{"report_id":"c8e90cf5-0470-449d-a783-03740d041fd7","version":6,"status":"done","tags":[],"date":"2026-04-10T16:00:40Z","url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"172.67.222.164","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"title":"Liquidity Farm","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"172.67.222.164","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-15T16:00:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.220.205.65","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-04-08T22:12:50.414611Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"chatapi.yourrealstores.com","ip":{"addr":"3.39.14.95","port":443,"asn":16509,"as":"AMAZON-02","country":"South Korea","country_code":"KR"},"domain_registered":"2026-01-14","domain_rank":0,"first_seen":"2026-03-06T23:33:51.658506Z","last_seen":"2026-03-27T23:31:36.183226Z","alert_count":0,"request_count":1,"received_data":44721,"sent_data":432,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.safepal.top","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-17","domain_rank":0,"first_seen":"2026-04-10T16:00:42.700626Z","last_seen":"2026-04-10T16:00:43.86222Z","alert_count":87,"request_count":29,"received_data":3215881,"sent_data":13099,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-05T22:16:34.770209Z","alert_count":0,"request_count":3,"received_data":46767,"sent_data":1620,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dc.yourrealstores.com","ip":{"addr":"3.35.212.128","port":443,"asn":16509,"as":"AMAZON-02","country":"South Korea","country_code":"KR"},"domain_registered":"2026-01-14","domain_rank":0,"first_seen":"2026-03-27T23:31:35.591772Z","last_seen":"2026-03-27T23:31:35.591772Z","alert_count":0,"request_count":2,"received_data":42350,"sent_data":1068,"comment":"","tags":null,"fingerprints":[{"name":"PHP:7.2.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.safepal.top/assets/index-2a8f21a8.js","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"135f4d3ae2ee40a37c66badb7c5cafc4","sha1":"3b8426ebf8b7179fe3b63ac0dd129ce7216e43f9","sha256":"afb7d97c3a0019d0bbcff0cef10bf982bd3c9f53387e7c85a1d3907fc7bd99d1","sha512":"55dd060bc05d27278c7952bc2e44113a6486cb86c7cf5574a73f32f3027b5649f09562607806f61d93ec7305de38ad4e291c7fe76e2848af16089c7d1d1e50b1","ssdeep":"6144:Uh1Hyu52j1s5ti7kSIFhVhhUiqS+bU3NKpldDhmWq4kWIb:Uhhyu52j1s5tTFRqS+biKpldsWq4kW6","tlshash":"8a542bea3286b03283fa19e6507b1200b33d1a55780a94d4f17dadd63d33d5992ebf6c","size":287056,"data":"","first_seen":"2026-03-27T23:31:41.659551Z","last_seen":"2026-04-10T16:08:30.081225Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0d28e35e243c312cf4f7d48a57751861","sha1":"19368699bfb99b0036cba1158b3313119dd123b5","sha256":"1ea1c8d827e6cb0a1747375900bf12b8a1078af1d72318d4a27e8d967ee15872","sha512":"eba626d7a627968b7cad7539e8a4a36ef1d4ee7f02cdfad824ab87684a836bf92df5015daf9063cc6d9d56794f4a0d0a096c0c5e7c5da5d6b94801f6a8e98c4e","ssdeep":"","tlshash":"d6c08cc5a0c32d001a42641024af29e4a02c4026b1481b23dda4d84c3e220f08233eac","size":147,"data":"","first_seen":"2025-04-18T07:40:25.194042Z","last_seen":"2026-04-10T16:08:30.082479Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0d1257b4b64405ec04bb219628cd5dc8","sha1":"1b238c5a3f72b0a906a2b67c180faf2b4605b99b","sha256":"98ee302a4bc659d2be942c4f10bd3857787b969cf31793db69d38ec69cd07db9","sha512":"ea89ba7f4deb6ddb4b9200b3b65cd06d7f31bd1185fc9d39268c358e78edb38c18b209b958b877a1656769ddb15d7f69ef979dd7b50ab37f6845c849b37a20f7","ssdeep":"","tlshash":"6fc08cc4a1c33d002a026a1024bf39e4b028802770485b12ced4e84a2e230f08237fa8","size":145,"data":"","first_seen":"2025-04-18T07:40:25.203522Z","last_seen":"2026-04-10T16:08:30.098821Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"51ba63e971f527130203f6fe3e2a19b7","sha1":"230ccf2a9fdf4b88c3e6cc080618b09f05bf4eb0","sha256":"47b59b9e1095e339b3571168cb97e772c5f5a4df4776a007f1798f8e12bb8208","sha512":"1a557b5111228d83c0d29a1d204fc81dacb09b4f7233eaaaff144c0e6da04c1117b0803e983ddae6e200e779412b8dd84807dc61935bf49cba0cc7ad474c0daf","ssdeep":"","tlshash":"3fc08cd5a0c22d002612649460bf24e49038402a70481b038c94d8482e220f08233e98","size":143,"data":"","first_seen":"2025-04-18T07:40:25.192487Z","last_seen":"2026-04-10T16:08:30.100695Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0997a1232bb21a3f8597385c615489cc","sha1":"60c574a21521595c8233150621d02e784474b2df","sha256":"edf6bbf29ae816a40bf9f59a96e28bfc39c5be5da60670bd479636bf70db50c2","sha512":"acfa860b5ef326040ac7bdf71b860d97f070b683315b04f799eb7a5457786a6ac9c0f66fb7884a48ca3509d1eeebad6487f9eba4de38442874731bffe8fb9b05","ssdeep":"","tlshash":"e1c08cc4a0c22d001612745014bf24e89024402674481b428cd8e8482e224b08233ea8","size":141,"data":"","first_seen":"2025-04-18T07:40:25.201263Z","last_seen":"2026-04-10T16:08:30.088265Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chatapi.yourrealstores.com/customerServer.js","fqdn":"chatapi.yourrealstores.com","domain":"yourrealstores.com","tld":"com"},"ip":{"addr":"3.39.14.95","port":443,"asn":16509,"as":"AMAZON-02","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"8be8eaad75e18698266e1da49877ca4c","sha1":"197f695e5e23da40a1a83bcf32aa24d0b3cbdb1d","sha256":"6418330446ba2caa6ef8318ab4550994ed249fec26d71c78539f9e313aa92a42","sha512":"013d3c50736fe64252abc472d7a7e72dc9455a95635195a4623c8e3cfcc85c43d5a4ee99f732652c0c03d8dd72c7b57d9a0f8cc7d8755094480535510b66072c","ssdeep":"768:lIVy0juMiYj8rMVN5uZyDuV3yOAWmAh+i6jwyGGXLOc:eVy0liY4rMVN5uIuxyKeGGb3","tlshash":"db136c3656fb046a858371a85f0e6204ae21440b540bed287fac5be27fc943d96f1ff5","size":44494,"data":"","first_seen":"2026-03-06T23:33:59.135622Z","last_seen":"2026-04-10T16:08:30.080762Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c0af9e8fce16fd0456201455a92d2bc5","sha1":"bf25f56c3f52c0285cc4f62c45bcf26838c5b880","sha256":"29eea0d1bce8f2f318ecab8f725e771473155dc06575f1cbf048255c38d91a44","sha512":"f7d8b4cddf55821da660bc64a4ac55dc4535a75df29c9bd31d18852519e5790258cba5783792b075f22ac7c9603c0ae5dbe9b77559977bd0a49c2f1c09bdc7b8","ssdeep":"","tlshash":"94c08cc8b0c72d006616641465af24e4a0344027b04c1b128c98ec8a2e225b08233ea8","size":145,"data":"","first_seen":"2025-04-18T07:40:25.215187Z","last_seen":"2026-04-10T16:08:30.0907Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"092826717294ecfeb043f6dcbc213593","sha1":"4c0f73d40a86d4b955715fdf43352fa6ea108da3","sha256":"ace28e7b2d04c660e411300cd23dd24b57f779be7de7337cf069702cf0a5a91f","sha512":"abb75d629f30a95eee1b7086a0047711493b12364efea040d270a9b770c1945d45d88d9fe10bd2f622a6cfe99a9f426460e7e2b3a266f14142f50526a4ac69a4","ssdeep":"","tlshash":"e9e07dd0a0cb4b204955341bcf5a21e0d2355029f4180f629e4dd80829670738337edc","size":308,"data":"","first_seen":"2025-04-18T07:40:25.206409Z","last_seen":"2026-04-10T16:08:30.086284Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cdb3c2e8fa97f8c4c52c9a4e0334624b","sha1":"4a638e90795f9745b15a2243df707362e33ac677","sha256":"5fd68eda5a362d6865ff8c2aee7d0473c317aa084a83534518990b233732bf1b","sha512":"6e379ed0e4a005150a6d020fbcf9f127da471d3869b2e1b8e4ac826ab1f39194efd6ad588778cf9491dde0bef9c213851ebed6637b7f8f26b3c3695407a3f85e","ssdeep":"","tlshash":"63c08cc6b0d27e102622642024bf34e4d034482670485b03ace8d8583e624f08237ee8","size":153,"data":"","first_seen":"2025-04-18T07:40:25.19064Z","last_seen":"2026-04-10T16:08:30.095249Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/assets/content_bg.eb293030.js","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"654dff91065b5ab5930c59abf4bfddbb","sha1":"d0e2becff2476b52be50701037826d83eca8af8f","sha256":"b5e828b9bd222e6cc336a7efb94cd49ad67281f55bbbbbae0928407ea28a0177","sha512":"d4f0dda980281da409444c4ba2b053304c59188289409f31599f9c2fac99c081f98b72a50a686c27283c60dcc63d2b6b5bde7ea4ef2602ffb9da8beca4bcecf4","ssdeep":"","tlshash":"47a00231851104b402196584cb71d6551496851cb61546d680244b49f6955405d5ef24","size":58,"data":"","first_seen":"2026-03-27T23:31:41.643353Z","last_seen":"2026-04-10T16:08:30.070321Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0d28e35e243c312cf4f7d48a57751861","sha1":"19368699bfb99b0036cba1158b3313119dd123b5","sha256":"1ea1c8d827e6cb0a1747375900bf12b8a1078af1d72318d4a27e8d967ee15872","sha512":"eba626d7a627968b7cad7539e8a4a36ef1d4ee7f02cdfad824ab87684a836bf92df5015daf9063cc6d9d56794f4a0d0a096c0c5e7c5da5d6b94801f6a8e98c4e","ssdeep":"","tlshash":"d6c08cc5a0c32d001a42641024af29e4a02c4026b1481b23dda4d84c3e220f08233eac","size":147,"data":"","first_seen":"2025-04-18T07:40:25.194042Z","last_seen":"2026-04-10T16:08:30.082479Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a7b3de7354307d425e2c87cd30f4ede6","sha1":"dc66414ea415cd874318119239b4af134ba2567b","sha256":"6ce792f41f1371f6d74e42988b05237acaaaf3eabaf18d6f6c7b56b2e58c4823","sha512":"15313ff7e64d913b8e7a1bc9f0802d26ec31225c1e0be7fa325315bc6cebe8d5e070cba2c58e83993c461951180bb947eed81bd1bbd165015772906c7b2599c9","ssdeep":"","tlshash":"73c08cc4a0e23d001602641010af24e8a0244026704c1b028c94d8882e220f08233ed8","size":136,"data":"","first_seen":"2023-05-05T08:00:34Z","last_seen":"2026-04-11T18:48:26.624635Z","times_seen":787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5087c56aa70edc8ddafc6dd44c619c19","sha1":"1f76fdba31320746166f5b644781c2f12d83c016","sha256":"b9802a16ffd65deed5a5a18d7dc18a5cef0b3ba4f5677e31b98ff6fdf89b645a","sha512":"043b2a5815974a7f3e814e66de33086483369b643c5e35e78e6ec6edccdae889144d3966d4614ce35d6ec49680ffe36a461ceef6965b836c211d8bfb19e8c87c","ssdeep":"","tlshash":"32c08cc8a2c23e002612751510bf24e490244426b44c1b52cc9cd8882e720b08233e98","size":147,"data":"","first_seen":"2025-04-18T07:40:25.202722Z","last_seen":"2026-04-10T16:08:30.101397Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"585cd57ac173c11a4ed4b49d4fa4fa51","sha1":"ff9213f8aa654792cf4e0e40f2e800384fc3dabb","sha256":"f9c753d3802eb85b42226f827cc0715d59db595ee7f33c73c578728d71b7de8d","sha512":"4843336a21e2733ef6c8f7ed5af2bd0f499205245ffef375149da19a6253d03edf5b9069cc68e8811727de4886b54daccd97625984f5bf5ec8df2a21922b309e","ssdeep":"","tlshash":"d9f0a4f878e211a0c9114a9404bf39da851e70e1f3e826896d1bc8d72d284b2952eceb","size":613,"data":"","first_seen":"2026-03-27T23:31:41.699009Z","last_seen":"2026-04-10T16:08:30.09651Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5a24400741c1595b3efa7f970fa897fb","sha1":"362b7f6dfeb7e2006808c86c1d50b14df35248a1","sha256":"6aa4b5186bd54050f844fcc84a4bffb026810b801376c3db417c214e1ba7b8dc","sha512":"a48a3ed10923e775bc92293a6dcf31d548ecec555ccaa7fbb1b73c88d36062080159bccddfddef6c6d238411c6eab6f4dc40c48112e0601b0a52663672277253","ssdeep":"","tlshash":"3be0cde8e4b79c05620a9330f05f39e46037542e5849050559deb4e859970b0d3bff5a","size":303,"data":"","first_seen