{"report_id":"ad0d40e8-625f-47cc-b9df-72ba7fcf73e0","version":6,"status":"done","tags":[],"date":"2026-05-24T06:19:59Z","url":{"schema":"http","addr":"safecapitalis.cyou","fqdn":"safecapitalis.cyou","domain":"safecapitalis.cyou","tld":"cyou"},"ip":{"addr":"172.67.185.41","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"safecapitalis.cyou/","fqdn":"safecapitalis.cyou","domain":"safecapitalis.cyou","tld":"cyou"},"title":"Interpol","dom":{"size":119937,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (61489)","md5":"c425a6c06443827cbdff907cf0a527cb","sha1":"9d31eb8b0bbc481d3be0bb52464d3bd5d86350d0","sha256":"9b75454c8a2d9527ecdfdf8b279d39ef8a772094339590b9cbb9c49b2132db12","sha512":"f69325fcc810c69b13de3fab761ac3ce233ba34201b862bdf0f37192d64937501b3cfbcc748475340759cce163dad60ad293baaf3269744d0500a0c37309fc12","ssdeep":"1536:6ZRTksPSRIEIEBa4QuoAPJRfgXTqsLhen1UWxuVmIvlHKNE80soUvQf3Tz6CbDZj:KbVqJgqYhCrukr6","tlshash":"fac3cc23425932231537c3d530a95b77e2969d1fbaa30a013edcd7f62feaca0725b149","dom_hash":"domhash5737d4bcc9ca92ee19ac43328cfddd64","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"safecapitalis.cyou","fqdn":"safecapitalis.cyou","domain":"safecapitalis.cyou","tld":"cyou"},"ip":{"addr":"172.67.185.41","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-28T06:19:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-24T06:19:37Z","timestamp":1779603577,"ip_dst":{"addr":"104.26.0.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":55202,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO External IP Address Lookup Domain (get .geojs .io) in TLS SNI","source":"{\"timestamp\":\"2026-05-24T06:19:37.899930+0000\",\"flow_id\":327244706323262,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.52\",\"src_port\":55202,\"dest_ip\":\"104.26.0.100\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2039595,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (get .geojs .io) in TLS SNI\",\"category\":\"Device Retrieving External IP Address Detected\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_10_28\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2025_04_17\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_10_28\"]}},\"tls\":{\"sni\":\"get.geojs.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":914,\"bytes_toclient\":3507,\"start\":\"2026-05-24T06:19:37.891710+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"safecapitalis.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-17T22:18:09.532627Z","alert_count":0,"request_count":2,"received_data":93272,"sent_data":1119,"comment":"","tags":null,"fingerprints":null},{"fqdn":"get.geojs.io","ip":{"addr":"104.26.0.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-18","domain_rank":99948,"first_seen":"2017-03-30T18:44:25Z","last_seen":"2026-05-22T04:32:57.668668Z","alert_count":0,"request_count":1,"received_data":974,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-17T22:21:01.756487Z","alert_count":0,"request_count":1,"received_data":5761,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"safecapitalis.cyou","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-21","domain_rank":0,"first_seen":"2026-05-24T06:18:35.059396Z","last_seen":"2026-05-24T06:18:35.059396Z","alert_count":14,"request_count":14,"received_data":1397489,"sent_data":6252,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"safecapitalis.cyou/js/jquery-3.6.0.min.js","fqdn":"safecapitalis.cyou","domain":"safecapitalis.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d61e1cd8875e294b853fae82b39d2dee","sha1":"0f7d51d4a1d4ce1cf47dd758e26071dafa938c2d","sha256":"d09e227d3d34e12735eb6b0e5af9e57123219aa111b509004f1237f8c0d03e72","sha512":"2da0206547f311e79bf7682fbdb7d22863ed94fa29d45c9c39bc4958fd3d7e21822c99792c86ad806b1c2efb07c8b34b71439be136778cba4a579da6bf685453","ssdeep":"1536:uLiM6nGLjLLdzN4bx60BW56Tqoam1UO/sm683CbouED6dB1iu81u86xiWzx:WnNO/sm6ZnZijciWzx","tlshash":"dc9319ddb2c7b12207a771b9007f510bf2361959280d8450f169e8e9bc79b8a827bf7d","size":89138,"data":"","first_seen":"2024-09-19T19:52:06.656293Z","last_seen":"2026-06-05T06:03:30.338863Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safecapitalis.cyou/js/utils.js","fqdn":"safecapitalis.cyou","domain":"safecapitalis.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"41e291dfd45560d2d4fb659a40ca4c56","sha1":"3792bce8f036876641cc14702b1f6a26e6d0d44d","sha256":"8abb51715ec9b4b8587b197b320ba4b6b0092234563b2c72fba42583810ef0da","sha512":"7521362194cc5073e616d9bd9701b5885216aef6da96e497cd08f85a5cf6fa94d678bd2bafa7e0860440cb7d85725d907f88156ee6d731af1d6a18a6335ee0cb","ssdeep":"3072:7XEe8tABjO03k4Pc03C4P0IMOx2EZDmXmoLGYAIrBm6nRTvUQL+D4tQrxaySCkKU:7Xwu59hZDmXmod1","tlshash":"6634deebd63c9736a5d97b35968eb3cd5a8cbca3c848527826c3b54f53788e0706c205","size":248044,"data":"","first_seen":"2024-06-06T14:03:54Z","last_seen":"2026-06-03T08:03:02.414504Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safecapitalis.cyou/","fqdn":"safecapitalis.cyou","domain":"safecapitalis.