{"report_id":"819d98d8-4b3a-48fa-a680-a746de512422","version":6,"status":"done","tags":[],"date":"2026-02-03T20:37:19Z","url":{"schema":"https","addr":"safepal.greenbergglusker.net/","fqdn":"safepal.greenbergglusker.net","domain":"greenbergglusker.net","tld":"net"},"ip":{"addr":"102.204.223.66","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"safepal.greenbergglusker.net/#/login","fqdn":"safepal.greenbergglusker.net","domain":"greenbergglusker.net","tld":"net"},"title":"SafePal","dom":{"size":4714,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3997)","md5":"70caba341ceb86d8fb4bd0ddf36751db","sha1":"4592139cfe559624e0905c0e74a2fba33835325b","sha256":"a6a905c3de58ed68e82576542e5748c339cd8fe2c2bef827c29350a8a861b3bb","sha512":"637135048cf2474173b631bb71a2c1a9f501533609a367e9b9a830ece0ff92110dab3dd195ee2a1cbeacb449eb1fc7238b758218439b2c3ce6500af51c789cc8","ssdeep":"96:COdTeR/dO/4egRCeIzKNgGq+sqrjzvEGSa+mN+NxX3lsi:/M/M/4egRCeIvdTkZIt","tlshash":"c7a182e5a190442a06a786c4f5703f267d13ff0fe589a530b92c019a7febea0b845d74","dom_hash":"domhashd369845fc31f95c84cc4dc970ed6d7bd","first_seen":"2026-02-03T20:37:26.880602Z","last_seen":"2026-02-03T20:37:26.880602Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"safepal.greenbergglusker.net/","fqdn":"safepal.greenbergglusker.net","domain":"greenbergglusker.net","tld":"net"},"ip":{"addr":"102.204.223.66","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-10T20:37:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"safepal.greenbergglusker.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"safepal.greenbergglusker.net","ip":{"addr":"102.204.223.66","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-03T20:37:22.22623Z","last_seen":"2026-02-03T20:37:22.22623Z","alert_count":10,"request_count":10,"received_data":5881433,"sent_data":4968,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"safepal.greenbergglusker.net/assets/index-CoUbs3VG.js","fqdn":"safepal.greenbergglusker.net","domain":"greenbergglusker.net","tld":"net"},"ip":{"addr":"102.204.223.66","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9d2a8ac8e1b5d3051d52c94fc7d2204","sha1":"3a3353cb9ff30e530aedb036f8125e6465f0d770","sha256":"732dcfd1225124923c4f05a6352d0e031b8bc31d65e9fa6292326df0eaf86fb7","sha512":"6d5ba8448890fce0424494e941618e5a585fefbde038634811394689761a472acff322accca0c8cdd5c112d676f69fcef20d6ef1caf90dd4f3380cb34ce6365f","ssdeep":"49152:7oCery8NOxDdrVyMUtqtSG0EJ8ukRo2b2T+k4LI20lDUfsrL0iP1WpFMsKF20kZN:EdhshsD7","tlshash":"0d36aea5734270a543b611d1207f140ba33a29487493d4d8fe9dd9ea2dbec5a633af3c","size":4959694,"data":"","first_seen":"2026-02-03T20:37:26.903606Z","last_seen":"2026-02-03T20:37:26.903606Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"safepal.greenbergglusker.net/","fqdn":"safepal.greenbergglusker.net","domain":"greenbergglusker.net","tld":"net"},"ip":{"addr":"102.204.223.66","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-03T20:36:57.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.greenbergglusker.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 20 Jan 2026 00:42:35 GMT","end":"Mon, 20 Apr 2026 00:42:34 GMT"},"fingerprint":{"sha1":"05:CF:72:94:AC:19:80:94:D0:AA:A8:A9:A8:DB:A4:6B:0C:9C:E7:04","sha256":"0F:82:53:D0:99:D7:01:08:26:C1:41:13:0D:2D:07:9A:60:4C:F8:33:7E:5C:69:F7:B3:B4:0D:E5:BE:E9:37:27"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: safepal.greenbergglusker.