":"2026-03-27T23:31:41.674254Z","last_seen":"2026-04-10T16:08:30.087654Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6796ef16f093b712b56100e217b9fed2","sha1":"dfb608c64f814f5fa8edcdacddb0e28056bdb85c","sha256":"5f9779cb82f548dfe1e77ddc39289e7ae1ea0e70333f324e1250b363d9621821","sha512":"7f1c6fb26cff6e20141f77775e6e92db8cbebd9661655dbed652ba8e5fc1e4bd1b7669aa8edc96c290bcfa88154c43f90c188f5648f8f9a2be93359e3c78b0bd","ssdeep":"","tlshash":"b8c08cc4b0c2ae005a22b51020af38e49029442f704c1b46cc94ec5a2e620b89333edc","size":152,"data":"","first_seen":"2025-04-18T07:40:25.205587Z","last_seen":"2026-04-10T16:08:30.084491Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d316453d5aa6e24b48678b4f536b1e7b","sha1":"69d1a1b7503fff076b920c90015d79634ac31c76","sha256":"9d704b9e7c1554f294ccb5699f43561233f2cd8de7651c5a2515df733c6dd5d1","sha512":"cdb0bbf88506741fce560346c263b8d5ab0afb6bfdab0db42592716b2f7500b4328f0d60fb1f55a9fdb807b16de8efb068b78ee0fe47a095d0ab91da8af41498","ssdeep":"","tlshash":"fde061c250a7295c06118166345dc5031f6505739e814d513c8c6775cff9f5bc06d858","size":419,"data":"","first_seen":"2025-03-03T13:21:42.107378Z","last_seen":"2026-04-10T16:08:30.098239Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"94380bd9f38eb2059b8d60bb0653ea86","sha1":"43bc4984c37a6920a36247cac1956ba89a06042d","sha256":"786e19978f9b3696e465e3443f5a787f9ab8570d64559dd206589d57a8d84c37","sha512":"49af4d09a935bb5fe949ec04088b545e8231e2c96048280a50d64c04c45ab6ff9d8c48f7a625979725b3876c62795abd4b7acd5c04e6324c37dbdf7a40ce903d","ssdeep":"","tlshash":"1ed0a783a0922d045605555411af18e4402c4429755e1b428da4ac792e620b4813be89","size":209,"data":"","first_seen":"2026-03-27T23:31:41.666936Z","last_seen":"2026-04-10T16:08:30.100052Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bb354036977a71f21b6d1ebbc296e1c6","sha1":"a59d60d4c9dfcf2624d51f7b31f0a159ef2c47b5","sha256":"318a2122871f31a91febd6bf303aee5678d411d11501b23665d6e79ac9803f20","sha512":"bbdf4334df5f1e67c524a8ae3a1b258dec0f6a6a959f33f7aac05aafa91598a79448f7b91bd784328ef8495ab1a4be0d508c26fcc3ec2e604ec47e81dce51656","ssdeep":"","tlshash":"89c08cc8a0cb2e101a02a42550bf38e4a424802670481b56cc94d8493e220b08233e98","size":145,"data":"","first_seen":"2025-04-18T07:40:25.197174Z","last_seen":"2026-04-10T16:08:30.099437Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3f012528ba1a0a083821c362fac6b220","sha1":"b076f204ec41e625f65c0edf510eae7d14ea635b","sha256":"334e6c9e88c331f9b97bb0d54e0e9074b11101e07582de154d42cc9afb9892fe","sha512":"039ffbaf3ad06607f81f867e5673aa63c928c454bbfc976523fffdfc751261b39ff2f0922556c8f3989c0b68fff0d9e3f7648aef921b140f7b5f7655b8bf4109","ssdeep":"","tlshash":"83c08cc4a0c66d045b52641424af34f4a029842a70881b028c94e9492e620b08233edc","size":145,"data":"","first_seen":"2025-04-18T07:40:25.209465Z","last_seen":"2026-04-10T16:08:30.09465Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"35dbd732fdf6166b4bfdc134720cad6f","sha1":"72c7f941987fd2c56ddcce175f2af64a3b32084e","sha256":"5857f5a07a5bedb07015c8c08e23afd15bd747105ba77f6c104db09052453715","sha512":"2d04bcea3c224900974d6def96dc62ffeddfa64f51755a05638fde724f75dd2b54d6d494a6eeff5044b5392b587aca6ddc2992da60267d80327a12251e2a1647","ssdeep":"","tlshash":"b5e0c09d72811b00160255a06c5f15f0ea3504fa7585178a0d94d4ae66710b5a1f3bf5","size":354,"data":"","first_seen":"2026-03-27T23:31:41.681827Z","last_seen":"2026-04-10T16:08:30.091278Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/assets/footer.122811e8.js","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7a470b5efaf0a8e77619ea9bc9938b6b","sha1":"e018017ba5589dbdb971a9188d150da92f597288","sha256":"d600101cd95c99b51c85a14159854e8d7b62febe5c1204bfe91195cc2984a476","sha512":"11844d1d4676f8378a25a76b1fc2d08b409620a9d18db71aa2c534dd11b2a25246285d5ae42bd91bd108382cbbffb729ac92706c4242ca91a65a768fc03c02d3","ssdeep":"6144:opndqCLtdCWJvfDBdw6fLv4U0JrFVitmmP4gVmWdsjQUq0UodUHRH6kkTSTg2yeu:G3Y6jv41FVidhmTklEvec5d","tlshash":"9d155a8173a2f06147da20e114b71007f279ba6d704e446cf668d8ef7da9d89a637f38","size":882564,"data":"","first_seen":"2026-03-27T23:31:41.611937Z","last_seen":"2026-04-10T16:08:30.065949Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2b893370494d9bd03bd7f5ce3424452b","sha1":"c311c7da63211aa6198d31d84000baaba3ff341c","sha256":"120fb290ad42619224196ce4c7daef84bcb0755b1d3352a39b77adefa017fc6b","sha512":"32bb8bc113b69222485b51ffa635cf4a12f4f65db882711676ad6d7e7af5256ac4e0ef8fa61286ca34c9e8ed58375c87e839f7db63595045ef141c29259e514d","ssdeep":"","tlshash":"0dc08cc6a0c22d001616641014bf24e49024403674485b128c94dc492e634b08233e98","size":145,"data":"","first_seen":"2026-03-06T23:33:59.218875Z","last_seen":"2026-04-10T16:08:30.081782Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3e87d9e81c26f402000f9de8ede27197","sha1":"e92eca1222fd07964530602b2be57b01ae343add","sha256":"17ce1bb98d688baf7eafc955eff2fc94b18dfabd852170bda91f58978da83a4e","sha512":"f1d1a69905046a8cbcba00cb7b4106060454e19d510db801e9ef4bf778db8a11928d7441a57ad9f9226b3b42b8a83087d6feea636bc5b3550b849f7ef2464008","ssdeep":"","tlshash":"3ac08cc5a0c26e11564a651014af36e4a0248026b0481b028de4d8582e220b48233ea8","size":146,"data":"","first_seen":"2025-04-18T07:40:25.193223Z","last_seen":"2026-04-10T16:08:30.089548Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bc1d85c524419e2a3bcbc14b9ee87a60","sha1":"419762ae08d4f1a407ce455a809650fa3710a558","sha256":"3538bbd1ce007c862e435f2a7071d1a1e752b17592a934740974aa8f6d1c035c","sha512":"9d04a303a232dae2c87295123d7abab1f9a2177e01a4ce578fec573ce50858f652abe3e14f72f743155eaeedc89a7e26b46fcbcdc76e53bf7900243d8478da25","ssdeep":"","tlshash":"97c08cc4a0c23d102606645058bf34e49034402670481b229ed4e8482e231b09233e98","size":144,"data":"","first_seen":"2023-11-08T17:18:04Z","last_seen":"2026-04-10T16:08:30.094069Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4bd75c472e4fc6f02bc23d88dcf6b5c0","sha1":"39295acb94038dc73cbe37d5776885a59a566fdd","sha256":"5e19b83407b4a21f74ea692476eebd1df56bc29df0c4d8b5f3fa0e2628537d40","sha512":"2652d2668a5cc6f4613dfaa0be442d7672f5f1e16bf2a10ee8981199ec4ad90c868e3f1a51442212e9bfb6973cedfca3600deb392c1b82b3b14fe5d99127b2e4","ssdeep":"","tlshash":"23d012c860a26f502a42746561efa5e89128507b784c27138ce4e8d92e6a1b4927bddc","size":201,"data":"","first_seen":"2025-04-18T07:40:25.196369Z","last_seen":"2026-04-10T16:08:30.083308Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8444b2ac7def483c7102e79239c122fa","sha1":"1c44d9046fa612e9717a9e58f397b21408451c02","sha256":"204537aa915cb18be119a5f997b7512111022d5aef51794f20d0739cc5c5665f","sha512":"198c76070ff1ce14cc1b452f7bccdf3e767bebc9fbcbae17a11e62f24c103ba3048068f34b9cd90a5297f393e50a375941b1fdce75456fa2b0f7927ff8384dd5","ssdeep":"","tlshash":"66c080c4a0d7ad0116617450117f34f4d035445a744957438c94dc593d130b44237edc","size":161,"data":"","first_seen":"2025-04-18T07:40:25.211633Z","last_seen":"2026-04-10T16:08:30.086964Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4c01db767e8721a85da8d9ba13fced0f","sha1":"79f0989128563d626214d9682800260c34e2c0ed","sha256":"39280019b8cca3d326042eb732bfd307f6a7f7e9a60873ac92a0683796d36541","sha512":"03dc8e9a8a1fc5f835b1963094a83dfc50cd94c3c8a6a54b83f4f7f0af7e0dffe542681e9314d8f8be464cb03e6043f2b161898885029cb9606699728a7b8ee5","ssdeep":"","tlshash":"6cc08cc4a0c22e106602641010bf38e49034442674481b028c94d8582e230f08233edc","size":140,"data":"","first_seen":"2023-07-15T21:13:40Z","last_seen":"2026-04-10T16:08:30.092534Z","times_seen":152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"55c7691ac49fb33b8dbe27f3a42beb17","sha1":"d8eba60ec9a2f4726f867ddd2731b18d307e495f","sha256":"d421b1fe3fba609c2649edb854dfcf2a95ab5b80e78389d6493790d1b387222c","sha512":"9dedf1eec48e262d578058367dd918d73f291cebf9e4a0e4de626f6eb3f6e22c3a391a5a9fba72dacd5d3d36c24c387f727ad19b7a05458a858a42ea5a0608b7","ssdeep":"","tlshash":"5dc08cc4a0c22d101606682010bf24e490348026705c1b428ed4e8482e220b48233e98","size":141,"data":"","first_seen":"2023-07-05T19:24:05Z","last_seen":"2026-04-10T16:08:30.090123Z","times_seen":828,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c1e7cf9e7c6dccb6ad5cc1744de82e1a","sha1":"e4dde072a4f5f77236e7da66bb7169032af9c44b","sha256":"380495191112b7f20bd64953cb98bbb2347311ef71ee4a9853378b71a2650538","sha512":"163b9a129debe0e6a41af357e1f878128e090069bf6a9d33562756afc7c260cb5a769aa56f79b0e84e333fa985088d5925cda90073d8614a0ac2f4238e0034e7","ssdeep":"","tlshash":"57c08cc4a0c63d006606a49022af34e8a024402670481f028cd4dc482e630b09233ee8","size":145,"data":"","first_seen":"2024-12-18T14:57:20.77508Z","last_seen":"2026-04-10T16:08:30.097633Z","times_seen":130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"32b982be2315cb660e713f67c8bbf85c","sha1":"5c98ca169ab8ef0f7c5f684ceb235a5ad81eabe8","sha256":"52e2afd315f7362de6e893daf3990434ccc21bd1c40c246008425cadb508424e","sha512":"bec47abd0d044e32212b999a6a41238bfa2673eb14da4e40d49eae9c4ca49c8cce102d6ed06323063ee649582642f1c36ed39f5564555f01e09fa327b3ac3f42","ssdeep":"","tlshash":"c4c08cc4a0c23e001a06652021af25e4a024402674585f128cd4d8582e220b08233e9c","size":142,"data":"","first_seen":"2025-04-18T07:40:25.214535Z","last_seen":"2026-04-10T16:08:30.085682Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-04-11T19:03:30.1193Z","times_seen":3022,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e80f637f2da3eed23c955abe4015f0d4","sha1":"31bcd223252d4cde79acf1873ceb3709d48dfeb1","sha256":"a139faf0307f6f145ab76935211aec70e22944eeff52aa56e566c84c2a94a531","sha512":"1c092e0d8e92adf307ce5509a8a5e28382a8bda70cd4baeaf42552e492bae6090e1808a5fa68b0b617fb371c011e462a49dfa3e3853bb33688e4b7a4f30d1b8e","ssdeep":"","tlshash":"54d0e74178439b105117451d117f35d4e5354021be4c1a53894cd48627518b182b7cdc","size":273,"data":"","first_seen":"2025-04-18T07:40:25.189833Z","last_seen":"2026-04-10T16:08:30.085074Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"10e7c6515cbfaab60a548f93974e888a","sha1":"76d887fe2848b082248366fe762d9c5eaac9a9b3","sha256":"f54568afc0470b5bf1b78b453270e5516b1df58fb059216e2b2c2403e96c97fd","sha512":"cf2863b2317d0a0ec25716c5bd4e22b2250ae31b63f1c3a44af8285d47b6511e4fcfdc13cd26df91d371aa873b6c6e3ed79e7a5e710edc5ebd104432d4fb2377","ssdeep":"","tlshash":"9bf027eda1d8172800095b20b56e7efa9418804a300506575df0ae987ab96f885abedd","size":470,"data":"","first_seen":"2025-04-18T07:40:25.212981Z","last_seen":"2026-04-10T16:08:30.093372Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d6305f70ea54d375b642e147eaf529c7","sha1":"cd7891c68195e932524cb0ecb475c7fc1c83a36a","sha256":"bfd43e25a758f3fc7f934a77fda9327d2f10d7873dbe4c834f0afee386876b36","sha512":"0631184eaa667e7637159db62120705222e8127c8e74c766cbd18b9e8ba5d547f0b642e9b2acb1d24f462ecac814e4d4aef5815d837c7586245ba9adb7775ae5","ssdeep":"","tlshash":"70c08cc8b1ca2e202606651050af35f4a128842a75481b23cee4d8582e231b4c233eec","size":159,"data":"","first_seen":"2024-12-02T01:20:06.745915Z","last_seen":"2026-04-10T16:08:30.091969Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"337b7b36eb243b1a2e147eecee6522d5","sha1":"0fd872984a747a02b6965c40476b43cb3e67362c","sha256":"2358be45859e14aa84d3724586ea3ce72691cdc1c87edaea597a41a52782ec63","sha512":"51b34423c7664821137d1db323e0710e67f594e1bd752dbe1d65e6adb62ad822b90d751d8685d3b6374bc56c84eaf1a2530a0d41029085663e346c5c3dbf76c7","ssdeep":"","tlshash":"dac08cc8a0c32d402602b41518af39e89024402b70485b028c94dc882e230f08233e98","size":143,"data":"","first_seen":"2025-04-18T07:40:25.213743Z","last_seen":"2026-04-10T16:08:30.088863Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1878f54a98f78491e1cde1bcbb8b9b49","sha1":"d291984b6d3e22f520e533b92d5be493809bef0b","sha256":"f37d0df5670a249e9a471eadee51737b17e0ecfd1ba33919f89467b36033bb80","sha512":"61e24e39d8510e3b79235e8fb69252613ea2d829fbee89285602b0d3069ce5a2b30328a2cbe274a0d1ee08e78d156e6c7f852f6c7db6034990bcaec43673bb99","ssdeep":"","tlshash":"0ac012c5b0c77e105611641025af24d892258496604c2b52dcd9d8543f524b5d337ddc","size":172,"data":"","first_seen":"2025-04-18T07:40:25.20746Z","last_seen":"2026-04-10T16:08:30.095886Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/assets/pages-index.bd78566e.js","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a00ad92138a31adfb115551c10271c02","sha1":"37baa28efbc891172919c27a30e9670688f1a577","sha256":"e317bfde5e87397902f3da7cb6a35fbb2c32275ab2cfdaa759ff7ae3189a02d7","sha512":"5c4814949fa62cc80a4e78766c25c2a56f44041ecab90afc6a51d4970efe7736b60b7163957c2420bd82026d59f46b8d51d21cdb4e4b5ba97c7c5805b6ad30d6","ssdeep":"384:6lSyJrSrndCrDxEnGcGJzJ8PKbNubsUZXO:6DJrSrfGc/JO","tlshash":"a682d8076a2cdb7238677128e9c2451db4a95f7ee602272a72b4281f1ff3c1451f972e","size":18860,"data":"","first_seen":"2026-03-27T23:31:41.629034Z","last_seen":"2026-04-10T16:08:30.072575Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"3d5272693eb411e5b8b13a243f76c720","sha1":"6a586ab8e0a4bf12bbc60eea6ca9f2418625a22c","sha256":"9582f31f9eb892b8823a780e579d464d54e26d97d65dc327d2b2bdd92d47c4b8","sha512":"03fc5614f48fc9a2e3c4a30626fdbacde74c1fda09ffa9d1cde0393d31cd5fe1588e270c241f4cedb473c6e5cc224ff16c141468a29519ea6159accf3e3a18f1","ssdeep":"","tlshash":"a4c08c8350e2080c8210861b848880050b8808b04f9308a22cd85b7ecc9ae88c8f804c","size":148,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-04-11T19:40:16.085995Z","times_seen":14452,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"www.safepal.top/assets/index-90561a16.css","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:18.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safepal.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 13:31:31 GMT","end":"Thu, 09 Jul 2026 14:31:23 GMT"},"fingerprint":{"sha1":"F8:99:55:9F:05:C2:D6:64:24:EB:A5:26:D1:1C:C1:84:29:87:5F:50","sha256":"07:38:7D:97:BD:57:25:33:E8:41:4F:FB:E4:4D:02:9A:BF:A3:04:99:E3:DF:40:D7:C2:25:15:E1:F8:BD:50:8F"}}},"request":{"raw":"GET /assets/index-90561a16.css HTTP/1.1\r\nHost: www.safepal.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.safepal.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 16:00:18 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9fVy2H3PRwo5DXmrUwOnLTO85EuA9OiLZWINr2%2BckJtM1i6bDStDg6IzFuHLsntaYre3nLPEu%2Fie5CoFrPSkDOGI0LWbdTwd5KZcHkrMXaZ4SvvL4HnRBYsTxSGq51iRz60%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"0d6e92abe4263df48ce8d3f37dacad23\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\ncf-ray: 9ea2f6b58fcf2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":562203,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (59194)","md5":"0c97e3b86be65585946cf82f88f7ad9b","sha1":"1977e4a0f790703ca6fb63df54e77efb5589d7ef","sha256":"90561a160163bdbfe1b38de0d00a59891a6cb2648d6e9929256139d008b8c418","sha512":"663f00b91e4c50fa10069f11bcdbc8285089cb9cb37b609a59cf3cefb8e192ce0dbf1b1073060fa2ddbb3ce3548202b570f80e0a56a25ae79ff983bbfa26cf7d","ssdeep":"6144:drcRlN4jJzsDNfe0UNTFQbjuCG2a8cm1cosgzi5:d16Sj","tlshash":"55c4d8586b45203ef5ebc33a54e0f9695a229a03c63f467ff6a1770c8f4938e51b3a14","first_seen":"2026-03-27T23:31:41.650421Z","last_seen":"2026-04-10T16:08:30.078695Z","times_seen":4,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/assets/hz-23-8d331fed.png","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:26.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safepal.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 13:31:31 GMT","end":"Thu, 09 Jul 2026 14:31:23 GMT"},"fingerprint":{"sha1":"F8:99:55:9F:05:C2:D6:64:24:EB:A5:26:D1:1C:C1:84:29:87:5F:50","sha256":"07:38:7D:97:BD:57:25:33:E8:41:4F:FB:E4:4D:02:9A:BF:A3:04:99:E3:DF:40:D7:C2:25:15:E1:F8:BD:50:8F"}}},"request":{"raw":"GET /assets/hz-23-8d331fed.png HTTP/1.1\r\nHost: www.safepal.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.safepal.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 16:00:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 12966\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"992d373923deebb0e886f6b0b072101b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WejQunXShaHhE4PjWyMk6%2FgH5zxoRF6rjsfd4026Xp56%2BTWfJtNpEvFmLsqZ8xmoRS8dwiu13EDMkMfJudYCv18l70%2FMxjqto4UPnnIonED0BOsNv3L0aDdTxEsRvuC0kfI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9ea2f6e48bd52efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12966,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 804x385, components 3","md5":"ecf63ad3ea78f26e2d47e844dfb2514e","sha1":"c486e997ec1a46ed924eacb6ef6bdda571891216","sha256":"8d331fedcd8f84318156610fc5df374b31d828792bb230f5805a540de090f434","sha512":"22a268206a6db7f5192df70aa5729693291d3a03fb40a5f9dbb00fe6ee47e22083091ccf75742bb107d8d5cd1ea37c58f9f3ecd7d295a3055515ca612db7eb64","ssdeep":"384:oQFHUO9nj5xGohfAIPvmssq+fQEvjqktUfV:T0foLPvmsslfrqaUd","tlshash":"7042af150b206bfaf46aebb21c2a72033b158e059d11d75fe19878f166ff8b41912ce2","first_seen":"2025-04-18T07:40:25.164912Z","last_seen":"2026-04-10T16:08:30.066558Z","times_seen":8,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/assets/hz-24-d20c8555.png","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:26.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safepal.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 13:31:31 GMT","end":"Thu, 09 Jul 2026 14:31:23 GMT"},"fingerprint":{"sha1":"F8:99:55:9F:05:C2:D6:64:24:EB:A5:26:D1:1C:C1:84:29:87:5F:50","sha256":"07:38:7D:97:BD:57:25:33:E8:41:4F:FB:E4:4D:02:9A:BF:A3:04:99:E3:DF:40:D7:C2:25:15:E1:F8:BD:50:8F"}}},"request":{"raw":"GET /assets/hz-24-d20c8555.png HTTP/1.1\r\nHost: www.safepal.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.safepal.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 16:00:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 4985\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"3b262b15b013b86db8baf1348d5dd179\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ARjqrK3Gn4uUKyEMnmrgEvFO%2BQ2lcrhG4o9%2BuWfUfNa8z5hlXGawpK6YIOhxch0IucaMRmxVugd9D6KrEVrmAaldtDiNI6OnMUtc%2FZF%2FPaYQJ4AUFL9Wy1CCfTaKtWSJp5I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9ea2f6e48bf22efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4985,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 60, 8-bit/color RGBA, non-interlaced","md5":"fddf703961594af53e125b856174acb0","sha1":"4e6979a7f39b6ba7c324a19dcf568d8b12a2ebb3","sha256":"d20c855538fddaa046307afd3ba3ed00a41d975d62e19d8b58ec290f10bfa547","sha512":"8f7376787dc9aa63432e08811ba92dc792e6fe5261f791e128d84a0842577f2b4bb5c9163e9e081d03c50a3f9c52857d7209991c33a7385b65aa6e9fc2460be7","ssdeep":"96:LPu94gO/sDxjqGGIkm3cs6mCcKUmRPWXILWeGA6GCp84OrnCgq1:L2C0lRt6mRKLRez06Gt4KnI1","tlshash":"74a18e1176884c1d9df60aeddcb394223b9ccbbe80644558415b190b2fb72c697bf43d","first_seen":"2023-08-12T21:50:37Z","last_seen":"2026-04-10T16:08:30.076114Z","times_seen":343,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/assets/hz-25-3147a65e.png","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:26.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safepal.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 13:31:31 GMT","end":"Thu, 09 Jul 2026 14:31:23 GMT"},"fingerprint":{"sha1":"F8:99:55:9F:05:C2:D6:64:24:EB:A5:26:D1:1C:C1:84:29:87:5F:50","sha256":"07:38:7D:97:BD:57:25:33:E8:41:4F:FB:E4:4D:02:9A:BF:A3:04:99:E3:DF:40:D7:C2:25:15:E1:F8:BD:50:8F"}}},"request":{"raw":"GET /assets/hz-25-3147a65e.png HTTP/1.1\r\nHost: www.safepal.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.safepal.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 16:00:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 6436\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"577740111718f0e5106a1308a6d28520\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l6HLkBIhFpcjcnbiJzayHH0cPkc0XUJWDiSxP4RReEMOVIL4%2BB40lFIRoghA4BzIIDqGRFyWJamkmoyJAev5ZsiAwTrPZDAICOsaerkoxp6GC2wbuCD7exEwzuLZnGR1vl4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9ea2f6e49c0c2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6436,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 610x238, components 3","md5":"7dbf6f0f3d3b10d318dae2c4737a25ee","sha1":"38d3ff18207a7f0fed08875b8756535e90adf949","sha256":"3147a65e2b2337223a6506f3739069ae59607f939338573141debd334772eecd","sha512":"3362fa8c7cb90b8a3356ef63899ee260121a89598a1d3db09a899935732c44606faa8ace6e36332ad719da0b18e25cee27ad3b6240c04d0f69eb5bc5708c6789","ssdeep":"192:1FZb0k31yc0/dnTnAKCGBkiMv2BPDonj93X1bCU:1MbDdnTnlysMjlX1bCU","tlshash":"a0d17c820bc98565e9088b332c0e9e76f6197d8160748d77d9ba64c734fdcf46e006f2","first_seen":"2025-04-18T07:40:25.175426Z","last_seen":"2026-04-10T16:08:30.064053Z","times_seen":8,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/assets/report-5cf68eed.png","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:26.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safepal.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 13:31:31 GMT","end":"Thu, 09 Jul 2026 14:31:23 GMT"},"fingerprint":{"sha1":"F8:99:55:9F:05:C2:D6:64:24:EB:A5:26:D1:1C:C1:84:29:87:5F:50","sha256":"07:38:7D:97:BD:57:25:33:E8:41:4F:FB:E4:4D:02:9A:BF:A3:04:99:E3:DF:40:D7:C2:25:15:E1:F8:BD:50:8F"}}},"request":{"raw":"GET /assets/report-5cf68eed.png HTTP/1.1\r\nHost: www.safepal.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.safepal.