"ip":{"addr":"104.18.43.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.wallet-safepal.com/wallet","date":"2026-01-12T11:27:02.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zyrosite.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:03:06 GMT","end":"Sat, 21 Mar 2026 17:03:05 GMT"},"fingerprint":{"sha1":"FE:0C:37:AD:68:33:E1:FE:94:E0:47:2E:A8:D5:51:78:07:61:43:6C","sha256":"51:1D:98:EE:3F:37:F8:87:A6:E7:71:74:C9:EC:E3:CE:44:1A:3A:50:D9:8B:21:3F:27:A2:06:B5:B2:75:C0:77"}}},"request":{"raw":"GET /u1/google-fonts/font-file?family=Roboto:wght@400\u0026subset=cyrillic\u0026display=swap HTTP/1.1\r\nHost: cdn.zyrosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.wallet-safepal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.zyrosite.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 12 Jan 2026 11:27:02 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 7764\r\ncf-ray: 9bcc4d68ea94120a-OSL\r\nx-correlation-id: fLc4FT8NMpB2_eOFvtFHE\r\nx-request-id: 64a1f1bd6ad96f0866d32d7863a8ca66\r\naccess-control-allow-origin: *\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\nexpires: Tue, 12 Jan 2027 11:27:02 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 18 Nov 2025 19:00:22 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-disposition: attachment; filename=KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmQiAr0klQmz24O0g.woff2\r\netag: W/\"1e54-75pCpFRb8wOIzXFERfrfzLS1AMY\"\r\nstrict-transport-security: max-age=2592000\r\nx-frame-options: sameorigin\r\nx-hostinger-datacenter: gcp\r\nx-hostinger-node: europe-west2\r\ncf-cache-status: HIT\r\nage: 108763\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=e.c2Bs7nOyNQ4IpwmTt63DQJiBm7aEHVl7SZ_f60L3g-1768217222-1.0.1.1-YscZ2dAot5eHmy7qCYS.lkDZFqG7gmSxx3_IQzqmkp_7HiLUMoFdnXtldBHid4aDSCJzAHHQ9Dm_O4jPXyPVr99OUSgX0Tql5ZBNLmFkUYY; path=/; expires=Mon, 12-Jan-26 11:57:02 GMT; domain=.zyrosite.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7764,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7764, version 1.0","md5":"edb08e267fa53ebe11118e14d4ab92cb","sha1":"ef9a42a4545bf30388cd714445fadfccb4b500c6","sha256":"d4f08793a07c99ebc4ea6ccadc199b3ad8502f3b090a9f49483739c94e8e6def","sha512":"68d07ab61238ad9d5f4655be72a22fb5a9b1222d51992808dbde30486526eca041084f7c26c72ab43e28e290a7d86f0d65dc59b8f0500eddd22d21e64945cc3c","ssdeep":"192:0q+9FLgb2X7hsGmpC5H/gqNsS9JSP09z5VbYizvjuSmsKerBEfsgc:WEKX7+GVH/PNlPSP0d5JYYmEEI","tlshash":"c0f19ea8c78b96d1455b6cbdf994c0ddab29ee373a014fd49187ba24b4060c7f05af11","first_seen":"2025-04-17T03:23:36.615069Z","last_seen":"2026-03-23T04:32:44.072694Z","times_seen":27,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.zyrosite.com/u1/google-fonts/font-file?family=Roboto:wght@700\u0026subset=latin\u0026display=swap","fqdn":"cdn.zyrosite.com","domain":"zyrosite.com","tld":"com"},"ip":{"addr":"104.18.43.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.wallet-safepal.com/wallet","date":"2026-01-12T11:27:02.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zyrosite.