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:36:57 GMT\r\ncontent-type: text/html\r\ncontent-length: 584\r\nlast-modified: Mon, 26 Jan 2026 10:01:46 GMT\r\netag: \"69773b8a-248\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":584,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"1bc884b4eaa30e91b01416c7f90c1831","sha1":"583185b91ac3a3f06b3e412da511b84c2c5263c1","sha256":"2715e4c89db9ddfc2a19d7e18e0fbebca445d86ae679ab176a2763b31319355b","sha512":"6de1110b49f6ebc6acb31181dbf2e33a4c8fe5df3c4bb396431ec33381c691a0e416ee9f3eccac3277c890cd187aef5c21ca03f6f40024dc3e465c799904d535","ssdeep":"","tlshash":"6bf0ac4294b04a19633452042ce0f9058e8b9f56c60a4881b0e651af4fd4f8accdf46c","first_seen":"2026-02-03T20:37:26.88464Z","last_seen":"2026-02-03T20:37:26.88464Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1368,"timings":{"blocked":550,"dns":10,"connect":266,"send":0,"wait":266,"receive":0,"ssl":274},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"safepal.greenbergglusker.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.greenbergglusker.net/assets/index-CoUbs3VG.js","fqdn":"safepal.greenbergglusker.net","domain":"greenbergglusker.net","tld":"net"},"ip":{"addr":"102.204.223.66","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepal.greenbergglusker.net/","date":"2026-02-03T20:36:58.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.greenbergglusker.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 20 Jan 2026 00:42:35 GMT","end":"Mon, 20 Apr 2026 00:42:34 GMT"},"fingerprint":{"sha1":"05:CF:72:94:AC:19:80:94:D0:AA:A8:A9:A8:DB:A4:6B:0C:9C:E7:04","sha256":"0F:82:53:D0:99:D7:01:08:26:C1:41:13:0D:2D:07:9A:60:4C:F8:33:7E:5C:69:F7:B3:B4:0D:E5:BE:E9:37:27"}}},"request":{"raw":"GET /assets/index-CoUbs3VG.js HTTP/1.1\r\nHost: safepal.greenbergglusker.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.greenbergglusker.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:36:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 26 Jan 2026 10:01:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69773b8a-4badce\"\r\nexpires: Wed, 04 Feb 2026 08:36:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4959694,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43372)","md5":"34fab5abbd2734701fcf3519ae5b957a","sha1":"1c2c2ff87094b3b37531e268ef254c31a4ffa1eb","sha256":"c9420e24945c0f4eb983d24171c7c79ecf195d3b28d7ef141d762e2f4edef5b1","sha512":"3286a9a0b2b0959b50964016bed8393c32cb3eeb0a16ec3541234576a051ccf77302272fc8f00c3e6a637996bc7e6c82e0c6b7c68210eb4a6d10f2765ffc5773","ssdeep":"24576:7oCery8NOxDdrVh6NMUtqtSG0C5J8ukRo2b2T+k4LI20lHOo:7oCery8NOxDdrVyMUtqtSG0EJ8ukRo2G","tlshash":"93253adc7651742243a325f0047f040fa33a291da84e9968ba99d4ea7cfd44e267bf7c","first_seen":"2026-02-03T20:37:26.886641Z","last_seen":"2026-02-03T20:37:26.886641Z","times_seen":1,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":541,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"safepal.greenbergglusker.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"safepal.greenbergglusker.net/ws","fqdn":"safepal.greenbergglusker.net","domain":"greenbergglusker.net","tld":"net"},"ip":{"addr":"102.204.223.66","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://safepal.greenbergglusker.net/","date":"2026-02-03T20:37:01.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.greenbergglusker.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 20 Jan 2026 00:42:35 GMT","end":"Mon, 20 Apr 2026 00:42:34 GMT"},"fingerprint":{"sha1":"05:CF:72:94:AC:19:80:94:D0:AA:A8:A9:A8:DB:A4:6B:0C:9C:E7:04","sha256":"0F:82:53:D0:99:D7:01:08:26:C1:41:13:0D:2D:07:9A:60:4C:F8:33:7E:5C:69:F7:B3:B4:0D:E5:BE:E9:37:27"}}},"request":{"raw":"GET /ws HTTP/1.1\r\nHost: safepal.greenbergglusker.