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 16:00:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 5770\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"857fba3dccec080859c52d4690008f9f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3lvZS%2BEUuGjkuEhhvA%2BG1B78qV0hGG0qAymrHKA9zv9gdFdSs397dhW5m8FFPKarfvkCed90AXZCTbqUVGNtkOpY2u1%2BEmrcV24G0NW%2FNRPAlgEe9%2FhLTTmVZY72PRxFDC0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9ea2f6e4ed572efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5770,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"ac79ee88ec8ceb4ecdcbb9c8662f14d1","sha1":"b951559ff3e8c0e71a106eec858c653e8fe21ce7","sha256":"5cf68eed9cce626406992ade9a7f746482b83c161bb57b19c133a9067a81876c","sha512":"7c72cbf1ae0f9bb96c9cf2f1a1ebb43d9ad2ea3b9f3727710d6f7265901a21ba355d2db5d3b0d4314c96112b0d3927e52b1f6b87085d5fd03bdcc301aa682699","ssdeep":"96:ISyz0TMc2KKTVVSm6ytPpJhKtI0Rd8fmQMzy3MZXO2ZIMOTvO7ct8X8V0jk:ISnMc2KEVbtPpaLb8OPqbTvO7H8Vr","tlshash":"dbc18dbbb72b6f52db71076e5eb1fa9387385193220790456712225e1020d087b6daee","first_seen":"2025-03-07T13:00:16.483192Z","last_seen":"2026-04-10T16:08:30.077164Z","times_seen":18,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/josefinsans/v32/Qw3aZQNVED7rKGKxtqIqX5EUDXx4Vn8sig.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:26.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/josefinsans/v32/Qw3aZQNVED7rKGKxtqIqX5EUDXx4Vn8sig.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://www.safepal.top/\r\nOrigin: https://www.safepal.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28564\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Apr 2026 09:02:42 GMT\r\nexpires: Fri, 09 Apr 2027 09:02:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 111464\r\nlast-modified: Thu, 24 Aug 2023 21:07:19 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28564,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28564, version 1.0","md5":"0787be3fdadcda4128611c8528622677","sha1":"59ff81c1a3f2b64fa700c114899752665965e3fe","sha256":"e860effea9f313eb06d26c9a0a55673b6952653b0cebde0b2a5ba772ed618354","sha512":"dd54de992cc8a6dfe7d33ae1cb3c7f80d11a8179fd63276d42ba9e98db201e95250469c77d0a0e6d4d3df4a05f1d14ae50a4ff8a3641a564e31cbb730c429af1","ssdeep":"768:wsuEmGSq/L4bsyPj83cixBPkp/aDwDIn10:wXWDgNPAzK/Yv10","tlshash":"24d2f1eb53301d5888b84e3db550c9bb5fc53aca0ce3c5786106daa479bcd991d1a2c7","first_seen":"2023-05-30T05:06:34Z","last_seen":"2026-04-10T16:08:30.078246Z","times_seen":127,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":75,"dns":1,"connect":8,"send":0,"wait":9,"receive":8,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dc.yourrealstores.com/api/user/getConfig","fqdn":"dc.yourrealstores.com","domain":"yourrealstores.com","tld":"com"},"ip":{"addr":"3.35.212.128","port":443,"asn":16509,"as":"AMAZON-02","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:26.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yourrealstores.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 14 Jan 2026 00:00:00 GMT","end":"Fri, 12 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"0F:0A:29:93:5D:E7:7B:AC:BF:CC:AC:1D:C8:78:41:85:6B:4C:19:B2","sha256":"A4:A4:A6:BE:28:B4:82:E1:62:6E:7E:7D:67:19:65:97:23:37:2A:AF:51:EF:0E:99:E4:6B:91:B7:6C:AC:06:A8"}}},"request":{"raw":"OPTIONS /api/user/getConfig HTTP/1.1\r\nHost: dc.yourrealstores.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,token\r\nReferer: https://www.safepal.top/\r\nOrigin: https://www.safepal.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 16:00:27 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: nginx\r\nx-powered-by: PHP/7.2.34\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.2.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20915,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2ac21fc3b0e2f6610704b9121b3dfcdf","sha1":"0a4b1d954b5cbd0d7b5efc553df7ad1dd6602d82","sha256":"412c92a42b8bd108ebfab057c963a7b50a16717b44e4a0a0e32a68eb0890f74d","sha512":"d0b086b75dbb225cd2671529c98f52eca74ec06818afe95f7fa99dabefcbe24834796d2e7dd885689f62bc19dc6efe7fd40fd80a41b897d0c9b061fe158e2986","ssdeep":"384:UUAs6kOSa//Mlf/VYnzf01X/xoqPvMAZRhq3aNLzbl3ftmrGX6+:UUAshOSagf/VA0/oqPvXhlNXJASX6+","tlshash":"c59222440989bdeea61fb6a86ad75a64334733e2adfc4dc9104fcdd12ee05709803db9","first_seen":"2026-04-10T16:00:47.125698Z","last_seen":"2026-04-10T16:00:47.125698Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2490,"timings":{"blocked":649,"dns":50,"connect":297,"send":0,"wait":1191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/assets/del_1.4d5f89ae-67b78568.png","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:26.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safepal.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 13:31:31 GMT","end":"Thu, 09 Jul 2026 14:31:23 GMT"},"fingerprint":{"sha1":"F8:99:55:9F:05:C2:D6:64:24:EB:A5:26:D1:1C:C1:84:29:87:5F:50","sha256":"07:38:7D:97:BD:57:25:33:E8:41:4F:FB:E4:4D:02:9A:BF:A3:04:99:E3:DF:40:D7:C2:25:15:E1:F8:BD:50:8F"}}},"request":{"raw":"GET /assets/del_1.4d5f89ae-67b78568.png HTTP/1.1\r\nHost: www.safepal.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.safepal.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 16:00:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 7145\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"2e20c02a2acdbb1deb960d674f850f67\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bEoJciH2P7Fw2Fm%2BB%2B4F2xtoCSPYe2ZFOIiojtik45qWCjI6NsBsdHjYwRSyUMbo8kfhSdSVT5b90LvgRVFqFKhpRKANcFDyeBrivZ0RSU2NF%2FiNdkplE9%2FhWPUEf7mSxqo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9ea2f6e47bb62efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7145,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 144, 8-bit colormap, non-interlaced","md5":"4d5f89aec157208fab9c236942382d97","sha1":"f1edb7da5c0a42fe097e1b6149196f39b0ab4ad6","sha256":"67b7856898dfac7e89645678f875f4a693e3b3d37095669ffd35e54b15f86e2c","sha512":"3304fc61ad2dd5d817c04e3bee023dbc69df67b0c862d82103f070cdecfd2bc1fc8ae1ddfc7aaeaa841099cea72c2376ad634581f6f5204fe91595d6d2e560c7","ssdeep":"96:lifxWD+F2diQPBRLU9nbpRjNQ3tjMEmWrl1zeIHohwLdEfaJd42CMGRv:WWWmPBRLU9bpRjO3tjzeImNaZs","tlshash":"bfe18fcd5932ed37d3462914d44ead9e8b248d0cf2392df2120ee10abdfa9109d86db3","first_seen":"2023-05-01T23:49:23Z","last_seen":"2026-04-10T16:08:30.079632Z","times_seen":25,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/assets/hz-22-fff47608.png","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:26.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safepal.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 13:31:31 GMT","end":"Thu, 09 Jul 2026 14:31:23 GMT"},"fingerprint":{"sha1":"F8:99:55:9F:05:C2:D6:64:24:EB:A5:26:D1:1C:C1:84:29:87:5F:50","sha256":"07:38:7D:97:BD:57:25:33:E8:41:4F:FB:E4:4D:02:9A:BF:A3:04:99:E3:DF:40:D7:C2:25:15:E1:F8:BD:50:8F"}}},"request":{"raw":"GET /assets/hz-22-fff47608.png HTTP/1.1\r\nHost: www.safepal.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.safepal.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 16:00:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 14446\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"555d45a30bcc18872544d10f7f2bd717\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=86fNw7FtiyXyzCMwiLCvwB5WwmJZoGb4udIXfIJbTlyxGYyBn%2BYP0JERI0G5kRo1CSDin48PlamgP5FQiLUYA9F%2FwpIHRpTbr6LKOTHT6OudhD2b30NCO7A%2FQ5lUp0QB8UU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9ea2f6e47bbe2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14446,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 60, 8-bit/color RGBA, non-interlaced","md5":"98b0b207a962e2b4c33bbf92cf0367d9","sha1":"d2ffaa61ebcfe61c0306b4ae6cfeaab3316e5e8f","sha256":"fff47608db8d25e776848f60b9d9a7f745713b740cac91b7efab291cae4dfd45","sha512":"0153a1f2285344f5becf4292696bd127a1812802795b852eff49b2c4185a4994805e66e087c363959712ac569b89093715636caf80d0607dcedb71f8e9e5747c","ssdeep":"192:5UqCamBRQhu3Fd45Jg4PXAu817sJwPporN5axLEGzzq4AfuWd34jtyT+4nOJky:5vCrRwn5rL8KJCorN5axXvC4RyydJky","tlshash":"3a52b0a82728e73f45393047716d5a3c26b87c03bff6af9d156e3d3b5698260607029e","first_seen":"2023-08-12T21:50:38Z","last_seen":"2026-04-10T16:08:30.071578Z","times_seen":67,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/assets/coinex.5357a052-5d945df1.png","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:26.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safepal.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 13:31:31 GMT","end":"Thu, 09 Jul 2026 14:31:23 GMT"},"fingerprint":{"sha1":"F8:99:55:9F:05:C2:D6:64:24:EB:A5:26:D1:1C:C1:84:29:87:5F:50","sha256":"07:38:7D:97:BD:57:25:33:E8:41:4F:FB:E4:4D:02:9A:BF:A3:04:99:E3:DF:40:D7:C2:25:15:E1:F8:BD:50:8F"}}},"request":{"raw":"GET /assets/coinex.5357a052-5d945df1.png HTTP/1.1\r\nHost: www.safepal.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.safepal.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 16:00:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 15258\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"e5ff0c11582cc8bd9b0baad8b305a0b0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yKtzBBSSvVmPUTEApZUlnFvZ5O29%2B33lBkQ5AcTBEPf3mESjGcmA7aSiy%2FoZyRSVzbBkMZUNBFvLb%2FJJytWedc%2BC%2BqLgK%2F1otAmoXvu17L%2FjyXFQTSvVZVbfqEBRP7YGvgY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9ea2f6e49c312efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15258,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 440 x 128, 8-bit/color RGBA, non-interlaced","md5":"5357a0525e27fa82d4c2223659b7da7b","sha1":"8c31907948eb7cc7a05a3b02518cb7a2a7d20cee","sha256":"5d945df1caceb8cad0c40606bdf28e6da430f4128c5e5c1324137cf7f456203c","sha512":"be0c418746175488a3ae565768fd803a18c737e60484c9c2969baea87e0809789b34af9f2c76f3c8f62fc954ac4b74ca50a197cac5ed6bc63cfb63e614a35a36","ssdeep":"384:8IDCsmC8nqsF07A4Q0hXV39ESljkcbp5Wn7qik:JQZF0WylxlQG+7qik","tlshash":"5662cfd43f3bb89f54635178e9c215875e06a4d05ebc65280d220bbca4dc8e25b4af8f","first_seen":"2023-10-27T05:26:00Z","last_seen":"2026-04-10T16:08:30.067635Z","times_seen":13,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/assets/notice-4cea0a84.jpg","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:26.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safepal.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 13:31:31 GMT","end":"Thu, 09 Jul 2026 14:31:23 GMT"},"fingerprint":{"sha1":"F8:99:55:9F:05:C2:D6:64:24:EB:A5:26:D1:1C:C1:84:29:87:5F:50","sha256":"07:38:7D:97:BD:57:25:33:E8:41:4F:FB:E4:4D:02:9A:BF:A3:04:99:E3:DF:40:D7:C2:25:15:E1:F8:BD:50:8F"}}},"request":{"raw":"GET /assets/notice-4cea0a84.jpg HTTP/1.1\r\nHost: www.safepal.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.safepal.