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"208e0753958a28200688ac0e220852d3","sha1":"a556d5717b0c5c0a5401777d844e2279dfc3ef4a","sha256":"7a7c578b07cd321456ba742ae359b97773425277361996e22c95c25a26b024b3","sha512":"d344f7109d2fb360ef20e9c02573fed3acc82554de27cdac4e6f574235112df18c68ba89d606d17fe9331c3acab823798f44e8b11c05409a89b496cadfd6c2c2","ssdeep":"","tlshash":"9211ed0089da0836130572ebebc3a586b06e613bf480a79c312c07ad7fc3018e17a7ce","size":994,"data":"","first_seen":"2026-05-24T06:18:38.91414Z","last_seen":"2026-05-24T06:20:25.935203Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safecapitalis.cyou/","fqdn":"safecapitalis.cyou","domain":"safecapitalis.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f0f92596af531f69eaea0c055e5d2014","sha1":"26440bc4d283041e27e19be74951ade3016e8683","sha256":"08198b5afd62fdacd8c239ff72c7c5f1c06d6099176d38c8cc3a4bf30fa33879","sha512":"823224c07332a34527d580bc6c592a1a316845d60c67da311808332c08b163c7f306f59f56a425fcc51c0ee1a363357169e847aec5bdf47ca813fc269d948e37","ssdeep":"","tlshash":"ed01d677167f4a3002ebd29f67e75f693571000b3948cb483eac86d31f6ad8560b92d5","size":798,"data":"","first_seen":"2025-05-30T05:55:11.533844Z","last_seen":"2026-05-24T06:20:25.936435Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safecapitalis.cyou/js/ph.js","fqdn":"safecapitalis.cyou","domain":"safecapitalis.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"211ca8725520ee55ea79b9c3a0256a6f","sha1":"e2d7c898bc581bc92049cbf30e27174d75e405d9","sha256":"d46be711c2c237369137e04e5703bb1fdc2354158512581421895ecf8e94b087","sha512":"005138c8b03d8a32785a3153b547a73b268d6855fe60fe695e95bd5da845c2f6334b95d391190b3a97f37bd52c1c5f4b75e6980053bd86f3f15df109c6cd45ef","ssdeep":"192:hOLjLyzm6x3xtHji6rUzVFilirUZMQbdd5dh0x:0Lj23Hji6raTili4Z1dnhW","tlshash":"26e1751411bb18b54233d1fa7fdb670161e0012f2c08db29386c1a8e2fd5d656af6afe","size":6784,"data":"","first_seen":"2026-05-24T06:18:38.850132Z","last_seen":"2026-05-24T06:20:25.930424Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safecapitalis.cyou/js/intlTelInput.js","fqdn":"safecapitalis.cyou","domain":"safecapitalis.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c79a1dd02df4c628a56f3835471fc932","sha1":"f2fa8f443e3b91187c8c786c5242c60a65364bf9","sha256":"b31fd662513a7c7f7c90c8df2a060f319219e380c774326322034acb0d7b2116","sha512":"a245ebd8efa3f512a4aeac9c3fc88fe7cb2593d1bd8e67225f88b01dd52ef866dd44adf931fb20913b35877ca81f630d48587cf9dcc21749f22d376f45023594","ssdeep":"768:AqDnUfAow5D45YiLpJonAuN1dlfJLKgHJAV:lo5JoAuN1U","tlshash":"3cf2c89d7344533be8fac196b89b014b2aee35141a84c89c787dcfcc4aa8ed5b567334","size":34655,"data":"","first_seen":"2024-06-06T14:03:54Z","last_seen":"2026-06-03T08:03:02.418365Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"safecapitalis.cyou/css/intlTelInput.min.css","fqdn":"safecapitalis.cyou","domain":"safecapitalis.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safecapitalis.cyou/","date":"2026-05-24T06:19:37.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safecapitalis.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 08:54:11 GMT","end":"Wed, 19 Aug 2026 08:54:10 GMT"},"fingerprint":{"sha1":"2E:7F:31:44:FD:91:7E:72:AE:CB:38:08:04:DF:06:40:54:EC:E8:0C","sha256":"FD:1F:E9:9C:D4:E1:26:0B:A2:6F:78:23:AF:30:67:A4:07:64:F0:85:F1:68:23:B3:EC:14:72:D8:C5:C2:5F:E4"}}},"request":{"raw":"GET /css/intlTelInput.min.css HTTP/1.1\r\nHost: safecapitalis.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safecapitalis.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 24 May 2026 06:19:37 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Jul 2025 13:11:52 GMT\r\npriority: u=2,i=?0\r\netag: W/\"686bc798-62b9\"\r\ncontent-encoding: gzip\r\nage: 85\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mIBp4Y5uu8l%2FcIBjJPUnBjAvWsvRs%2BtvEdNGT1q8d53RygWVlpj6QXK28uwVyEBXvjRXEM4mQvT9mAG3pSeZDh0w%2BhDcWrtrywY%2Fc8AsoxLHzSrqErR0k4HL2A1%2BC706Kemuo%2Bc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00a30981fb7712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25273,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"7b59bc0c168e5d5614f474cf91d2caf0","sha1":"0f0495643a0107d88e7dd3fba89d94faa5854fcb","sha256":"932515470ea66d6b80de7a496f83013fb626dba1e41c12355a59e3a464d854e1","sha512":"a4c7a8e1e8d0d2ff637c136d2c6e100a0d6033ec00d19690c62a030682b915a8ba990dabe132705a9fe525020b08a6ccb203cd6626f5694a01b787a41f929cdb","ssdeep":"384:HzITF7FWKTmwAmDQTeIcQeIWi7mZlsaAaniXlvhdq:HqF7FWK/Hi0","tlshash":"75b235678bb32945b92bf2a1196406a237375c0bf81a4f2d63d639bddf490e014f37a1","first_seen":"2026-05-24T06:18:38.908559Z","last_seen":"2026-05-24T06:20:25.919165Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"safecapitalis.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safecapitalis.cyou/images/logo.png","fqdn":"safecapitalis.cyou","domain":"safecapitalis.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safecapitalis.cyou/","date":"2026-05-24T06:19:37.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safecapitalis.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 08:54:11 GMT","end":"Wed, 19 Aug 2026 08:54:10 GMT"},"fingerprint":{"sha1":"2E:7F:31:44:FD:91:7E:72:AE:CB:38:08:04:DF:06:40:54:EC:E8:0C","sha256":"FD:1F:E9:9C:D4:E1:26:0B:A2:6F:78:23:AF:30:67:A4:07:64:F0:85:F1:68:23:B3:EC:14:72:D8:C5:C2:5F:E4"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: safecapitalis.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safecapitalis.