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://safepal.greenbergglusker.net\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: rLdc8ytb+zrWB87fQGnV4w==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Tue, 03 Feb 2026 20:37:02 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: LOZcaHxlJkEHMvHZp1Fq3Bfo9mE=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-21T03:30:44.060836Z","times_seen":18005470,"resource_available":true,"data":null}},"time_used":817,"timings":{"blocked":0,"dns":1,"connect":268,"send":0,"wait":270,"receive":0,"ssl":277},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"safepal.greenbergglusker.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.greenbergglusker.net/assets/ljxdd70esz0db0efhb2c4koa00ncn0av-DptKRBOR.png","fqdn":"safepal.greenbergglusker.net","domain":"greenbergglusker.net","tld":"net"},"ip":{"addr":"102.204.223.66","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.greenbergglusker.net/","date":"2026-02-03T20:37:01.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.greenbergglusker.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 20 Jan 2026 00:42:35 GMT","end":"Mon, 20 Apr 2026 00:42:34 GMT"},"fingerprint":{"sha1":"05:CF:72:94:AC:19:80:94:D0:AA:A8:A9:A8:DB:A4:6B:0C:9C:E7:04","sha256":"0F:82:53:D0:99:D7:01:08:26:C1:41:13:0D:2D:07:9A:60:4C:F8:33:7E:5C:69:F7:B3:B4:0D:E5:BE:E9:37:27"}}},"request":{"raw":"GET /assets/ljxdd70esz0db0efhb2c4koa00ncn0av-DptKRBOR.png HTTP/1.1\r\nHost: safepal.greenbergglusker.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.greenbergglusker.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:37:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 26 Jan 2026 10:01:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69773b8a-d2fd\"\r\nexpires: Thu, 05 Mar 2026 20:37:01 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54013,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 276 x 335, 8-bit/color RGBA, non-interlaced","md5":"3d0421754ad7c8abf94b46aaf9265c1b","sha1":"b4bd495c5d19e1df325f881ff07772ae441a11c1","sha256":"c36c42e77a6ca32a005982ed11cae18acf6b42fe16df15875c038de5c38f14ab","sha512":"c14680da69937ff082257e1314dd4461ea4b5c1dc9141178ef848824bd5595763bbf0804b96d8d2c9fde928d5df061ab8f367a95c6f82beb2fbf5e583c83ee92","ssdeep":"1536:4FG0lGitPvXf6o+fnV2QsqLC8mE+EV5tk:JqPvSncQhLC3EtS","tlshash":"c33302eefeb56d40387f46740b7e121792b4f069ec5449ac94ea4ac4288dbee54e41c3","first_seen":"2025-09-09T17:46:38.398314Z","last_seen":"2026-02-03T20:37:26.891253Z","times_seen":2,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"safepal.greenbergglusker.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.greenbergglusker.net/assets/icon_googlePlay-CnVi1xKe.png","fqdn":"safepal.greenbergglusker.net","domain":"greenbergglusker.net","tld":"net"},"ip":{"addr":"102.204.223.66","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.greenbergglusker.net/","date":"2026-02-03T20:37:01.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.greenbergglusker.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 20 Jan 2026 00:42:35 GMT","end":"Mon, 20 Apr 2026 00:42:34 GMT"},"fingerprint":{"sha1":"05:CF:72:94:AC:19:80:94:D0:AA:A8:A9:A8:DB:A4:6B:0C:9C:E7:04","sha256":"0F:82:53:D0:99:D7:01:08:26:C1:41:13:0D:2D:07:9A:60:4C:F8:33:7E:5C:69:F7:B3:B4:0D:E5:BE:E9:37:27"}}},"request":{"raw":"GET /assets/icon_googlePlay-CnVi1xKe.png HTTP/1.1\r\nHost: safepal.greenbergglusker.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.greenbergglusker.