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:03:06 GMT","end":"Sat, 21 Mar 2026 17:03:05 GMT"},"fingerprint":{"sha1":"FE:0C:37:AD:68:33:E1:FE:94:E0:47:2E:A8:D5:51:78:07:61:43:6C","sha256":"51:1D:98:EE:3F:37:F8:87:A6:E7:71:74:C9:EC:E3:CE:44:1A:3A:50:D9:8B:21:3F:27:A2:06:B5:B2:75:C0:77"}}},"request":{"raw":"GET /u1/google-fonts/font-file?family=Roboto:wght@700\u0026subset=latin\u0026display=swap HTTP/1.1\r\nHost: cdn.zyrosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.wallet-safepal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.zyrosite.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 12 Jan 2026 11:27:02 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15532\r\ncf-ray: 9bcc4d68fab4120a-OSL\r\nx-correlation-id: IWbDXackqrrup4r16Vu_Q\r\nx-request-id: e1697c78cc55de0e79297f30828028fe\r\naccess-control-allow-origin: *\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpires: Tue, 12 Jan 2027 11:27:02 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 18 Nov 2025 19:00:53 GMT\r\ncontent-disposition: attachment; filename=KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWuYjalmUiAr0klQmz24.woff2\r\netag: W/\"3cac-uIaEKtalPAhFwVfdPKIBEcFxZ7E\"\r\nstrict-transport-security: max-age=2592000\r\nx-frame-options: sameorigin\r\nx-hostinger-datacenter: gcp\r\nx-hostinger-node: europe-west2\r\ncf-cache-status: HIT\r\nage: 108763\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=wSLPLptF6AaFNwg3.GoP81uu5.q7nSOiTaKFleUNONc-1768217222-1.0.1.1-3D1mXbamTVnegTmbmxGleVikcgSn11bdjl.kkIO9lLWZSlOLoQ1B.X43kXGOMP6jUJ_jpoxD_ZZw.qeowHQ4le4inx53gOtymbhBstsajNA; path=/; expires=Mon, 12-Jan-26 11:57:02 GMT; domain=.zyrosite.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15532, version 1.0","md5":"d469946d05d1741a0cef9cd3f72c5898","sha1":"b886842ad6a53c0845c157dd3ca20111c17167b1","sha256":"961501000220d37a81f922cd5cf8191b0afb52d7ed4eb9c723c24b23ca16bd58","sha512":"9c2fc0e3dba9cbefa5366b573efc33a410088d2dba345ae44bd5fdc3719a9b21f6a087615534c925a989a64d4dd81dc523d5049e4d16db9d0c81ac34fdd3bf03","ssdeep":"384:RTkV/CYkmAck5eFfUTswdhAHFMDPqHF40DIrORrFevwMoueV:SzAcSeQXAiPqeeR0euy","tlshash":"3462d03ac1ea962fdd357aae1169d91c5d60c044220f87ccf1994076e7ff62219d3336","first_seen":"2025-09-10T22:41:03.907714Z","last_seen":"2026-07-14T04:59:48.023182Z","times_seen":162,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.zyrosite.com/lx0agckiwR8jMi3J/222-YD0wgNDaJ6SqoPJa.svg","fqdn":"assets.zyrosite.com","domain":"zyrosite.com","tld":"com"},"ip":{"addr":"104.18.43.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.wallet-safepal.com/wallet","date":"2026-01-12T11:27:02.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zyrosite.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:03:06 GMT","end":"Sat, 21 Mar 2026 17:03:05 GMT"},"fingerprint":{"sha1":"FE:0C:37:AD:68:33:E1:FE:94:E0:47:2E:A8:D5:51:78:07:61:43:6C","sha256":"51:1D:98:EE:3F:37:F8:87:A6:E7:71:74:C9:EC:E3:CE:44:1A:3A:50:D9:8B:21:3F:27:A2:06:B5:B2:75:C0:77"}}},"request":{"raw":"GET /lx0agckiwR8jMi3J/222-YD0wgNDaJ6SqoPJa.svg HTTP/1.1\r\nHost: assets.zyrosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallet-safepal.com/\r\nCookie: __cf_bm=Joaw20sgcVGgwf2qXdubBcteSC9sn1DMDLj5DmbSW28-1768217222-1.0.1.1-WWHMRMA0Qkh3EpoEh_ROS1kwthlPxwl4cTD01q2qdpFExwB988qHRRMpAkBw_tYEZbw4HCg43iNwT9HJjHy6HiAw2AF.Zkzq8nKdoMxgsQs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 12 Jan 2026 11:27:02 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: br\r\ncache-control: public, max-age=2592000\r\nexpires: Wed, 11 Feb 2026 11:27:02 GMT\r\nlast-modified: Tue, 23 Dec 2025 18:47:06 GMT\r\netag: W/\"a6f2e4d6220dbdc7a2b8b663bc3b0988\"\r\ncf-cache-status: MISS\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 9bcc4d693b5e120a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20802,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a6f2e4d6220dbdc7a2b8b663bc3b0988","sha1":"6bd4e5824a3c50fe85d1198274ee92ba04d444a6","sha256":"be19c5e781867929d1845278fa157bd5d0e94cfd23abbc579e937576f22457b1","sha512":"e7a117356ce015649221753ba933abd8ce921e070c1d012c95aa3c1662b98a35d3ec76755359c5b3348fe12cb790278515132e319b9fc2760cd3d0b639e410e8","ssdeep":"384:V6GyGbdv1AqeimlAYxjQecBh4jXjz7iNyu/ovivj/u4whMqSaL75:VVXAYdcHmYu/ovivj24iMGLV","tlshash":"1d92b7cd2b70aee48dcc87debf5360d8790290bf95894e94d20c5f28748546e8d9ee87","first_seen":"2026-01-12T11:27:47.167311Z","last_seen":"2026-01-12T11:27:47.167311Z","times_seen":1,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.zyrosite.com/lx0agckiwR8jMi3J/icon-trad-d954Pa3yLVFN26LB.svg","fqdn":"assets.zyrosite.com","domain":"zyrosite.com","tld":"com"},"ip":{"addr":"104.18.43.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.wallet-safepal.com/wallet","date":"2026-01-12T11:27:02.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zyrosite.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:03:06 GMT","end":"Sat, 21 Mar 2026 17:03:05 GMT"},"fingerprint":{"sha1":"FE:0C:37:AD:68:33:E1:FE:94:E0:47:2E:A8:D5:51:78:07:61:43:6C","sha256":"51:1D:98:EE:3F:37:F8:87:A6:E7:71:74:C9:EC:E3:CE:44:1A:3A:50:D9:8B:21:3F:27:A2:06:B5:B2:75:C0:77"}}},"request":{"raw":"GET /lx0agckiwR8jMi3J/icon-trad-d954Pa3yLVFN26LB.svg HTTP/1.1\r\nHost: assets.zyrosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallet-safepal.com/\r\nCookie: __cf_bm=Joaw20sgcVGgwf2qXdubBcteSC9sn1DMDLj5DmbSW28-1768217222-1.0.1.1-WWHMRMA0Qkh3EpoEh_ROS1kwthlPxwl4cTD01q2qdpFExwB988qHRRMpAkBw_tYEZbw4HCg43iNwT9HJjHy6HiAw2AF.Zkzq8nKdoMxgsQs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 12 Jan 2026 11:27:02 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: br\r\ncache-control: public, max-age=2592000\r\nexpires: Wed, 11 Feb 2026 11:27:02 GMT\r\nlast-modified: Tue, 23 Dec 2025 18:47:06 GMT\r\netag: W/\"8dd868e1cd46c24e916839248e7bcaca\"\r\ncf-cache-status: MISS\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 