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 24 May 2026 06:19:37 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Jul 2025 13:11:52 GMT\r\npriority: u=4,i=?0\r\netag: W/\"686bc798-5caa\"\r\ncontent-encoding: gzip\r\nage: 85\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FPSRXDxXkFoFO56wepd%2F987saVft%2FxfoYDQs4f0tM%2B9HaMaTmK9oezfvL3HumPZKilgAPbval%2Bmi571oDy9mibGda9g84eanHttoPjvONXu8ogOxrXm%2Fe5xKlln2E20YywzeYZA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00a30981fbb712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23722,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 184 x 169, 8-bit/color RGBA, non-interlaced","md5":"aefc362c713f713629560b6af24f9847","sha1":"b4291bb7d59f367073bf478df5457fcad02918e4","sha256":"8e58401464a02b7abb4f7d853b068e99111c8014a091b1904678f823a24cb07c","sha512":"17d0792109869f14143fc5ba07f69bfbb45dffccc4cd25c7c098692150cef0fd9bc8be9b81fb5def29aea3096a5462fa898c7763aee661d452ae92f054cc0093","ssdeep":"384:iLLHZSsJUxzmuIQHeBTnSRTVKnoI5VHqA6D3PWRy2AFWGuwF/RUrguFt+d1:W1LSxz2Q+o68bhYzKRo1ef","tlshash":"98b2e19a52c268067604f8bd535130d9fe844efedfb08666bef4069781532b12fef099","first_seen":"2026-04-02T14:57:47.054999Z","last_seen":"2026-05-24T06:20:25.921217Z","times_seen":4,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"safecapitalis.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safecapitalis.cyou/images/woman.png","fqdn":"safecapitalis.cyou","domain":"safecapitalis.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safecapitalis.cyou/","date":"2026-05-24T06:19:37.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safecapitalis.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 08:54:11 GMT","end":"Wed, 19 Aug 2026 08:54:10 GMT"},"fingerprint":{"sha1":"2E:7F:31:44:FD:91:7E:72:AE:CB:38:08:04:DF:06:40:54:EC:E8:0C","sha256":"FD:1F:E9:9C:D4:E1:26:0B:A2:6F:78:23:AF:30:67:A4:07:64:F0:85:F1:68:23:B3:EC:14:72:D8:C5:C2:5F:E4"}}},"request":{"raw":"GET /images/woman.png HTTP/1.1\r\nHost: safecapitalis.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safecapitalis.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 24 May 2026 06:19:37 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Jul 2025 13:11:52 GMT\r\npriority: u=4,i=?0\r\netag: W/\"686bc798-bdb4\"\r\ncontent-encoding: gzip\r\nage: 85\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M38hw32pxy9CF2l%2F09N4NyS2gZxWtCZl5mJi7slR51HljymwZI9f7pdqnSOs8Lz4Viz97BhdylPb%2B59T096oMbbtMLZwkoLdXApmn6PXkPYcrkFLVQLVPir7XRRxChT9qhzAcbE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00a30981fbc712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48564,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"7125502ea285afaa7383b4977a91c481","sha1":"6319d36f1c2c1d70709ac283a85b4c933fec3b7f","sha256":"64aae7cf764479fa7cbcfead20324e45d06162f66f44813414a3bd0a616c0513","sha512":"d7843821a96f781bd4927063e22a9615e6d58c9c44317feabd7f2ce9dfb027cc6cc3313fa605e1d1b9e8224c6d079d47fbc30f6bcea657f31f0058a9aec21139","ssdeep":"768:LHBdqFfUA+HYvcnMV2izDaMYNBO1PGbylttHMO6qREvUoXB+fwrRvUH2vS:DBdqaHtQ2iz+MYyYAttHc+EPB+faRcHD","tlshash":"2b23021897f8c58a3255a8fadda3bb532b7815eb9750ef079430c5d2b301ca2853d6c2","first_seen":"2026-04-02T14:57:47.066249Z","last_seen":"2026-05-24T06:20:25.915299Z","times_seen":4,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"safecapitalis.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safecapitalis.cyou/js/ph.js","fqdn":"safecapitalis.cyou","domain":"safecapitalis.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safecapitalis.cyou/","date":"2026-05-24T06:19:37.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safecapitalis.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 08:54:11 GMT","end":"Wed, 19 Aug 2026 08:54:10 GMT"},"fingerprint":{"sha1":"2E:7F:31:44:FD:91:7E:72:AE:CB:38:08:04:DF:06:40:54:EC:E8:0C","sha256":"FD:1F:E9:9C:D4:E1:26:0B:A2:6F:78:23:AF:30:67:A4:07:64:F0:85:F1:68:23:B3:EC:14:72:D8:C5:C2:5F:E4"}}},"request":{"raw":"GET /js/ph.js HTTP/1.1\r\nHost: safecapitalis.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safecapitalis.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 24 May 2026 06:19:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Thu, 21 May 2026 10:12:59 GMT\r\npriority: u=3,i=?0\r\netag: W/\"6a0edaab-1a80\"\r\ncontent-encoding: gzip\r\nage: 85\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dRGex7MrUNbyKpMFEgaVtAJxCkZ5f08LU0REoE%2By7opktKwtdog2WjyeRl1T9H%2BjRjnH0mn%2BYVpG6rW2ZDgxsvMN8eXvZacsj9Vdr%2FAJI349DhF%2BLtWaUNKLRYq0obLMkQrKPCM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00a30981fc6712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6784,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"211ca8725520ee55ea79b9c3a0256a6f","sha1":"e2d7c898bc581bc92049cbf30e27174d75e405d9","sha256":"d46be711c2c237369137e04e5703bb1fdc2354158512581421895ecf8e94b087","sha512":"005138c8b03d8a32785a3153b547a73b268d6855fe60fe695e95bd5da845c2f6334b95d391190b3a97f37bd52c1c5f4b75e6980053bd86f3f15df109c6cd45ef","ssdeep":"192:hOLjLyzm6x3xtHji6rUzVFilirUZMQbdd5dh0x:0Lj23Hji6raTili4Z1dnhW","tlshash":"26e1751411bb18b54233d1fa7fdb670161e0012f2c08db29386c1a8e2fd5d656af6afe","first_seen":"2026-05-24T06:18:38.850132Z","last_seen":"2026-05-24T06:20:25.930424Z","times_seen":3,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"safecapitalis.