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:37:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 26 Jan 2026 10:01:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69773b8a-4394\"\r\nexpires: Thu, 05 Mar 2026 20:37:01 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17300,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 464 x 138, 8-bit/color RGBA, non-interlaced","md5":"c4282a5f16443fd4493ced29810ef78d","sha1":"350cb5059ba98aa2305ba0d959fec205c30d0f86","sha256":"7036016f1b71023def76c780104605b32a3f61bcf0bbc4e851b58ddef0582f01","sha512":"e28c604dd911462fbf0ac9af63308a814d7b91e6c08a6f87007543202c41659a2a22aec0506a1d6d8e2fdc0b761d661451d3852d2c0ffad1268435476bc4e849","ssdeep":"384:z2Kq8TbzyoamF27o1/nvB763ZjoDrI2Ppv4vvIARoWx/O1pd3Z:zgG+oamM01/yZSxPpv4vwARXx/+dJ","tlshash":"4a72cf1b7758a4d276234b742ce941224e478cf784e34a3ee7ba01a31f497d75e8a8c8","first_seen":"2023-04-08T20:47:40Z","last_seen":"2026-08-19T22:47:22.857273Z","times_seen":331,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"safepal.greenbergglusker.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.greenbergglusker.net/assets/index-BXO0Nt0w.css","fqdn":"safepal.greenbergglusker.net","domain":"greenbergglusker.net","tld":"net"},"ip":{"addr":"102.204.223.66","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepal.greenbergglusker.net/","date":"2026-02-03T20:36:58.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.greenbergglusker.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 20 Jan 2026 00:42:35 GMT","end":"Mon, 20 Apr 2026 00:42:34 GMT"},"fingerprint":{"sha1":"05:CF:72:94:AC:19:80:94:D0:AA:A8:A9:A8:DB:A4:6B:0C:9C:E7:04","sha256":"0F:82:53:D0:99:D7:01:08:26:C1:41:13:0D:2D:07:9A:60:4C:F8:33:7E:5C:69:F7:B3:B4:0D:E5:BE:E9:37:27"}}},"request":{"raw":"GET /assets/index-BXO0Nt0w.css HTTP/1.1\r\nHost: safepal.greenbergglusker.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.greenbergglusker.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:36:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 10:01:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69773b8a-7f9ea\"\r\nexpires: Wed, 04 Feb 2026 08:36:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":522730,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f6b335ac53a1f5223234d05f4732b124","sha1":"b8c1e4930134ad0a39863fbd5a952c3dbc704fdb","sha256":"f53163288cd9b11e19dc8dd4061ab901141fb8e18f738790a06db1cd7df93e6a","sha512":"081d90300c6943bbeb6a77673ef9207379b0268c5edf54635fdf056d710f88f39b9cf77055c4a989e57b0673258d640142afe0f2c15162d3e46ab3ab0f5e46f8","ssdeep":"3072:lUWMcixZld9Q2oKA5TemZNIClDsIxuVS65KU5I:zMcixbdlqTemZxsa65KU5I","tlshash":"fcb4c861b698103cfb27e5797796b6dcb12ce512da42cea5f20171298dc37f3227270a","first_seen":"2026-02-03T20:37:26.895813Z","last_seen":"2026-02-03T20:37:26.895813Z","times_seen":1,"resource_available":false,"data":null}},"time_used":849,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":849,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"safepal.greenbergglusker.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.greenbergglusker.net/favicon.png","fqdn":"safepal.greenbergglusker.net","domain":"greenbergglusker.net","tld":"net"},"ip":{"addr":"102.204.223.66","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.greenbergglusker.net/","date":"2026-02-03T20:37:00.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.greenbergglusker.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 20 Jan 2026 00:42:35 GMT","end":"Mon, 20 Apr 2026 00:42:34 GMT"},"fingerprint":{"sha1":"05:CF:72:94:AC:19:80:94:D0:AA:A8:A9:A8:DB:A4:6B:0C:9C:E7:04","sha256":"0F:82:53:D0:99:D7:01:08:26:C1:41:13:0D:2D:07:9A:60:4C:F8:33:7E:5C:69:F7:B3:B4:0D:E5:BE:E9:37:27"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: safepal.greenbergglusker.