9bcc4d693b6c120a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":718,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8dd868e1cd46c24e916839248e7bcaca","sha1":"ebcf99f2dc8f7edd8d3b4f4b31f40aa6a7aa38a3","sha256":"c16407ae07625dbf68b99fe9ed61048ca6695059cae47696938931b7ba0bad51","sha512":"b27cd3d98cb5b00aaa1fc89e80679638af2717fef78b896981a2fb147f8ca49612bbb88bde095ab3835664ca1b7de049c76f2ce306f02f8103a0a42f7df60c6a","ssdeep":"","tlshash":"ca01f4da9db9d97fa41c86dcef60e084a07b51d7ea4ec0bac085ff26a0542ca1d8c159","first_seen":"2026-01-12T11:27:47.16824Z","last_seen":"2026-01-12T11:27:47.16824Z","times_seen":1,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wallet-safepal.com/_astro-1766951797189/client.DI-5_30c.js","fqdn":"www.wallet-safepal.com","domain":"wallet-safepal.com","tld":"com"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wallet-safepal.com/wallet","date":"2026-01-12T11:27:02.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wallet-safepal.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 18:21:29 GMT","end":"Sat, 28 Mar 2026 18:21:28 GMT"},"fingerprint":{"sha1":"06:47:FB:E1:82:64:B9:94:67:83:32:13:72:C6:FE:78:25:D2:33:A4","sha256":"66:77:88:40:BC:02:86:F1:46:78:B4:1B:35:A5:2B:B9:FB:67:E8:34:02:C3:D9:F6:66:0C:10:A2:99:62:28:5A"}}},"request":{"raw":"GET /_astro-1766951797189/client.DI-5_30c.js HTTP/1.1\r\nHost: www.wallet-safepal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wallet-safepal.com/wallet\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 12 Jan 2026 11:27:02 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=2592000\r\nexpires: Wed, 11 Feb 2026 11:27:02 GMT\r\nlast-modified: Sun, 28 Dec 2025 19:56:56 GMT\r\netag: W/\"e1ea0e3ff29f678ac903b0ed038d22ca\"\r\ncf-cache-status: HIT\r\nage: 1265275\r\nset-cookie: __cf_bm=yNw2ovsiI3nOZNj_NhAPKULz0IArSZXQgLVUaqPM32A-1768217222-1.0.1.1-8tpoXmJ97LPEFL9KpdBuIhApusGAXNaOhfuCZGWKSep0PLuusSSFhImuOFgFeQnhUl.gumXRjiQrx7WqvUA7fk4bzfeJlgKflMWbscc1c0U; path=/; expires=Mon, 12-Jan-26 11:57:02 GMT; domain=.zyro.com; HttpOnly\r\nvary: Accept-Encoding\r\ncf-ray: 9bcc4d68ff92ede3-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hostinger-datacenter: gcp-euw2\r\nx-hostinger-node: gcp-euw2-builder-edge3\r\ncontent-security-policy: frame-ancestors zyro.com *.zyro.com *.builder-preview.com *.zyro.space *.hostinger.com *.hostinger.io *.hostinger.in *.hostinger.co.uk\r\nlink: \u003chttps://assets.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://userapp.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.googleapis.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin, \u003chttps://cdn.zyrosite.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-powered-by: HostingerWebsiteBuilder\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2433,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2432)","md5":"e1ea0e3ff29f678ac903b0ed038d22ca","sha1":"0da08fd56a991743aca8599a5a99890b044df7da","sha256":"2df4f84f2a81d7d1ebe6e51afad34e92448819623f86608d206e32e015c40bbc","sha512":"21f0829fbcdf0e2d4d464f40e92f495b71c7f1456557f332a37fa8d975d3c6a84c2778a5248df2ec75b79ce0303109e5fe101555be37f8a79c7c6c8dffdb766d","ssdeep":"","tlshash":"5341a8ecf090edb622f95dd0c6291011ba1e146a38bfa8e0f39d5d511274e8d426ef7e","first_seen":"2025-11-27T01:47:00.805665Z","last_seen":"2026-07-22T07:38:33.317611Z","times_seen":235,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"www.wallet-safepal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"www.wallet-safepal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}