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safecapitalis.cyou/images/hero-bg.png","fqdn":"safecapitalis.cyou","domain":"safecapitalis.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safecapitalis.cyou/","date":"2026-05-24T06:19:37.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safecapitalis.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 08:54:11 GMT","end":"Wed, 19 Aug 2026 08:54:10 GMT"},"fingerprint":{"sha1":"2E:7F:31:44:FD:91:7E:72:AE:CB:38:08:04:DF:06:40:54:EC:E8:0C","sha256":"FD:1F:E9:9C:D4:E1:26:0B:A2:6F:78:23:AF:30:67:A4:07:64:F0:85:F1:68:23:B3:EC:14:72:D8:C5:C2:5F:E4"}}},"request":{"raw":"GET /images/hero-bg.png HTTP/1.1\r\nHost: safecapitalis.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safecapitalis.cyou/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 24 May 2026 06:19:37 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Jul 2025 13:11:52 GMT\r\npriority: u=4,i=?0\r\netag: W/\"686bc798-7b28c\"\r\ncontent-encoding: gzip\r\nage: 85\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=86QN0dqz6xR7Vqg2zs%2F0NmLvERabyqw%2BTI92nLs7uPjfKGMZ7GKC2c7%2FrueLUJ%2BExCJHQ13xj6QUsMc0Xf4oxg4mEIaW%2F4ozRAVdClqJNmkv4j4Wcuu5jCr98lz2y%2FUruVD9laA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00a3099487b712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":504460,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1140 x 390, 8-bit/color RGBA, non-interlaced","md5":"61c6658d9456b3f0445a5951a64296b1","sha1":"00858004452571da899a282362af90df87768fe8","sha256":"479cb2a8e3ce8f51835a4fe345147762ac90b160aa986a920a30d25bda77096f","sha512":"229e44fa3224760ef87b7c7cb0f3df9dc84cf4b097c1b00eaee6aa7a86848b67fe92af7a38757b5f28c4a8453bfd6fd82e07eee0c78473d74b20419ad3b0dac5","ssdeep":"12288:rkPKC7zgqB7vVINGk8R2DHjrqA/RWBAfv5ccPc:cTcNt2UjmA/RWBATU","tlshash":"beb4230cd437aac102dd44e6387b7905dbfd113ae6dd1bea4520a8998a273b3f211f76","first_seen":"2026-04-02T14:57:47.05298Z","last_seen":"2026-05-24T06:20:25.92353Z","times_seen":4,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"safecapitalis.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safecapitalis.cyou/images/time-bg.png","fqdn":"safecapitalis.cyou","domain":"safecapitalis.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safecapitalis.cyou/","date":"2026-05-24T06:19:37.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safecapitalis.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 08:54:11 GMT","end":"Wed, 19 Aug 2026 08:54:10 GMT"},"fingerprint":{"sha1":"2E:7F:31:44:FD:91:7E:72:AE:CB:38:08:04:DF:06:40:54:EC:E8:0C","sha256":"FD:1F:E9:9C:D4:E1:26:0B:A2:6F:78:23:AF:30:67:A4:07:64:F0:85:F1:68:23:B3:EC:14:72:D8:C5:C2:5F:E4"}}},"request":{"raw":"GET /images/time-bg.png HTTP/1.1\r\nHost: safecapitalis.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safecapitalis.cyou/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 24 May 2026 06:19:37 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Jul 2025 13:11:52 GMT\r\npriority: u=4,i=?0\r\netag: W/\"686bc798-41902\"\r\ncontent-encoding: gzip\r\nage: 85\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=93oLrViwPwx%2B%2FYZcCsbifZKnYzL5T1ljiCIMJmcv3wZs5mQNgPjrA0Rt3z32ZKfjs2crtKcHRix78PTvP0riNuF6UHS3%2BDB%2FSlSbRsynQochzihvBtDHgHrk2tEdceNiy5dcjmA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00a3099487c712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":268546,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 804 x 462, 8-bit/color RGBA, non-interlaced","md5":"9bb4a6b5f3792beb05fdf3c7d2a53955","sha1":"e7d5a87663105e8c8744a0a237fe210ae57065fc","sha256":"138e548f1c06bfaae4ecdf023b8fc2e797d566e645a65d5f5ad2045d16d458a9","sha512":"4f3b857cdbc9e3e5cbb63b18ed34c6bcfe8129a47f171cdb2c6eeaf76e4730d52293a2844fc65380ad57600287c27df43a7fd28dad1ef0248ed03d58bc0c8edc","ssdeep":"3072:aP1TDlMTCnD3pIC9gaJM2sW0YPuPR/iMr4veXRypGtIUu3zX1dF4TRXxUDehGqHY:a12GDaC9vMR/iVqRy8n8d4XxUQGq6sC","tlshash":"e94423b8bdced2c5bb1e9d3595c6707e09a75b6062a0f90532e6016f825934d3fa0fc2","first_seen":"2026-04-02T14:57:47.058766Z","last_seen":"2026-05-24T06:20:25.916588Z","times_seen":4,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"safecapitalis.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_fjbvMwCp504jAa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://safecapitalis.cyou/","date":"2026-05-24T06:19:37.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_fjbvMwCp504jAa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://safecapitalis.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35148\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 23 May 2026 18:26:27 GMT\r\nexpires: Sun, 23 May 2027 18:26:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 42790\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35148,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35148, version 1.0","md5":"668e6f05ea3ddf3faa59b34f42a4a135","sha1":"5bc094f86d855234fcaf2159f5be6ff843876b53","sha256":"c18c15f12fa091b2d893eeeaceaded0ff4eef16507eb721261912d2e3d5bc99d","sha512":"6dbebc2128736ca5203b4ce2b885e2006f3ba22e716035865bcef3dc67e3878dad3fecbb849c24a6b0f432e7386dddec131ce7d315191e62e344e6a06b93a74a","ssdeep":"768:3xtohmguZOL9Pei3wcnMq1qZnndg3GebK5eKaBFdiEL/9eM17PMfGgrsP3h5oQCs:BtoOOWw+qc5yWebKhapiEL/MeAfGoGjr","tlshash":"0df2f23f14964eb2ef3b0d31b6f4e4b5c9be890d23ad8fa8518027735906437b471629","first_seen":"2025-06-02T07:25:03.904113Z","last_seen":"2026-06-12T04:53:27.835539Z","times_seen":106,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":84,"dns":3,"connect":9,"send":0,"wait":9,"receive":8,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get.geojs.io/v1/ip/country.json","fqdn":"get.geojs.io","domain":"geojs.io","tld":"io"},"ip":{"addr":"104.26.0.