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.greenbergglusker.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:37:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 26 Jan 2026 10:01:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69773b89-195d\"\r\nexpires: Thu, 05 Mar 2026 20:37:01 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6493,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"fd4cabac10057ad8b961c1b0fa3c619a","sha1":"cd5f8f389e684d37e7976a34f5291079ec9f2090","sha256":"c2ed6a23db96a8af3a216d1a37cb7eae51a98f1c6c433d38b34ff3c6e797a61d","sha512":"92e8e7cc8fafce82c793fe71fcf679765ca2cbc589e6f969be13f97c21f373ebe03f183b45263fa3d5686c73f0b6b4e651d004ca232d44816e592ed51f688138","ssdeep":"192:nSqx0srQLzEfN8hDI1y67k8WRzSuE4ye9Aa1To50uM0iW:SYrD8hDky674EJepiG0","tlshash":"afd1b268e16099e7fe8c8176410870253b36257393abebbff80c546c61fb575ee0ba40","first_seen":"2026-02-03T20:37:26.897831Z","last_seen":"2026-04-12T16:28:51.081638Z","times_seen":3,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"safepal.greenbergglusker.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.greenbergglusker.net/assets/icon_appStore-b8n-RAFa.png","fqdn":"safepal.greenbergglusker.net","domain":"greenbergglusker.net","tld":"net"},"ip":{"addr":"102.204.223.66","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.greenbergglusker.net/","date":"2026-02-03T20:37:01.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.greenbergglusker.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 20 Jan 2026 00:42:35 GMT","end":"Mon, 20 Apr 2026 00:42:34 GMT"},"fingerprint":{"sha1":"05:CF:72:94:AC:19:80:94:D0:AA:A8:A9:A8:DB:A4:6B:0C:9C:E7:04","sha256":"0F:82:53:D0:99:D7:01:08:26:C1:41:13:0D:2D:07:9A:60:4C:F8:33:7E:5C:69:F7:B3:B4:0D:E5:BE:E9:37:27"}}},"request":{"raw":"GET /assets/icon_appStore-b8n-RAFa.png HTTP/1.1\r\nHost: safepal.greenbergglusker.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.greenbergglusker.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:37:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 26 Jan 2026 10:01:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69773b8a-36b6\"\r\nexpires: Thu, 05 Mar 2026 20:37:01 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14006,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 464 x 138, 8-bit/color RGBA, non-interlaced","md5":"89f0eb0533a76fcf8a2714e6945cb344","sha1":"faf2cd0dc10a9f06388f51998f399732e901f61b","sha256":"8dc4749e2ea6917da79d553571aadc8ab4dff908a1b48bb2582be80247aa2213","sha512":"c01e2980fafe9dfa311c7b9f1eeeca0ca6c088b403e64a77c9dd52d055d9917e36d59637031b361e600f390cf5bc8619a74c1f1dfa0ac8e03903e6431a23fba5","ssdeep":"384:8JnCVmzZDKfQ56yFVHuhMrBRPWt+4NNaNarrGlHXvUJycNELDC4xM:8FCVmz9KI56yzo4Pydywriuyc+LDpxM","tlshash":"5e52c066f705b28253384d7086a7c32cbc3ec2548a11b9f998df90d52f6172e7ac586d","first_seen":"2023-04-08T20:47:40Z","last_seen":"2026-08-19T22:47:22.809982Z","times_seen":330,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"safepal.greenbergglusker.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.greenbergglusker.net/index-bg.png","fqdn":"safepal.greenbergglusker.net","domain":"greenbergglusker.net","tld":"net"},"ip":{"addr":"102.204.223.66","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepal.greenbergglusker.net/","date":"2026-02-03T20:37:01.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.greenbergglusker.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 20 Jan 2026 00:42:35 GMT","end":"Mon, 20 Apr 2026 00:42:34 GMT"},"fingerprint":{"sha1":"05:CF:72:94:AC:19:80:94:D0:AA:A8:A9:A8:DB:A4:6B:0C:9C:E7:04","sha256":"0F:82:53:D0:99:D7:01:08:26:C1:41:13:0D:2D:07:9A:60:4C:F8:33:7E:5C:69:F7:B3:B4:0D:E5:BE:E9:37:27"}}},"request":{"raw":"GET /index-bg.png HTTP/1.1\r\nHost: safepal.greenbergglusker.