{"report_id":"f907d68e-3273-4707-b886-942d478bef43","version":0,"status":"done","tags":[],"date":"2026-10-11T09:52:33Z","url":{"schema":"http","addr":"chat-pal.com/","fqdn":"chat-pal.com","domain":"chat-pal.com","tld":"com"},"ip":{"addr":"20.50.64.7","port":0,"asn":8075,"as":"Microsoft Corporation","country":"Ireland","country_code":"IE"},"final":{"url":{"schema":"https","addr":"chat-pal.com/","fqdn":"chat-pal.com","domain":"chat-pal.com","tld":"com"},"title":"Chat Pal","dom":{"size":352,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"27aa1c5c359ef295ef80ac00b252731b","sha1":"85f3d0542d64f1e94ccbab7f5300850ac83e7857","sha256":"fda349fcd012ccbf2746fe7403d363df53bc3742cab5f5154d32cd8cf2e900d1","sha512":"ee72a45c5fa7ab9f1879f95eb67d45e0540a046c9e086f11c071de8ce93390395f1d5f84d272e4705ae3d5bde5837f74da78aec22414425d6a9c965e355faced","ssdeep":"","tlshash":"d9e0df5fec02e5ef94702e9b05a1f50c6888fa08b0a0c8a892f490660d657c8cc83c91","dom_hash":"domhash3d78875401ee7ce387f50fee193ef9f6","first_seen":"2025-11-23T06:53:15.222413Z","last_seen":"2026-10-11T09:52:37.485405Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"chat-pal.com/","fqdn":"chat-pal.com","domain":"chat-pal.com","tld":"com"},"ip":{"addr":"20.50.64.7","port":0,"asn":8075,"as":"Microsoft Corporation","country":"Ireland","country_code":"IE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-15T09:52:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"chat-pal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"chat-pal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"chat-pal.com","ip":{"addr":"20.50.64.7","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"domain_registered":"2022-09-18","domain_rank":0,"first_seen":"2019-01-14T01:05:18Z","last_seen":"2025-11-23T06:53:14.672188Z","alert_count":12,"request_count":6,"received_data":104751,"sent_data":3542,"comment":"","tags":null,"fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"chat-pal.com/js/app.js","fqdn":"chat-pal.com","domain":"chat-pal.com","tld":"com"},"ip":{"addr":"20.50.64.7","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a32d7981877566990f45e8f1cd76b3f","sha1":"256b8b61598054812d0d942aeda81afe24c8e745","sha256":"46b96356ebcf9cd01bf5abfd9bb4323b68b35950672c57d7f0c818fd85f95b50","sha512":"913e009aa36b0c9dc4aefc87057d9cacd521eb28f24f3b8dc71e272cc04fe7e37cbe553d29831bcf78076016b8b677858b7746217813bd3429f468bd0f5d12e3","ssdeep":"","tlshash":"4b11bde7c51294c504b616ae1a8fae3cd3b3313724c5408575fd6295bfb9c3a4d06e9c","size":1059,"data":"","first_seen":"2024-08-20T09:12:11.522977Z","last_seen":"2026-10-11T09:52:37.497199Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-pal.com/js/vendor/jquery-2.2.4.min.js","fqdn":"chat-pal.com","domain":"chat-pal.com","tld":"com"},"ip":{"addr":"20.50.64.7","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"710458dd559c957714ac4a8e95357eb5","sha1":"f694238d616f579a0690001f37984af430c19963","sha256":"b409c14a10b4caad6b54844aa63a5faf748b83eecc2dd0d4fb1d913f8de55365","sha512":"282d65828a43bfe50fe0f9aea8bca3838ac1b5250e7c7c359c066e0428aa723f001d31c2463681b2ad6816a49a8571bf9f3ae29b2dc53adf1bbd7d5c4471322b","ssdeep":"1536:fYE1JVoiB9JqZdXXe2pD3PgoIiulrUn6Z6a4tfOR7WpfWBZPBJda4w9W3qG9a98N:u4J+rlfOhWpgCW6G9a98Hrp","tlshash":"3583c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85582,"data":"","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-10-11T09:52:37.504066Z","times_seen":13043,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-pal.com/js/params.js","fqdn":"chat-pal.com","domain":"chat-pal.com","tld":"com"},"ip":{"addr":"20.50.64.7","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d204a72e13022b8c36a57a81c0a2c64","sha1":"8217a3c4c0e59215616125adf76d5fc3f265e459","sha256":"7aa6abdfd6c939081f911a042c491b6b1c14cdfd5b745b207390649b019ed6af","sha512":"50e4ef51a3954f364a0ed6f8a792430a4dc597631830c09b454f8a6f3a05ca04d3e15a5c82abf7c44c0e3ff51e1391f598b8a283d2057b91dd644a53551364d6","ssdeep":"192:23yz6doM0C7Z7JMtVuK/oPwk+oQpUQikh:23yz6dodC9NMtVNoPwk+oQOQikh","tlshash":"e56299b41cd75881a3bcd323811d5f1fd8362b5b01122a4bb9bce1986ffab4625c1e39","size":14784,"data":"","first_seen":"2023-11-08T05:47:25