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://safecapitalis.cyou/","date":"2026-05-24T06:19:37.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geojs.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Apr 2026 07:30:19 GMT","end":"Thu, 16 Jul 2026 08:30:00 GMT"},"fingerprint":{"sha1":"EA:26:97:B0:1C:7B:C8:39:C8:5D:15:E3:1F:A4:D3:61:8E:AB:FB:77","sha256":"96:61:3C:5F:FA:CA:91:8A:37:E7:7F:F9:1A:EE:DC:27:C9:0B:6D:45:1D:7B:3A:4A:D4:8A:19:FB:FF:22:38:02"}}},"request":{"raw":"GET /v1/ip/country.json HTTP/1.1\r\nHost: get.geojs.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://safecapitalis.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safecapitalis.cyou/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 24 May 2026 06:19:37 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: max-age=0, must-revalidate\r\nlast-modified: Sun, 24 May 2026 06:18:12 GMT\r\nx-request-id: 1f035f48b621b36104ab195624cc4e7a-ASH\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ngeojs-backend: ash-01\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 85\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jK6dKl0rPpDevUJbjGBrQnR1Qx9Y45a%2BS56mpoKbcj%2FjtTpi0RnL3G3rtlQdRHlWvp22SLYwd97Gck%2F3tiK3DHkdRd%2BZI68JC6tQOn8s4Ir5JX9W%2FDIstmY1A0x%2FgA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a00a3099f82176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"54400c77b72b40a2e948ef52d4abb096","sha1":"2d4b2d15425f9aa29ecdb2c336390cf078928511","sha256":"be4ef38271c428e15a35e8582e5c7bd3df677b5478f84c323bf42a74a15336bd","sha512":"b499b922309a28a1c41d1b06b3b034eeebccb40c5f40054617adce3098b672fdbc76c59402d65677b635326a4a710da754d03cb79c0e25831fce08bcf6c2e05e","ssdeep":"","tlshash":"4da022ae20820b2ccc20c2eca00b338223c2c202c33f2803c0c03f08c3003ec2000220","first_seen":"2023-08-05T23:07:18Z","last_seen":"2026-06-06T18:12:42.644428Z","times_seen":972,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":20,"dns":1,"connect":3,"send":0,"wait":8,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safecapitalis.cyou/","fqdn":"safecapitalis.cyou","domain":"safecapitalis.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-24T06:19:37.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safecapitalis.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 08:54:11 GMT","end":"Wed, 19 Aug 2026 08:54:10 GMT"},"fingerprint":{"sha1":"2E:7F:31:44:FD:91:7E:72:AE:CB:38:08:04:DF:06:40:54:EC:E8:0C","sha256":"FD:1F:E9:9C:D4:E1:26:0B:A2:6F:78:23:AF:30:67:A4:07:64:F0:85:F1:68:23:B3:EC:14:72:D8:C5:C2:5F:E4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: safecapitalis.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 24 May 2026 06:19:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nf42W5dKtO4osqBX3QBjewqn0sOkvjfb517iCHTqnPalNXA1701OoJkE47K1xyTtE4b5MNb5gfkSIY%2BuS88%2FYBQGR1iRvYCXl9Pq0n9Y4upkv55jxirNEcbbw3V5AJvOENVLhTM%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a00a30964e8cc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39369,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"c14ef8dc1ff8b2a576ab4d9c12ae27cb","sha1":"a286b5388b2356526beb96c8f6d4d844d7e6b200","sha256":"97ed96a6dd7062312821b42af7cd62237c6ef6d7325f84d75393be24f1470644","sha512":"99a0bed9242af086208cd8df31ea76ad49bbd673a8010f8203dec5c7431d9249d0880a151a3875f2385187e0e5fd6a01588d82e6c141946a85e28ac82bcc0922","ssdeep":"768:48PJFHfgXTSHsLhenjhUK9xuVmIOm1mmwPFvm0aDTCErVcgL0k0Ex3y0eamUGCF5:LPJRfgXTqsLhen1UWxuVmIvlHKNE80sE","tlshash":"9503a552bae40333768a2395767b96d1b758e83b7761420238acc1642f86f38d3737d9","first_seen":"2026-05-24T06:18:38.900745Z","last_seen":"2026-05-24T06:20:25.933558Z","times_seen":3,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":17,"dns":1,"connect":1,"send":0,"wait":134,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"safecapitalis.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safecapitalis.cyou/css/main.css","fqdn":"safecapitalis.cyou","domain":"safecapitalis.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safecapitalis.cyou/","date":"2026-05-24T06:19:37.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safecapitalis.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 08:54:11 GMT","end":"Wed, 19 Aug 2026 08:54:10 GMT"},"fingerprint":{"sha1":"2E:7F:31:44:FD:91:7E:72:AE:CB:38:08:04:DF:06:40:54:EC:E8:0C","sha256":"FD:1F:E9:9C:D4:E1:26:0B:A2:6F:78:23:AF:30:67:A4:07:64:F0:85:F1:68:23:B3:EC:14:72:D8:C5:C2:5F:E4"}}},"request":{"raw":"GET /css/main.css HTTP/1.1\r\nHost: safecapitalis.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safecapitalis.