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.greenbergglusker.net/assets/index-BXO0Nt0w.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:37:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 26 Jan 2026 10:01:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69773b89-af9f\"\r\nexpires: Thu, 05 Mar 2026 20:37:01 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44959,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 375 x 812, 8-bit colormap, non-interlaced","md5":"b507caba9b57d640c2523428dd2480d8","sha1":"5865ce41c0ab72dcc7a855c4ac0e6a5bc3c749ae","sha256":"0e71f71fc510f6882aa607daf0ba6a460dca731ec22081126e9ac3983d708680","sha512":"4acef8a666cdc1b6cb7fd05869e5d2743182d1944484e186977dc7c0a9bdf0a13dc62d9dd7543c41e9d2f033f22ef12f9c4947476dfce9bdfbb6497b46600fd9","ssdeep":"768:nUMa0Ewtx/y+glGSs1+uFuJBsciyYREkkl7EjhuFKU5HxjMJSOz4A/nZR65zCqWw:nUMaHCgGh4/sciyYekAGSR5HxbOz4A/G","tlshash":"9f1302384dae846df34f7111b6a579d1bc84aed1839aeef5ce7f7102c008407b2a82e5","first_seen":"2026-02-03T20:37:26.90081Z","last_seen":"2026-04-12T16:28:51.082198Z","times_seen":3,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"safepal.greenbergglusker.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepal.greenbergglusker.net/assets/Poppins-BR-GMF0G.ttf","fqdn":"safepal.greenbergglusker.net","domain":"greenbergglusker.net","tld":"net"},"ip":{"addr":"102.204.223.66","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://safepal.greenbergglusker.net/","date":"2026-02-03T20:37:01.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepal.greenbergglusker.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 20 Jan 2026 00:42:35 GMT","end":"Mon, 20 Apr 2026 00:42:34 GMT"},"fingerprint":{"sha1":"05:CF:72:94:AC:19:80:94:D0:AA:A8:A9:A8:DB:A4:6B:0C:9C:E7:04","sha256":"0F:82:53:D0:99:D7:01:08:26:C1:41:13:0D:2D:07:9A:60:4C:F8:33:7E:5C:69:F7:B3:B4:0D:E5:BE:E9:37:27"}}},"request":{"raw":"GET /assets/Poppins-BR-GMF0G.ttf HTTP/1.1\r\nHost: safepal.greenbergglusker.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safepal.greenbergglusker.net/assets/index-BXO0Nt0w.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Feb 2026 20:37:01 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 256920\r\nlast-modified: Mon, 26 Jan 2026 10:01:46 GMT\r\netag: \"69773b8a-3eb98\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":256920,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 15 names, Microsoft, language 0x409, Copyright (c) 2014 Indian Type Foundry (info@indiantypefoundry.com)PoppinsRegular2.000;ITFO;Popp","md5":"e212f84086965da44a6c84f3d9a683a4","sha1":"58ca484f2ec5b8817a63136af362e1db1d29d49e","sha256":"4554cfac77e8cefa48f89ffcd4f1705f7c02ee34bd9b25415d1208065e4edb52","sha512":"2fbe3f5c702783f5e64ff1438f6cbc6fbe01d04a200cd4a589ac2630cfb158959d8af47f2310d764b6807cba3c348822414803756bd668aa02c3a9b68cfbd69b","ssdeep":"3072:WXR0+hO8o9KyyyRfW1nB37vVzmHAoPsApxuv1fzvkpJfn+aPFJENNjFuzKM/gXgK:qR0+hO8o97W1BJz5oPsAZmaP8NNjiFK","tlshash":"06448d91e56edf49db60ac3654376327baacf0356d9219a3c24f3718f4e20e016b21db","first_seen":"2023-04-25T17:00:56Z","last_seen":"2026-08-19T21:40:53.908662Z","times_seen":588,"resource_available":false,"data":null}},"time_used":831,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":538,"receive":293,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"safepal.greenbergglusker.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}