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 16:00:26 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 80794\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"922778c88362ff3ab64b0d997584dda9\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WEtJ1shCqgR4PlVDxTnA1gaV6sudC%2FUacwxnCEtWSTLvfZlWRf9s5lOZvGc1vfJvAj2mAZA2e9j8BfrDhjXya3IuV60TFtwIlkbqYlQW9xrur%2FQO85HZJ9jpzbSZ9%2BAJShg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9ea2f6e4fd6f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80794,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1024x690, components 3","md5":"0fdd8cf015454dbc910e951312b2515c","sha1":"0277f5c571b6f679830e8cb06bc769e7b3a76ca4","sha256":"4cea0a84aa6640050fd8752a3ff4f4092250ff9cf188d46e2e9fa1b2d4ca67ef","sha512":"ffc2291406989fb7edf80ae8820aac4d737b02ee99897d576c3ab2f81a17bd9370dfbd452d3e9280e3d915ff483142bad3f23d5e40ef48fa495d6946386018c9","ssdeep":"1536:5Qm5N0NZCFTi/3apnlIE7gXeIA3S3jr+PMtNgSZbXC53:5QmDuZCFTKKnHguIu4bXC53","tlshash":"258312aae8617807d8f096dbae0f85b4c812c49d04066821b369a7d81dc564f5dd3fff","first_seen":"2023-10-27T05:26:00Z","last_seen":"2026-04-10T16:08:30.077751Z","times_seen":10,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFd2JQEk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:26.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFd2JQEk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://www.safepal.top/\r\nOrigin: https://www.safepal.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 04 Apr 2026 01:57:38 GMT\r\nexpires: Sun, 04 Apr 2027 01:57:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 568968\r\nlast-modified: Wed, 27 Apr 2022 16:10:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-04-11T19:56:27.388969Z","times_seen":209069,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":69,"dns":6,"connect":21,"send":0,"wait":15,"receive":4,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecnFHGPc.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:26.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecnFHGPc.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://www.safepal.top/\r\nOrigin: https://www.safepal.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 04 Apr 2026 02:12:14 GMT\r\nexpires: Sun, 04 Apr 2027 02:12:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 568092\r\nlast-modified: Wed, 27 Apr 2022 16:07:00 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-04-11T19:59:51.699559Z","times_seen":301016,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":68,"dns":5,"connect":21,"send":0,"wait":18,"receive":1,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/assets/footer.122811e8.js","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:25.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safepal.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 13:31:31 GMT","end":"Thu, 09 Jul 2026 14:31:23 GMT"},"fingerprint":{"sha1":"F8:99:55:9F:05:C2:D6:64:24:EB:A5:26:D1:1C:C1:84:29:87:5F:50","sha256":"07:38:7D:97:BD:57:25:33:E8:41:4F:FB:E4:4D:02:9A:BF:A3:04:99:E3:DF:40:D7:C2:25:15:E1:F8:BD:50:8F"}}},"request":{"raw":"GET /assets/footer.122811e8.js HTTP/1.1\r\nHost: www.safepal.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.safepal.top/assets/pages-index.bd78566e.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 16:00:25 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ScSBq9VYEVA5uOQeDp8S6EnCq7s6F9dm%2FbjNs2QoMGGJ83aYldolbhKEtaE4Rzsr%2FgGQ0j1UEurl7ZKlkK%2BsndZF1szOuHHJmIDCGWDQwn%2FeWKhzn0JeEWYhAdSvccfcF94%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4e577eff6496b62ef854aebc61bb99d6\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 9ea2f6e24d852efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":882564,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7a470b5efaf0a8e77619ea9bc9938b6b","sha1":"e018017ba5589dbdb971a9188d150da92f597288","sha256":"d600101cd95c99b51c85a14159854e8d7b62febe5c1204bfe91195cc2984a476","sha512":"11844d1d4676f8378a25a76b1fc2d08b409620a9d18db71aa2c534dd11b2a25246285d5ae42bd91bd108382cbbffb729ac92706c4242ca91a65a768fc03c02d3","ssdeep":"6144:opndqCLtdCWJvfDBdw6fLv4U0JrFVitmmP4gVmWdsjQUq0UodUHRH6kkTSTg2yeu:G3Y6jv41FVidhmTklEvec5d","tlshash":"9d155a8173a2f06147da20e114b71007f279ba6d704e446cf668d8ef7da9d89a637f38","first_seen":"2026-03-27T23:31:41.611937Z","last_seen":"2026-04-10T16:08:30.065949Z","times_seen":4,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/#/","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-10T16:00:18.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safepal.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 13:31:31 GMT","end":"Thu, 09 Jul 2026 14:31:23 GMT"},"fingerprint":{"sha1":"F8:99:55:9F:05:C2:D6:64:24:EB:A5:26:D1:1C:C1:84:29:87:5F:50","sha256":"07:38:7D:97:BD:57:25:33:E8:41:4F:FB:E4:4D:02:9A:BF:A3:04:99:E3:DF:40:D7:C2:25:15:E1:F8:BD:50:8F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.safepal.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 16:00:18 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7U%2BAtXHVsUBTuwzg%2BAd%2BACnLCkPerAiTjlaEhbwL1CS8YsLCqEdk3T%2BCJYeMj9UuW5Xe%2BD7%2B%2FXEQcpHaSTIyEsJj4WN2NaiMJ3VNbfmleNJVvoAwNb7CUyt%2F%2FLJ0ItXbyC0%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9ea2f6b37a64b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14042,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (12363)","md5":"ebc5ec215a66cd61b8d2b4210243b6b0","sha1":"92be916a6855ae7f3d462283de027404c1a42340","sha256":"af1227d7646d0a8fbfb465a1e41de9e56730466a05a7d9d71b0d5cb89546af30","sha512":"1737402d9fbe0e489f081f871badf4febbad565e64c7f34dc0fdf0ca004239f7dd4763bc0ab0dfccb7d3634d3f40cf232f39d78ae3ad7028be5b6602cf20ed29","ssdeep":"192:CdQskjuz9Wz3VWWvYW5+RWM0HWX1qW3xVxN4xzW3/G4bW3tU49W30T4sWO4N4D:CXO0a7S5hnKKUe9ObD","tlshash":"d752f0b6053ae54496e78de330cebe07781a903265b65177fa2c4cd88fd782b13a5738","first_seen":"2026-03-27T23:31:41.613382Z","last_seen":"2026-04-10T16:08:30.070828Z","times_seen":4,"resource_available":true,"data":null}},"time_used":349,"timings":{"blocked":71,"dns":52,"connect":1,"send":0,"wait":203,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/assets/kaiserex.0682d0e0-08c81449.png","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:26.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safepal.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 13:31:31 GMT","end":"Thu, 09 Jul 2026 14:31:23 GMT"},"fingerprint":{"sha1":"F8:99:55:9F:05:C2:D6:64:24:EB:A5:26:D1:1C:C1:84:29:87:5F:50","sha256":"07:38:7D:97:BD:57:25:33:E8:41:4F:FB:E4:4D:02:9A:BF:A3:04:99:E3:DF:40:D7:C2:25:15:E1:F8:BD:50:8F"}}},"request":{"raw":"GET /assets/kaiserex.0682d0e0-08c81449.png HTTP/1.1\r\nHost: www.safepal.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.safepal.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 16:00:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 21022\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"2b5ea081cdbcf993b9bb4d321a137933\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j1astz0AkWHPz3JwCC%2FtSaWiCDWBCWS4zrgDuXGWeeXfIZQR4kMUpWl846cwsfanndMOc2bP0aJUs9Sxmg8qO5GWZC7loGSe9Vp4%2B10EupVA2CUDc7usa3OZ4WzekESUUYk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9ea2f6e4ac5b2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21022,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 440 x 128, 8-bit/color RGBA, non-interlaced","md5":"0682d0e06f3ed960d94ee50ea7cd1e51","sha1":"668ba093d34012ec049b5f784c11eeb25b8dba17","sha256":"08c8144992968a35107acb6a2cc8da82cfabbd3bef9defde399511bdf0c460bb","sha512":"377bffeec4cf5af1ba5e107fc1b61bdcf010919b612150b1e95904181b91f0a2cc61dc54042084558f1e970c2592461f791ec65bb85c8ddd25ea23e48418b979","ssdeep":"384:4xFI9aDJHQszIjCQTYCK9G/k4b7BO5NX7YVdPVR1vBmk32VYDMs:4tHqkJsGkVXZmqrYs","tlshash":"b292d0aa90ad07aa0a178df55cf9768767f870997d2a6c771de201f2823f7f201b1701","first_seen":"2023-10-27T05:26:00Z","last_seen":"2026-04-10T16:08:30.074061Z","times_seen":13,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/assets/uniswap.a4c04e2b-9141bc2e.png","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:26.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safepal.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 13:31:31 GMT","end":"Thu, 09 Jul 2026 14:31:23 GMT"},"fingerprint":{"sha1":"F8:99:55:9F:05:C2:D6:64:24:EB:A5:26:D1:1C:C1:84:29:87:5F:50","sha256":"07:38:7D:97:BD:57:25:33:E8:41:4F:FB:E4:4D:02:9A:BF:A3:04:99:E3:DF:40:D7:C2:25:15:E1:F8:BD:50:8F"}}},"request":{"raw":"GET /assets/uniswap.a4c04e2b-9141bc2e.png HTTP/1.1\r\nHost: www.safepal.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.safepal.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 16:00:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 11801\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"071c9e1c760ff6425c49c6e677230be1\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X36qk2budR8yEG9Ss4HAtDFUQyQCe1UGEtRRHjgpG3zoUIXwmyOBFKbuipqDib664CwJ9vYR8RU1QVdzF7PRNFAmF%2FP%2B%2BXOPXvX5B2gZnK%2FXd5wJx9MnNWNc4FFOBJA%2FjxM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9ea2f6e4ac5c2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11801,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 440 x 128, 8-bit/color RGBA, non-interlaced","md5":"a4c04e2b66069305ae7595ec55c8dbf2","sha1":"e7ffeff1c20347dba62e6275ddff6080295b657b","sha256":"9141bc2ec8287cb6f93210fc57c99a163a5306113a50851b797e8019d6bf0378","sha512":"94aea356399f8eac5d086542215bcadc0f4d40ae6bd37cc6244ca4d9b2434a450d7cbc7c29289a0e232a6485078096227821a7577361e58e69efd380944db8d0","ssdeep":"192:FdMnFKDVI4RCfir5Ba8+CWu9fK1RIKEtBDJDhkI97/PJWqlYinespNYYV:GKDVXRminW9u9yEXhGMtoine0Nn","tlshash":"6232aebd17d5fc95ff4a7b8c94a299706ba13de7183c2340c538414c68ee2c6a9f3640","first_seen":"2023-10-27T05:26:00Z","last_seen":"2026-04-10T16:08:30.080201Z","times_seen":13,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/assets/mercado.405a1c76-64ff6a7c.png","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:26.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safepal.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 13:31:31 GMT","end":"Thu, 09 Jul 2026 14:31:23 GMT"},"fingerprint":{"sha1":"F8:99:55:9F:05:C2:D6:64:24:EB:A5:26:D1:1C:C1:84:29:87:5F:50","sha256":"07:38:7D:97:BD:57:25:33:E8:41:4F:FB:E4:4D:02:9A:BF:A3:04:99:E3:DF:40:D7:C2:25:15:E1:F8:BD:50:8F"}}},"request":{"raw":"GET /assets/mercado.405a1c76-64ff6a7c.png HTTP/1.1\r\nHost: www.safepal.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.safepal.