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 24 May 2026 06:19:37 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Jul 2025 13:11:52 GMT\r\npriority: u=2,i=?0\r\netag: W/\"686bc798-baa\"\r\ncontent-encoding: gzip\r\nage: 85\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n1edIvgIz8yBIZ8rCMldzMg9LsvZTiralEMX23FN2x%2FxLbnqdFepAtcpKiLKilIh7KAzglwrO9pktbKsPJmDebpqfTDTtWfqbzeGS7QjIwJO9js4shGqsNH4CW%2FtAjRNcgQsVQM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00a30981fb9712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2986,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"3d5251083ac695e6038f7175ecba6c26","sha1":"04a09ec96b17386a3d965802d7b941bfe2becbd1","sha256":"63b8b456c28d1eeb7e031b3dc1e9fe0ffef1a7275f88f5bb39f4f8c807c3fe44","sha512":"fdceb5c77f2c8a7ecd020ce9364b1edccfdda107def254e7f8ad62741e69631b6a601b1ffd6e951e53f974eb1287195e34d9d015fcdef757f55150487eb4e384","ssdeep":"","tlshash":"4d51cbd8e605a005b27b8d74b3a25fa6a74d40529b0787bebff0515cf2899998331fcc","first_seen":"2026-05-24T06:18:38.859465Z","last_seen":"2026-05-24T06:20:25.926484Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"safecapitalis.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safecapitalis.cyou/js/intlTelInput.js","fqdn":"safecapitalis.cyou","domain":"safecapitalis.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safecapitalis.cyou/","date":"2026-05-24T06:19:37.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safecapitalis.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 08:54:11 GMT","end":"Wed, 19 Aug 2026 08:54:10 GMT"},"fingerprint":{"sha1":"2E:7F:31:44:FD:91:7E:72:AE:CB:38:08:04:DF:06:40:54:EC:E8:0C","sha256":"FD:1F:E9:9C:D4:E1:26:0B:A2:6F:78:23:AF:30:67:A4:07:64:F0:85:F1:68:23:B3:EC:14:72:D8:C5:C2:5F:E4"}}},"request":{"raw":"GET /js/intlTelInput.js HTTP/1.1\r\nHost: safecapitalis.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safecapitalis.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 24 May 2026 06:19:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Jul 2025 13:11:52 GMT\r\npriority: u=3,i=?0\r\netag: W/\"686bc798-87c4\"\r\ncontent-encoding: gzip\r\nage: 85\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JcCISok8DWCI6PE4Jqy0oehsvPI%2F2GHhumW709GpUxh9PegvuEfYLhN8dFXBP6hbF2g1uEBE390oSHfTZxJmFEmyqDAaOokvPAAXkTm99IYkbeXyQYt5sckHh67suT6RccGlz4Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00a30981fbd712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34756,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34020), with no line terminators","md5":"c79a1dd02df4c628a56f3835471fc932","sha1":"f2fa8f443e3b91187c8c786c5242c60a65364bf9","sha256":"b31fd662513a7c7f7c90c8df2a060f319219e380c774326322034acb0d7b2116","sha512":"a245ebd8efa3f512a4aeac9c3fc88fe7cb2593d1bd8e67225f88b01dd52ef866dd44adf931fb20913b35877ca81f630d48587cf9dcc21749f22d376f45023594","ssdeep":"768:AqDnUfAow5D45YiLpJonAuN1dlfJLKgHJAV:lo5JoAuN1U","tlshash":"3cf2c89d7344533be8fac196b89b014b2aee35141a84c89c787dcfcc4aa8ed5b567334","first_seen":"2024-06-06T14:03:54Z","last_seen":"2026-06-03T08:03:02.418365Z","times_seen":85,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"safecapitalis.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safecapitalis.cyou/js/jquery-3.6.0.min.js","fqdn":"safecapitalis.cyou","domain":"safecapitalis.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safecapitalis.cyou/","date":"2026-05-24T06:19:37.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safecapitalis.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 08:54:11 GMT","end":"Wed, 19 Aug 2026 08:54:10 GMT"},"fingerprint":{"sha1":"2E:7F:31:44:FD:91:7E:72:AE:CB:38:08:04:DF:06:40:54:EC:E8:0C","sha256":"FD:1F:E9:9C:D4:E1:26:0B:A2:6F:78:23:AF:30:67:A4:07:64:F0:85:F1:68:23:B3:EC:14:72:D8:C5:C2:5F:E4"}}},"request":{"raw":"GET /js/jquery-3.6.0.min.js HTTP/1.1\r\nHost: safecapitalis.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safecapitalis.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 24 May 2026 06:19:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Jul 2025 13:11:52 GMT\r\npriority: u=3,i=?0\r\netag: W/\"686bc798-15c32\"\r\ncontent-encoding: gzip\r\nage: 85\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MoHNC7MRIrM%2BpnHzN71fiQ30px%2BMAIaq%2F5S%2Ff%2FkqhtpljYN%2FyFaqA9OXWOosPfuYBjD4F7l7WHzNtngKdNMvIi8vZR82fNsrCeb44gJ3NKWhKBxIDwo%2B1CFZgsigL%2B01PMWMRQ8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00a30981fbf712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89138,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"d61e1cd8875e294b853fae82b39d2dee","sha1":"0f7d51d4a1d4ce1cf47dd758e26071dafa938c2d","sha256":"d09e227d3d34e12735eb6b0e5af9e57123219aa111b509004f1237f8c0d03e72","sha512":"2da0206547f311e79bf7682fbdb7d22863ed94fa29d45c9c39bc4958fd3d7e21822c99792c86ad806b1c2efb07c8b34b71439be136778cba4a579da6bf685453","ssdeep":"1536:uLiM6nGLjLLdzN4bx60BW56Tqoam1UO/sm683CbouED6dB1iu81u86xiWzx:WnNO/sm6ZnZijciWzx","tlshash":"dc9319ddb2c7b12207a771b9007f510bf2361959280d8450f169e8e9bc79b8a827bf7d","first_seen":"2024-09-19T19:52:06.656293Z","last_seen":"2026-06-05T06:03:30.338863Z","times_seen":55,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"safecapitalis.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_fjbvMwCp504jAa25L7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://safecapitalis.cyou/","date":"2026-05-24T06:19:37.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_fjbvMwCp504jAa25L7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://safecapitalis.