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 16:00:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 14223\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"ba6ddd814aa7c6a60e913e3dc1781b24\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JBDZ3PhxCAUFgYs5qM%2FnoUXrUuysRCMXZd95RJVsX5hr807SDpxG3ywMHaq2jH%2FUaG5s4hEyiwNMgESGPD%2FH5at6rzjlUT2E1xrrlqUFflqXS0xgd3mLfVDlVUTCwM8M4iw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9ea2f6e4ac642efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14223,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 440 x 128, 8-bit/color RGBA, non-interlaced","md5":"405a1c76ea8b0350f7ece051a83e6338","sha1":"ad8c7753e0bced4b7373f2fa09e4d93a05c5cc27","sha256":"64ff6a7ceced09bbb9d640508f25158526a221728760b472eb3987fae28a62f8","sha512":"4643af9911bfd202c3c062a18a47c217ad36d721f62d38fd7206beab324080cfcee7e8a0d374af1bcd2b1db45652c0191ce050a039950eab0052f126b6778d1f","ssdeep":"384:Fc8zna2IAMzNpvASpbDlpaeY3TGpgHQzwE+:Fc8znaE0vNFyqeiwp","tlshash":"b652bf93e003ab66fe134725431850bac84739d52da79603f86f5a780eef867ed63491","first_seen":"2023-10-27T05:26:00Z","last_seen":"2026-04-10T16:08:30.075142Z","times_seen":13,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/assets/ethereum-625c0076.png","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:26.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safepal.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 13:31:31 GMT","end":"Thu, 09 Jul 2026 14:31:23 GMT"},"fingerprint":{"sha1":"F8:99:55:9F:05:C2:D6:64:24:EB:A5:26:D1:1C:C1:84:29:87:5F:50","sha256":"07:38:7D:97:BD:57:25:33:E8:41:4F:FB:E4:4D:02:9A:BF:A3:04:99:E3:DF:40:D7:C2:25:15:E1:F8:BD:50:8F"}}},"request":{"raw":"GET /assets/ethereum-625c0076.png HTTP/1.1\r\nHost: www.safepal.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.safepal.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 16:00:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 100667\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"e0a2a825ef83f1eaed92a157e804138b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=htD6rezU1O3n6x64HZDtlg69o5LvM761k%2BMHV9I92w3swPfCSZCAYBtEKyyTTIcpTt7pG%2BQfN93WgzGXFPZ4U4JUSkiYqSO5pSiQ5UuaOtECXNQWGRl1ZI3MVNkGoWcjv%2FU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9ea2f6e4ccc32efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":100667,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"a5c2e470ac0e2d071db1ba3226dab248","sha1":"159e6d5b499a928afc7bc5722b6aff3655ed1ea8","sha256":"625c0076ebc7c835df96fed1471600b541ff0cc84cd13f05c8f7d5295781bad6","sha512":"2f1cf8f809bf524e35e9a2981db51c95cc39250d174e9554ef4d671f48dbcf9fadaa6354f22b777b441925d63c0cd820eebaa4efbb261a9fe01778cdb2541a3c","ssdeep":"1536:CyMGlBXGwSKVpxDZ8vM9l1qg/PYOpSoDwpHkIArvjrnCL3gpRHNh/5+JBNlg81rL:CyTPSIFZ80lqK+uy1ALi3I95+J3lHv","tlshash":"b7a312cf825a7aaedc0b9732e865a2046f456ff2801ed07ed572d00c9753afc9a275d0","first_seen":"2025-03-07T13:00:16.493802Z","last_seen":"2026-04-10T16:08:30.075638Z","times_seen":20,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/static/images/tip.png","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:26.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safepal.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 13:31:31 GMT","end":"Thu, 09 Jul 2026 14:31:23 GMT"},"fingerprint":{"sha1":"F8:99:55:9F:05:C2:D6:64:24:EB:A5:26:D1:1C:C1:84:29:87:5F:50","sha256":"07:38:7D:97:BD:57:25:33:E8:41:4F:FB:E4:4D:02:9A:BF:A3:04:99:E3:DF:40:D7:C2:25:15:E1:F8:BD:50:8F"}}},"request":{"raw":"GET /static/images/tip.png HTTP/1.1\r\nHost: www.safepal.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.safepal.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 16:00:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 524\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"97329f82e3f51227132b40f64adc1830\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iBm8v%2F1vu%2FWI3fZOV3hiLVEEH1MSthD%2FnbMqQuSnqM6V5EV85951imFwHFTwOY6M2340J3r9am2znQRthdT4qOdFldP9RlD%2FaYMn3FuhTu5Pka4cq%2B1GVU2n833bjg7FyFg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9ea2f6e4ccca2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":524,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"8f7c3f552f20fc2e187b1a31c8954a2d","sha1":"f6b95f9bf18961a86a1ea4b4b9ba999c79f4dc0f","sha256":"cc3811a3b95d46ea7b5d4146f8affbef59fb5beb0c7fc41b33762ddb19162764","sha512":"9572977adc23945667aec004017f9eb387ec19c09857136bfb1f6f97d626f54b9f82b5df8755369fcb25b9eee7be7179ac5a2eafdc8005b6a8ba3cf9dc934c61","ssdeep":"","tlshash":"fcf020a6e944cd3c919514bc85d3e8e220261042644f441b799167f187ca8632689ad6","first_seen":"2023-10-27T05:26:00Z","last_seen":"2026-04-10T16:08:30.076602Z","times_seen":11,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.220.205.65","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:28.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.safepal.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 16:00:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Fri, 10 Apr 2026 16:30:30 GMT\r\ncache-control: max-age=1800\r\nset-cookie: __uni__uid=rBEQRWnZHp6K3pWTAwXSAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-04-11T20:07:44.056065Z","times_seen":14723,"resource_available":false,"data":null}},"time_used":4012,"timings":{"blocked":1727,"dns":43,"connect":275,"send":0,"wait":241,"receive":317,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/assets/content_bg.eb293030.js","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:25.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safepal.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 13:31:31 GMT","end":"Thu, 09 Jul 2026 14:31:23 GMT"},"fingerprint":{"sha1":"F8:99:55:9F:05:C2:D6:64:24:EB:A5:26:D1:1C:C1:84:29:87:5F:50","sha256":"07:38:7D:97:BD:57:25:33:E8:41:4F:FB:E4:4D:02:9A:BF:A3:04:99:E3:DF:40:D7:C2:25:15:E1:F8:BD:50:8F"}}},"request":{"raw":"GET /assets/content_bg.eb293030.js HTTP/1.1\r\nHost: www.safepal.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.safepal.top/assets/pages-index.bd78566e.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 16:00:25 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CVTd8Nz9vazbdTDpUKI91IRy5lIefW5dEm83kL%2BucfNOtkr0TkQrP2ay5GgNaVgdoQnPzVTgPEu7afpyy8lR3xkfKPgjSnt5UCqWdhuqys1DwJYyndY5kohRdM7%2Fi%2F%2B5%2B3s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"006744ef3c4f046724565e16ddce39e2\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 9ea2f6e25d8f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"654dff91065b5ab5930c59abf4bfddbb","sha1":"d0e2becff2476b52be50701037826d83eca8af8f","sha256":"b5e828b9bd222e6cc336a7efb94cd49ad67281f55bbbbbae0928407ea28a0177","sha512":"d4f0dda980281da409444c4ba2b053304c59188289409f31599f9c2fac99c081f98b72a50a686c27283c60dcc63d2b6b5bde7ea4ef2602ffb9da8beca4bcecf4","ssdeep":"","tlshash":"47a00231851104b402196584cb71d6551496851cb61546d680244b49f6955405d5ef24","first_seen":"2026-03-27T23:31:41.643353Z","last_seen":"2026-04-10T16:08:30.070321Z","times_seen":4,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/favicon.ico","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:26.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safepal.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 13:31:31 GMT","end":"Thu, 09 Jul 2026 14:31:23 GMT"},"fingerprint":{"sha1":"F8:99:55:9F:05:C2:D6:64:24:EB:A5:26:D1:1C:C1:84:29:87:5F:50","sha256":"07:38:7D:97:BD:57:25:33:E8:41:4F:FB:E4:4D:02:9A:BF:A3:04:99:E3:DF:40:D7:C2:25:15:E1:F8:BD:50:8F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.safepal.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.safepal.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 16:00:26 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F6VcQNaIuUg9XbHCY%2B8jAPhxoJnvNpSykjhnyrUI4dXXrLYUfOk1otFBaqQYHFpoc0Of3cezIO9jD7rjQg6rVLlebluSJ1HCN%2BvMmZRYxBvuFISfStSE%2Bs60qFd81j3aTjs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\nlast-modified: Fri, 10 Apr 2026 16:00:26 GMT\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9ea2f6e2bea72efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14042,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (12363)","md5":"ebc5ec215a66cd61b8d2b4210243b6b0","sha1":"92be916a6855ae7f3d462283de027404c1a42340","sha256":"af1227d7646d0a8fbfb465a1e41de9e56730466a05a7d9d71b0d5cb89546af30","sha512":"1737402d9fbe0e489f081f871badf4febbad565e64c7f34dc0fdf0ca004239f7dd4763bc0ab0dfccb7d3634d3f40cf232f39d78ae3ad7028be5b6602cf20ed29","ssdeep":"192:CdQskjuz9Wz3VWWvYW5+RWM0HWX1qW3xVxN4xzW3/G4bW3tU49W30T4sWO4N4D:CXO0a7S5hnKKUe9ObD","tlshash":"d752f0b6053ae54496e78de330cebe07781a903265b65177fa2c4cd88fd782b13a5738","first_seen":"2026-03-27T23:31:41.613382Z","last_seen":"2026-04-10T16:08:30.070828Z","times_seen":4,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chatapi.yourrealstores.com/customerServer.js","fqdn":"chatapi.yourrealstores.com","domain":"yourrealstores.com","tld":"com"},"ip":{"addr":"3.39.14.95","port":443,"asn":16509,"as":"AMAZON-02","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:18.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yourrealstores.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 14 Jan 2026 00:00:00 GMT","end":"Fri, 12 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"0F:0A:29:93:5D:E7:7B:AC:BF:CC:AC:1D:C8:78:41:85:6B:4C:19:B2","sha256":"A4:A4:A6:BE:28:B4:82:E1:62:6E:7E:7D:67:19:65:97:23:37:2A:AF:51:EF:0E:99:E4:6B:91:B7:6C:AC:06:A8"}}},"request":{"raw":"GET /customerServer.js HTTP/1.1\r\nHost: chatapi.yourrealstores.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.safepal.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 16:00:21 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 44512\r\nlast-modified: Sun, 04 Jan 2026 09:14:11 GMT\r\nserver: swoole-http-server\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44512,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (13321)","md5":"8be8eaad75e18698266e1da49877ca4c","sha1":"197f695e5e23da40a1a83bcf32aa24d0b3cbdb1d","sha256":"6418330446ba2caa6ef8318ab4550994ed249fec26d71c78539f9e313aa92a42","sha512":"013d3c50736fe64252abc472d7a7e72dc9455a95635195a4623c8e3cfcc85c43d5a4ee99f732652c0c03d8dd72c7b57d9a0f8cc7d8755094480535510b66072c","ssdeep":"768:lIVy0juMiYj8rMVN5uZyDuV3yOAWmAh+i6jwyGGXLOc:eVy0liY4rMVN5uIuxyKeGGb3","tlshash":"db136c3656fb046a858371a85f0e6204ae21440b540bed287fac5be27fc943d96f1ff5","first_seen":"2026-03-06T23:33:59.135622Z","last_seen":"2026-04-10T16:08:30.080762Z","times_seen":5,"resource_available":true,"data":null}},"time_used":9024,"timings":{"blocked":2098,"dns":54,"connect":1572,"send":0,"wait":2428,"receive":2396,"ssl":474},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/assets/pages-index.bd78566e.js","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:25.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safepal.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 13:31:31 GMT","end":"Thu, 09 Jul 2026 14:31:23 GMT"},"fingerprint":{"sha1":"F8:99:55:9F:05:C2:D6:64:24:EB:A5:26:D1:1C:C1:84:29:87:5F:50","sha256":"07:38:7D:97:BD:57:25:33:E8:41:4F:FB:E4:4D:02:9A:BF:A3:04:99:E3:DF:40:D7:C2:25:15:E1:F8:BD:50:8F"}}},"request":{"raw":"GET /assets/pages-index.bd78566e.js HTTP/1.1\r\nHost: www.safepal.