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 56456\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 23 May 2026 15:46:32 GMT\r\nexpires: Sun, 23 May 2027 15:46:32 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:35:53 GMT\r\ncontent-type: font/woff2\r\nage: 52385\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":56456,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 56456, version 1.0","md5":"46850c15e809ab974b0e55560bb8a5c7","sha1":"b41958452b39b4de7bca8f3fa2ef25ddf67aa391","sha256":"5bac4fef73dcbc050928b66ca90189c5c161a367cbf359521311fb45261e993c","sha512":"f3acec1346ed8c9efd7d505836761645f110e80971e665926ebc4d84f75e7b1dbe87fe3d5a9a290ff2e70edb22fb7753d8d6de58e0c794b44e82e106eff169b0","ssdeep":"1536:+AYZ2f1ibAY76S4qDdvc0sek4dBuC1YsxdNQrfn9DddELaKE:sc4AYjZDdvwORY+QLSA","tlshash":"364301b507cac1f2c1dbc6667d27d760ed0503a99260a3e34ecf143e7824259d216e7a","first_seen":"2025-07-01T16:24:08.902991Z","last_seen":"2026-05-31T01:51:09.740722Z","times_seen":5,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":142,"dns":3,"connect":23,"send":0,"wait":9,"receive":6,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safecapitalis.cyou/images/flags.png","fqdn":"safecapitalis.cyou","domain":"safecapitalis.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safecapitalis.cyou/","date":"2026-05-24T06:19:37.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safecapitalis.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 08:54:11 GMT","end":"Wed, 19 Aug 2026 08:54:10 GMT"},"fingerprint":{"sha1":"2E:7F:31:44:FD:91:7E:72:AE:CB:38:08:04:DF:06:40:54:EC:E8:0C","sha256":"FD:1F:E9:9C:D4:E1:26:0B:A2:6F:78:23:AF:30:67:A4:07:64:F0:85:F1:68:23:B3:EC:14:72:D8:C5:C2:5F:E4"}}},"request":{"raw":"GET /images/flags.png HTTP/1.1\r\nHost: safecapitalis.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safecapitalis.cyou/css/intlTelInput.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 24 May 2026 06:19:37 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Jul 2025 13:11:52 GMT\r\npriority: u=4,i=?0\r\netag: W/\"686bc798-114c9\"\r\ncontent-encoding: gzip\r\nage: 85\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7SCuZ9%2FMVGFEDeMgU8%2BsNliVWScCr0VghBzCqjCsrpW68JfEwJz4mdGh44K6OydcMq1nOB%2Bx71liR2D2Y2tkQlUzwfqv43w2jSq2WttFzCuLYbpIVMJoFGyx6XVcdMtNiMn%2FXAI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00a3099e8c5712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70857,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 5652 x 15, 8-bit/color RGBA, non-interlaced","md5":"416250f60d785a2e02f17e054d2e4e44","sha1":"21572c9751e5a3dc20395befa0fcb349c32c4811","sha256":"0a012cf808a24573168308916092d2d4bd3f2b4af8e16b59167013cc77acee55","sha512":"cf1e7acf47464f00d206e9149475e22b8ea5a31727fa16344cd151384d850b83ece5e9abe4ac62861dba0dc3d3410955611d94665b60e2faa0c3d7a3d7c88404","ssdeep":"1536:cBBfgWxg7McnRdaRx9krb5LhxHG1gmvlpWUZA1eog3e7xr:Lg+3n3ax9kHV3Wgmdg2A1Y3elr","tlshash":"9763019797adf1d82a92274bef801109ae6c2b3d5d7c1da372cf1d532ae12c306c8586","first_seen":"2023-04-05T15:31:12Z","last_seen":"2026-06-13T10:05:30.472803Z","times_seen":24178,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"safecapitalis.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safecapitalis.cyou/images/logo.png","fqdn":"safecapitalis.cyou","domain":"safecapitalis.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safecapitalis.cyou/","date":"2026-05-24T06:19:38.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safecapitalis.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 08:54:11 GMT","end":"Wed, 19 Aug 2026 08:54:10 GMT"},"fingerprint":{"sha1":"2E:7F:31:44:FD:91:7E:72:AE:CB:38:08:04:DF:06:40:54:EC:E8:0C","sha256":"FD:1F:E9:9C:D4:E1:26:0B:A2:6F:78:23:AF:30:67:A4:07:64:F0:85:F1:68:23:B3:EC:14:72:D8:C5:C2:5F:E4"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: safecapitalis.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safecapitalis.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 24 May 2026 06:19:38 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Jul 2025 13:11:52 GMT\r\npriority: u=6,i=?0\r\netag: W/\"686bc798-5caa\"\r\ncontent-encoding: gzip\r\nage: 85\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nZLaffwInUYyU6KZ2RPqK83CdyYR79KVxgf%2F%2BJmiSVro6IvHCo9SXg%2BCCNC7j9hGCdMhqJW9fHRTnvT2cvFreoqiNumb2%2BXxEOCB%2B5JBUpqJQVqmSioeL%2FmPG1CA2N6N7NIO1u0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00a309a891f712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23722,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 184 x 169, 8-bit/color RGBA, non-interlaced","md5":"aefc362c713f713629560b6af24f9847","sha1":"b4291bb7d59f367073bf478df5457fcad02918e4","sha256":"8e58401464a02b7abb4f7d853b068e99111c8014a091b1904678f823a24cb07c","sha512":"17d0792109869f14143fc5ba07f69bfbb45dffccc4cd25c7c098692150cef0fd9bc8be9b81fb5def29aea3096a5462fa898c7763aee661d452ae92f054cc0093","ssdeep":"384:iLLHZSsJUxzmuIQHeBTnSRTVKnoI5VHqA6D3PWRy2AFWGuwF/RUrguFt+d1:W1LSxz2Q+o68bhYzKRo1ef","tlshash":"98b2e19a52c268067604f8bd535130d9fe844efedfb08666bef4069781532b12fef099","first_seen":"2026-04-02T14:57:47.054999Z","last_seen":"2026-05-24T06:20:25.921217Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"safecapitalis.