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.safepal.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 16:00:25 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BGxj0w1Ak4bNXHgNebgJRK1pb0QtwgOsjKgKQyPaBjxacCw5110uP8LdynoM3S5LXOxj3RR10AzIKg9GitJb2%2B34api7k5V%2BVL3iJOwAoYeQYg7tyJXX0uhwyW2R%2FGi9gRQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4637c094b43000f53e72688fa79abeeb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 9ea2f6e1bb922efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18860,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (18859)","md5":"a00ad92138a31adfb115551c10271c02","sha1":"37baa28efbc891172919c27a30e9670688f1a577","sha256":"e317bfde5e87397902f3da7cb6a35fbb2c32275ab2cfdaa759ff7ae3189a02d7","sha512":"5c4814949fa62cc80a4e78766c25c2a56f44041ecab90afc6a51d4970efe7736b60b7163957c2420bd82026d59f46b8d51d21cdb4e4b5ba97c7c5805b6ad30d6","ssdeep":"384:6lSyJrSrndCrDxEnGcGJzJ8PKbNubsUZXO:6DJrSrfGc/JO","tlshash":"a682d8076a2cdb7238677128e9c2451db4a95f7ee602272a72b4281f1ff3c1451f972e","first_seen":"2026-03-27T23:31:41.629034Z","last_seen":"2026-04-10T16:08:30.072575Z","times_seen":4,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/assets/content_bg.eb293030.js","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:25.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safepal.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 13:31:31 GMT","end":"Thu, 09 Jul 2026 14:31:23 GMT"},"fingerprint":{"sha1":"F8:99:55:9F:05:C2:D6:64:24:EB:A5:26:D1:1C:C1:84:29:87:5F:50","sha256":"07:38:7D:97:BD:57:25:33:E8:41:4F:FB:E4:4D:02:9A:BF:A3:04:99:E3:DF:40:D7:C2:25:15:E1:F8:BD:50:8F"}}},"request":{"raw":"GET /assets/content_bg.eb293030.js HTTP/1.1\r\nHost: www.safepal.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.safepal.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 16:00:25 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CVTd8Nz9vazbdTDpUKI91IRy5lIefW5dEm83kL%2BucfNOtkr0TkQrP2ay5GgNaVgdoQnPzVTgPEu7afpyy8lR3xkfKPgjSnt5UCqWdhuqys1DwJYyndY5kohRdM7%2Fi%2F%2B5%2B3s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"006744ef3c4f046724565e16ddce39e2\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 9ea2f6e1bbb22efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"654dff91065b5ab5930c59abf4bfddbb","sha1":"d0e2becff2476b52be50701037826d83eca8af8f","sha256":"b5e828b9bd222e6cc336a7efb94cd49ad67281f55bbbbbae0928407ea28a0177","sha512":"d4f0dda980281da409444c4ba2b053304c59188289409f31599f9c2fac99c081f98b72a50a686c27283c60dcc63d2b6b5bde7ea4ef2602ffb9da8beca4bcecf4","ssdeep":"","tlshash":"47a00231851104b402196584cb71d6551496851cb61546d680244b49f6955405d5ef24","first_seen":"2026-03-27T23:31:41.643353Z","last_seen":"2026-04-10T16:08:30.070321Z","times_seen":4,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/assets/bitpanda.f3c75286-a19acb1b.png","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:26.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safepal.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 13:31:31 GMT","end":"Thu, 09 Jul 2026 14:31:23 GMT"},"fingerprint":{"sha1":"F8:99:55:9F:05:C2:D6:64:24:EB:A5:26:D1:1C:C1:84:29:87:5F:50","sha256":"07:38:7D:97:BD:57:25:33:E8:41:4F:FB:E4:4D:02:9A:BF:A3:04:99:E3:DF:40:D7:C2:25:15:E1:F8:BD:50:8F"}}},"request":{"raw":"GET /assets/bitpanda.f3c75286-a19acb1b.png HTTP/1.1\r\nHost: www.safepal.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.safepal.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 16:00:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 13335\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"f84d427bca34bf9c9b31f6fe3b3ac56f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iLQeJdnJ%2BlNKGZQnrz8Yea6SrkjE%2BIO5shPCeLJ8Aqd92byAii82pJRwQLlQAwgbgFXSSKUke8u1n99YF7uJtQ4RSu8Mg8EWdOfhO2L4K18MHEEfppoIbFcFgZD4%2FJ26hZY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9ea2f6e49c212efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13335,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 440 x 128, 8-bit/color RGBA, non-interlaced","md5":"f3c752863f383dafe4dc109997074bda","sha1":"b72814cb5b12a478487a91291665c76231f87be1","sha256":"a19acb1badf70f4fac83392c31a9ad7dfae1e9c8c9d62c1efc9a71a37b4f8ad8","sha512":"fd95243652d65820754885c773d758e67e44b6801273e2ef4c34dd29ab56da4819b490508e1bf3b362c6b379cf2a16f06b1fd33e4df9d0f1283ac808fc1ce493","ssdeep":"192:F6pOWJbYbd9U7LdVTOWiUipEbDAXFHcDsUJgM0M3qU1Y1wPAr6SbYykWsem5R5yM:4pHbYbLUXrTu6fqlc7J76UfUY6A5Kq","tlshash":"5e52bfd602ce675479345a7fd78e20f70b5ef40a6af82128aa3c48a178d252c5f032dd","first_seen":"2023-10-27T05:26:00Z","last_seen":"2026-04-10T16:08:30.067138Z","times_seen":13,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/assets/content_bg-cb3145fb.png","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:26.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safepal.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 13:31:31 GMT","end":"Thu, 09 Jul 2026 14:31:23 GMT"},"fingerprint":{"sha1":"F8:99:55:9F:05:C2:D6:64:24:EB:A5:26:D1:1C:C1:84:29:87:5F:50","sha256":"07:38:7D:97:BD:57:25:33:E8:41:4F:FB:E4:4D:02:9A:BF:A3:04:99:E3:DF:40:D7:C2:25:15:E1:F8:BD:50:8F"}}},"request":{"raw":"GET /assets/content_bg-cb3145fb.png HTTP/1.1\r\nHost: www.safepal.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.safepal.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 16:00:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 153527\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"e8ad9c4275a6a259d9b00641613f20fd\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F%2FzQ%2BbVI%2FlcwIpGVf4DqD1r1%2FWV%2BPnOkaNXP7egISz3SzMA0fQwiu8soBo5wnDr9C36tJ5bx3gs%2BbT5jop6qmCEmPR7ImOzLZfyQldMhv49RBw%2BTBz9pPu5mrxs859GQ7%2BA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9ea2f6e43b152efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153527,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1440 x 1004, 8-bit/color RGBA, non-interlaced","md5":"8be77b506eeee184dcb5b566cab5f619","sha1":"eb4fe620befeefde0ac533896581f9952f906779","sha256":"cb3145fb5448254144e45f14630358e47fc780e8623a83902fb3bbd470a0474c","sha512":"3239c1525f4be94558af2bdd7e89908369ed6a63056df97ff09e1be6fb1dbfa13f01afa4cf529dea031058c2c6a38efb9edec36100ee10a4f724e1d98a26aa99","ssdeep":"3072:KpoqVnYbSvrTeicUxWjKERS3o5f+U0r+5NtDtM+kMEcZ2n+:EPNcYWO9o5fp0rFiL","tlshash":"66e312019c5d4db7d856207639d45b6f3cbaef60a1cb8f6fe3210214989f7a1b28f819","first_seen":"2025-03-07T13:00:16.502959Z","last_seen":"2026-04-10T16:08:30.063086Z","times_seen":19,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/assets/okcoin.a962cf41-a8e17616.png","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:26.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safepal.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 13:31:31 GMT","end":"Thu, 09 Jul 2026 14:31:23 GMT"},"fingerprint":{"sha1":"F8:99:55:9F:05:C2:D6:64:24:EB:A5:26:D1:1C:C1:84:29:87:5F:50","sha256":"07:38:7D:97:BD:57:25:33:E8:41:4F:FB:E4:4D:02:9A:BF:A3:04:99:E3:DF:40:D7:C2:25:15:E1:F8:BD:50:8F"}}},"request":{"raw":"GET /assets/okcoin.a962cf41-a8e17616.png HTTP/1.1\r\nHost: www.safepal.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.safepal.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 16:00:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 12487\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"5bb4c485c0c89ea03b34c1bbbdf5acc8\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FKjoPDdfYVfmJ5v4deYPlNHSaA6S8hsz3zbLpbzjmITbRgK1YBo0hfuMasH6JfU0erIGC0o0do%2BAAO7i8WMRY7yK5sPbxHVHxxUk3XW2OcOCAj705Mbs0DFX48oltaJVFMs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9ea2f6e4ac5e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12487,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 440 x 128, 8-bit/color RGBA, non-interlaced","md5":"a962cf41f431e804a796361e09a8ef85","sha1":"ebc8c65e4ef239ccc3860271ef4ab1a07cc3e328","sha256":"a8e17616e9be4cb09b0d94b536b6c214f9c065a1157963d4abcce3c6707f9788","sha512":"3ad9adb144cc498fa0a0d56cf24704fb2eee207a2f0f18d64d9e75b6e2e75e04eeeaba3935e5f1d8147bad59007f443f3d833053391a4683819accea4946bb8e","ssdeep":"384:LyilG+SrczJnJBipCtopf1yyPNRXR0iS18:GiOoNJsIkfkY1R0iSS","tlshash":"2642bf30ce3fc6ed6eaa2fb71dfc6442cf441d1745467425ba6abd990a02493e24271d","first_seen":"2023-10-27T05:26:00Z","last_seen":"2026-04-10T16:08:30.068287Z","times_seen":13,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/assets/digifinex.7b8ce0a1-65aed52c.png","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:26.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safepal.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 13:31:31 GMT","end":"Thu, 09 Jul 2026 14:31:23 GMT"},"fingerprint":{"sha1":"F8:99:55:9F:05:C2:D6:64:24:EB:A5:26:D1:1C:C1:84:29:87:5F:50","sha256":"07:38:7D:97:BD:57:25:33:E8:41:4F:FB:E4:4D:02:9A:BF:A3:04:99:E3:DF:40:D7:C2:25:15:E1:F8:BD:50:8F"}}},"request":{"raw":"GET /assets/digifinex.7b8ce0a1-65aed52c.png HTTP/1.1\r\nHost: www.safepal.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.safepal.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 16:00:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 13294\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"dab4af60f66529b69cd6970f410cf915\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DhBxflen0llkMrUycM5cjKGfc1ISQFCoAwOFw3yj%2BEi7mOwdNGDoE4%2FYw0tnLE3kZhj27%2Bg%2Fa3LcXujZrk9Tl%2Faew5OV7J6462b1pblV7jHoEzyt18UY1BqlzBGFrYvUuEM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 9ea2f6e4ac612efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13294,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 440 x 128, 8-bit/color RGBA, non-interlaced","md5":"7b8ce0a13d9da00fb2b1992007d8e768","sha1":"04bcfe99877cd65893c5d1d0f672d7a656b997fb","sha256":"65aed52cbecb062fa5de2da9e5f96a36dd93ce3af2e0b13925f443e6104fa167","sha512":"6412da50c53140b5ee636b56904c011eb55df80f7f6e4a0f2b67da7259c73cdbf552232a919eb052a4660d2b4d57e4e0574459fa8cd01a8bac13a4a7628ae10b","ssdeep":"384:W69jrOEA2hno7TZZbyKQs8S2xPL5lIiU7:W6ako7TZZbItzct7","tlshash":"0552bf014b07f3ceaff62a3ae637c57cda3838fc9e69128245719b365550720b17228b","first_seen":"2023-10-27T05:26:00Z","last_seen":"2026-04-10T16:08:30.074646Z","times_seen":13,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dc.yourrealstores.com/api/user/getConfig","fqdn":"dc.yourrealstores.com","domain":"yourrealstores.com","tld":"com"},"ip":{"addr":"3.35.212.128","port":443,"asn":16509,"as":"AMAZON-02","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:28.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yourrealstores.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 14 Jan 2026 00:00:00 GMT","end":"Fri, 12 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"0F:0A:29:93:5D:E7:7B:AC:BF:CC:AC:1D:C8:78:41:85:6B:4C:19:B2","sha256":"A4:A4:A6:BE:28:B4:82:E1:62:6E:7E:7D:67:19:65:97:23:37:2A:AF:51:EF:0E:99:E4:6B:91:B7:6C:AC:06:A8"}}},"request":{"raw":"POST /api/user/getConfig HTTP/1.1\r\nHost: dc.yourrealstores.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.safepal.top/\r\ntoken: \r\nContent-Type: application/json\r\nContent-Length: 2\r\nOrigin: https://www.safepal.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 16:00:28 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: nginx\r\nx-powered-by: PHP/7.2.34\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.2.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20915,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2ac21fc3b0e2f6610704b9121b3dfcdf","sha1":"0a4b1d954b5cbd0d7b5efc553df7ad1dd6602d82","sha256":"412c92a42b8bd108ebfab057c963a7b50a16717b44e4a0a0e32a68eb0890f74d","sha512":"d0b086b75dbb225cd2671529c98f52eca74ec06818afe95f7fa99dabefcbe24834796d2e7dd885689f62bc19dc6efe7fd40fd80a41b897d0c9b061fe158e2986","ssdeep":"384:UUAs6kOSa//Mlf/VYnzf01X/xoqPvMAZRhq3aNLzbl3ftmrGX6+:UUAshOSagf/VA0/oqPvXhlNXJASX6+","tlshash":"c59222440989bdeea61fb6a86ad75a64334733e2adfc4dc9104fcdd12ee05709803db9","first_seen":"2026-04-10T16:00:47.125698Z","last_seen":"2026-04-10T16:00:47.125698Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8764,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8764,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/assets/uni.a7dd82da.css","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:18.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safepal.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 13:31:31 GMT","end":"Thu, 09 Jul 2026 14:31:23 GMT"},"fingerprint":{"sha1":"F8:99:55:9F:05:C2:D6:64:24:EB:A5:26:D1:1C:C1:84:29:87:5F:50","sha256":"07:38:7D:97:BD:57:25:33:E8:41:4F:FB:E4:4D:02:9A:BF:A3:04:99:E3:DF:40:D7:C2:25:15:E1:F8:BD:50:8F"}}},"request":{"raw":"GET /assets/uni.a7dd82da.css HTTP/1.1\r\nHost: www.safepal.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.safepal.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 16:00:18 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U5YMn5ziFgQYToKqZwqf7SXtFMiWjVvUTNWqFgozITpj8bSYDJhx7%2FfKJOwR7frWTzep%2B4MBJC2n3oKtNbGDZbaJSnkRc3B9RaVR1S96A0BeYgRgssMRh0h%2B8MTQNX4rh50%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"de0c73ce71872e7df6dabc2030bdcfad\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\ncf-ray: 9ea2f6b58fc92efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18550,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (18549)","md5":"f9f4f8024bbf354bff5d861dc1021464","sha1":"9c3e8af82747df0e5b35b1517bbdf87760229643","sha256":"a7dd82da720fcff1d0bc917214edf301190a14fbe7013dba695b609f23cf1194","sha512":"cb23be725b884f1fe0d0e9cf5009f817fb160c907f1ac4e7c95401cdb34efa521b65a036768d627ea1dadd957676468ed8b55c1b38b6c8efcbaadd11e9b94f35","ssdeep":"192:Ujj8LGJ0CQLnWL9RNXVA8JzTb741bN2zZ2EDyPhv4rF6y01mWfDncwmE57fIraH:UXpmLWLs8JXHNZVwO70PfDcwp57fhH","tlshash":"6382a4319a01252cf957ca2665d1df8f2231c4b3e5a32f1cebb63568ca9e5c6193e3c4","first_seen":"2026-03-27T23:31:41.648246Z","last_seen":"2026-04-10T16:08:30.073303Z","times_seen":4,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/assets/index-2a8f21a8.js","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:18.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safepal.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 13:31:31 GMT","end":"Thu, 09 Jul 2026 14:31:23 GMT"},"fingerprint":{"sha1":"F8:99:55:9F:05:C2:D6:64:24:EB:A5:26:D1:1C:C1:84:29:87:5F:50","sha256":"07:38:7D:97:BD:57:25:33:E8:41:4F:FB:E4:4D:02:9A:BF:A3:04:99:E3:DF:40:D7:C2:25:15:E1:F8:BD:50:8F"}}},"request":{"raw":"GET /assets/index-2a8f21a8.js HTTP/1.1\r\nHost: www.safepal.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.safepal.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 16:00:18 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KVzs0Vrq0Rg6IrxLTkNrPCoUNGYAjajIFXAu8fLv1X0SjDX9JWCPA51QVFZn0MBWr0CfL4V5JeqAdYCob2ZmvG4ZvItrMbloGAeXuyBpTuSod3XaJw%2FEOsO4eTAlnh7F%2BvM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6bb867ea131058dea00582d101cfcc3b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\ncf-ray: 9ea2f6b58fcb2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":287056,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"135f4d3ae2ee40a37c66badb7c5cafc4","sha1":"3b8426ebf8b7179fe3b63ac0dd129ce7216e43f9","sha256":"afb7d97c3a0019d0bbcff0cef10bf982bd3c9f53387e7c85a1d3907fc7bd99d1","sha512":"55dd060bc05d27278c7952bc2e44113a6486cb86c7cf5574a73f32f3027b5649f09562607806f61d93ec7305de38ad4e291c7fe76e2848af16089c7d1d1e50b1","ssdeep":"6144:Uh1Hyu52j1s5ti7kSIFhVhhUiqS+bU3NKpldDhmWq4kWIb:Uhhyu52j1s5tTFRqS+biKpldsWq4kW6","tlshash":"8a542bea3286b03283fa19e6507b1200b33d1a55780a94d4f17dadd63d33d5992ebf6c","first_seen":"2026-03-27T23:31:41.659551Z","last_seen":"2026-04-10T16:08:30.081225Z","times_seen":4,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/assets/index-4a51b1b8.css","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:25.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safepal.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 13:31:31 GMT","end":"Thu, 09 Jul 2026 14:31:23 GMT"},"fingerprint":{"sha1":"F8:99:55:9F:05:C2:D6:64:24:EB:A5:26:D1:1C:C1:84:29:87:5F:50","sha256":"07:38:7D:97:BD:57:25:33:E8:41:4F:FB:E4:4D:02:9A:BF:A3:04:99:E3:DF:40:D7:C2:25:15:E1:F8:BD:50:8F"}}},"request":{"raw":"GET /assets/index-4a51b1b8.css HTTP/1.1\r\nHost: www.safepal.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.safepal.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 16:00:25 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6zqW8Y0s%2FW%2BTdMzPk6Kjnp2L5ByVLdsnJjcESJoYy5S5CPwdlBTvuNS8m5TPUgO1JbuEhCoWV1HfyAasC3hQcWutqLadbpSFt%2BOKfZBf6nD974J3KLySej3N9PVBHTL2KOY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"5efc88d6e9e8f19b8f614f63621c34cd\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\ncf-ray: 9ea2f6e1ab6f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4754,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (4753)","md5":"3ace56ed953487907433346dc2f6477b","sha1":"56b8b31c5fe510d74a82ac84bab79bc75877e79b","sha256":"4a51b1b85c09e5784fdb9f8f1dbfa5daa9d860207083cd809e94b174c9e1fc9c","sha512":"5acd8ed5d7372a2a32792a790b4dabd83b2764cf7e8baaff02027d88457bbe1e457224158e91ea4e6e5c0c7b3a5344f3c49168e980752c7c2d75964204177268","ssdeep":"96:5pXFdURP8CTwJaVJiXQxsabYJh2E2skAUAhehWTZ:57dUh8CTUaXiXwsab8h2E2skAUAhesTZ","tlshash":"e9a1df3e295a240ce4bfe6623b7506cc0134d69cf6af452cca176634c5af5833d2e6d9","first_seen":"2026-03-27T23:31:41.651686Z","last_seen":"2026-04-10T16:08:30.079157Z","times_seen":4,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/assets/footer.122811e8.js","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:25.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safepal.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 13:31:31 GMT","end":"Thu, 09 Jul 2026 14:31:23 GMT"},"fingerprint":{"sha1":"F8:99:55:9F:05:C2:D6:64:24:EB:A5:26:D1:1C:C1:84:29:87:5F:50","sha256":"07:38:7D:97:BD:57:25:33:E8:41:4F:FB:E4:4D:02:9A:BF:A3:04:99:E3:DF:40:D7:C2:25:15:E1:F8:BD:50:8F"}}},"request":{"raw":"GET /assets/footer.122811e8.js HTTP/1.1\r\nHost: www.safepal.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.safepal.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 16:00:25 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ScSBq9VYEVA5uOQeDp8S6EnCq7s6F9dm%2FbjNs2QoMGGJ83aYldolbhKEtaE4Rzsr%2FgGQ0j1UEurl7ZKlkK%2BsndZF1szOuHHJmIDCGWDQwn%2FeWKhzn0JeEWYhAdSvccfcF94%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4e577eff6496b62ef854aebc61bb99d6\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 9ea2f6e1bb972efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":882564,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7a470b5efaf0a8e77619ea9bc9938b6b","sha1":"e018017ba5589dbdb971a9188d150da92f597288","sha256":"d600101cd95c99b51c85a14159854e8d7b62febe5c1204bfe91195cc2984a476","sha512":"11844d1d4676f8378a25a76b1fc2d08b409620a9d18db71aa2c534dd11b2a25246285d5ae42bd91bd108382cbbffb729ac92706c4242ca91a65a768fc03c02d3","ssdeep":"6144:opndqCLtdCWJvfDBdw6fLv4U0JrFVitmmP4gVmWdsjQUq0UodUHRH6kkTSTg2yeu:G3Y6jv41FVidhmTklEvec5d","tlshash":"9d155a8173a2f06147da20e114b71007f279ba6d704e446cf668d8ef7da9d89a637f38","first_seen":"2026-03-27T23:31:41.611937Z","last_seen":"2026-04-10T16:08:30.065949Z","times_seen":4,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.safepal.top/assets/pages-index.bd78566e.js","fqdn":"www.safepal.top","domain":"safepal.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.safepal.top/#/","date":"2026-04-10T16:00:25.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safepal.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 13:31:31 GMT","end":"Thu, 09 Jul 2026 14:31:23 GMT"},"fingerprint":{"sha1":"F8:99:55:9F:05:C2:D6:64:24:EB:A5:26:D1:1C:C1:84:29:87:5F:50","sha256":"07:38:7D:97:BD:57:25:33:E8:41:4F:FB:E4:4D:02:9A:BF:A3:04:99:E3:DF:40:D7:C2:25:15:E1:F8:BD:50:8F"}}},"request":{"raw":"GET /assets/pages-index.bd78566e.js HTTP/1.1\r\nHost: www.safepal.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.safepal.top/assets/index-2a8f21a8.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 16:00:25 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BGxj0w1Ak4bNXHgNebgJRK1pb0QtwgOsjKgKQyPaBjxacCw5110uP8LdynoM3S5LXOxj3RR10AzIKg9GitJb2%2B34api7k5V%2BVL3iJOwAoYeQYg7tyJXX0uhwyW2R%2FGi9gRQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4637c094b43000f53e72688fa79abeeb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 9ea2f6e22d082efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18860,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (18859)","md5":"a00ad92138a31adfb115551c10271c02","sha1":"37baa28efbc891172919c27a30e9670688f1a577","sha256":"e317bfde5e87397902f3da7cb6a35fbb2c32275ab2cfdaa759ff7ae3189a02d7","sha512":"5c4814949fa62cc80a4e78766c25c2a56f44041ecab90afc6a51d4970efe7736b60b7163957c2420bd82026d59f46b8d51d21cdb4e4b5ba97c7c5805b6ad30d6","ssdeep":"384:6lSyJrSrndCrDxEnGcGJzJ8PKbNubsUZXO:6DJrSrfGc/JO","tlshash":"a682d8076a2cdb7238677128e9c2451db4a95f7ee602272a72b4281f1ff3c1451f972e","first_seen":"2026-03-27T23:31:41.629034Z","last_seen":"2026-04-10T16:08:30.072575Z","times_seen":4,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"www.safepal.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}