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz@0,14..32;1,14..32\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safecapitalis.cyou/","date":"2026-05-24T06:19:37.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz@0,14..32;1,14..32\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safecapitalis.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 24 May 2026 06:19:37 GMT\r\ndate: Sun, 24 May 2026 06:19:37 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5075,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d588945e36282970403b358308029ac7","sha1":"ca4d1b15960329d3c37846fbc2059fe3e7bb4383","sha256":"620f18ae1a78ebdc09e21af503935eeecf65bd0688eb8fdaddb0053b2b08fabd","sha512":"ed66f5d8496f9a8ae3b2f2944ed1c79f839cf78fedd6bacf48145726d3b4e58bbfea0f738b2190b28df94e1411ea091a1118bf059b40daf8d285e37d5c5f519f","ssdeep":"96:aYgEa0oqYgEa0ZFZHYgEa0qYgEa003vYgEa0AYgEa0yJc+uTYgEa0tNDOEaEqOEa:vOTfO9OgOH3gO8O1VOTENf+H34XIDu","tlshash":"6ca1bb92002bd440ab931dc623cf7e36adce11a57486d47d9bfe0cc96cead63522875d","first_seen":"2025-10-01T05:45:21.748177Z","last_seen":"2026-06-08T14:47:37.729895Z","times_seen":34,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":102,"dns":1,"connect":14,"send":0,"wait":33,"receive":0,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safecapitalis.cyou/css/reset.css","fqdn":"safecapitalis.cyou","domain":"safecapitalis.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safecapitalis.cyou/","date":"2026-05-24T06:19:37.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safecapitalis.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 08:54:11 GMT","end":"Wed, 19 Aug 2026 08:54:10 GMT"},"fingerprint":{"sha1":"2E:7F:31:44:FD:91:7E:72:AE:CB:38:08:04:DF:06:40:54:EC:E8:0C","sha256":"FD:1F:E9:9C:D4:E1:26:0B:A2:6F:78:23:AF:30:67:A4:07:64:F0:85:F1:68:23:B3:EC:14:72:D8:C5:C2:5F:E4"}}},"request":{"raw":"GET /css/reset.css HTTP/1.1\r\nHost: safecapitalis.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safecapitalis.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 24 May 2026 06:19:37 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Jul 2025 13:11:52 GMT\r\npriority: u=2,i=?0\r\netag: W/\"686bc798-50e\"\r\ncontent-encoding: gzip\r\nage: 85\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qLTdnswCDmwy%2BOejHBsuIJq5MpBPv%2B6uBk6qCELn5XF5NKdUGP18awEPGuoJQd7DE5N88x0PS9e%2FjnTZBcA4NpZ73xzpTII6DNCQl9tCIrUDGgm0fvvnjz4cHVAr%2B%2FCSUjcN2TU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00a30981fb6712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1294,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e9df2baf8ec1199293b9cffa75a4983e","sha1":"bdf2a1149830631b9c0210d4525a285abf2c87db","sha256":"22f6d56ee46d42f7d8ff716a0493d01aff2903caacf552df5d55e18d5600e460","sha512":"12da4253394c69483618bae6930a8c69bb67d0c0f720eb360384c508cba9705022939add1c36b9ce13025891833fb6b7d5d8d5083d5af3a44781872e4389ad47","ssdeep":"","tlshash":"232120a021b5ae542123d67876c6db81731cc112091dbdf89ef444ac8f8a34997f235e","first_seen":"2026-03-02T08:26:39.922667Z","last_seen":"2026-05-24T06:20:25.913683Z","times_seen":14,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"safecapitalis.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safecapitalis.cyou/js/utils.js","fqdn":"safecapitalis.cyou","domain":"safecapitalis.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safecapitalis.cyou/","date":"2026-05-24T06:19:37.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safecapitalis.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 08:54:11 GMT","end":"Wed, 19 Aug 2026 08:54:10 GMT"},"fingerprint":{"sha1":"2E:7F:31:44:FD:91:7E:72:AE:CB:38:08:04:DF:06:40:54:EC:E8:0C","sha256":"FD:1F:E9:9C:D4:E1:26:0B:A2:6F:78:23:AF:30:67:A4:07:64:F0:85:F1:68:23:B3:EC:14:72:D8:C5:C2:5F:E4"}}},"request":{"raw":"GET /js/utils.js HTTP/1.1\r\nHost: safecapitalis.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safecapitalis.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 24 May 2026 06:19:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Jul 2025 13:11:52 GMT\r\npriority: u=3,i=?0\r\netag: W/\"686bc798-3c8ec\"\r\ncontent-encoding: gzip\r\nage: 85\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mcy%2B5HwhsDvosWdWZac1gqcPLbopdlbRYdCc8V1Qix%2F4%2FDFDle4N7HDPn84jf9tibnm19p%2BB%2F0uztsRy4qHuzz6gxEWs7mgYi6ykrytb5l5d5RG6QuK5nd8fsiuJrpzysTeO0tU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00a30981fc2712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":248044,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"41e291dfd45560d2d4fb659a40ca4c56","sha1":"3792bce8f036876641cc14702b1f6a26e6d0d44d","sha256":"8abb51715ec9b4b8587b197b320ba4b6b0092234563b2c72fba42583810ef0da","sha512":"7521362194cc5073e616d9bd9701b5885216aef6da96e497cd08f85a5cf6fa94d678bd2bafa7e0860440cb7d85725d907f88156ee6d731af1d6a18a6335ee0cb","ssdeep":"3072:7XEe8tABjO03k4Pc03C4P0IMOx2EZDmXmoLGYAIrBm6nRTvUQL+D4tQrxaySCkKU:7Xwu59hZDmXmod1","tlshash":"6634deebd63c9736a5d97b35968eb3cd5a8cbca3c848527826c3b54f53788e0706c205","first_seen":"2024-06-06T14:03:54Z","last_seen":"2026-06-03T08:03:02.414504Z","times_seen":83,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"safecapitalis.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}