Z","last_seen":"2026-10-11T09:52:37.490234Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-pal.com/js/updateUrl.js","fqdn":"chat-pal.com","domain":"chat-pal.com","tld":"com"},"ip":{"addr":"20.50.64.7","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb0f9ec12aef98e011ee6493cb3b5d4a","sha1":"1c5180caf65b8b54111f6661bb8c971c8664bfc4","sha256":"fbf78cccc7fbc001b2e270e5cf812373118c5930e365fa296b02e2069767bb01","sha512":"d0234a79c37b9cfe8c3454473dad3968adbe6d2a3fcea4cd63b0fdb3a1c4027fa115aeea051ec723cdec149ef505ce31b44226455ebd620247e53d9fb78ba450","ssdeep":"","tlshash":"5311f50cd461d1c051f263a4ca47aa34da3b9237391121d47addbb402f3ec29456ffad","size":868,"data":"","first_seen":"2023-08-28T00:41:24Z","last_seen":"2026-10-11T09:52:37.495443Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"chat-pal.com/js/params.js","fqdn":"chat-pal.com","domain":"chat-pal.com","tld":"com"},"ip":{"addr":"20.50.64.7","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat-pal.com/","date":"2026-10-11T09:51:13.656Z","timestamp":1791712273656,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat-pal.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 18 Sep 2026 00:00:00 GMT","end":"Thu, 18 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EB:06:CF:BA:12:E9:98:72:B5:4D:CE:E4:57:86:87:84:56:1A:04:62","sha256":"78:CC:F3:DF:D9:7E:4D:AE:67:FC:86:DC:3A:D3:BC:57:EC:13:DD:8B:A0:FA:3B:69:28:9D:61:BE:60:57:09:E2"}}},"request":{"raw":"GET /js/params.js HTTP/1.1\r\nHost: chat-pal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-pal.com/\r\nCookie: ARRAffinity=b82e99a67c67934cccb8b149fcc4f13b341aa056d5e3ae7bf711611e78ecb2a8; ARRAffinitySameSite=b82e99a67c67934cccb8b149fcc4f13b341aa056d5e3ae7bf711611e78ecb2a8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"ARRAffinity","value":"b82e99a67c67934cccb8b149fcc4f13b341aa056d5e3ae7bf711611e78ecb2a8"},{"name":"ARRAffinitySameSite","value":"b82e99a67c67934cccb8b149fcc4f13b341aa056d5e3ae7bf711611e78ecb2a8"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 2678\r\nContent-Type: application/x-javascript\r\nDate: Sun, 11 Oct 2026 09:51:13 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"8019ba13fb7da1:0\"\r\nLast-Modified: Thu, 26 Oct 2023 10:56:31 GMT\r\nVary: Accept-Encoding\r\nX-Powered-By: ASP.NET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":14784,"size_decoded":2988,"mime_type":"application/x-javascript","magic":"ASCII text, with CRLF line terminators","md5":"1d204a72e13022b8c36a57a81c0a2c64","sha1":"8217a3c4c0e59215616125adf76d5fc3f265e459","sha256":"7aa6abdfd6c939081f911a042c491b6b1c14cdfd5b745b207390649b019ed6af","sha512":"50e4ef51a3954f364a0ed6f8a792430a4dc597631830c09b454f8a6f3a05ca04d3e15a5c82abf7c44c0e3ff51e1391f598b8a283d2057b91dd644a53551364d6","ssdeep":"192:23yz6doM0C7Z7JMtVuK/oPwk+oQpUQikh:23yz6dodC9NMtVNoPwk+oQOQikh","tlshash":"e56299b41cd75881a3bcd323811d5f1fd8362b5b01122a4bb9bce1986ffab4625c1e39","first_seen":"2023-11-08T05:47:25Z","last_seen":"2026-10-11T09:52:37.490234Z","times_seen":5,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":27,"send":0,"wait":31,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"chat-pal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"chat-pal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-pal.com/js/updateUrl.js","fqdn":"chat-pal.com","domain":"chat-pal.com","tld":"com"},"ip":{"addr":"20.50.64.7","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat-pal.com/","date":"2026-10-11T09:51:13.658Z","timestamp":1791712273658,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat-pal.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 18 Sep 2026 00:00:00 GMT","end":"Thu, 18 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EB:06:CF:BA:12:E9:98:72:B5:4D:CE:E4:57:86:87:84:56:1A:04:62","sha256":"78:CC:F3:DF:D9:7E:4D:AE:67:FC:86:DC:3A:D3:BC:57:EC:13:DD:8B:A0:FA:3B:69:28:9D:61:BE:60:57:09:E2"}}},"request":{"raw":"GET /js/updateUrl.js HTTP/1.1\r\nHost: chat-pal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-pal.com/\r\nCookie: ARRAffinity=b82e99a67c67934cccb8b149fcc4f13b341aa056d5e3ae7bf711611e78ecb2a8; ARRAffinitySameSite=b82e99a67c67934cccb8b149fcc4f13b341aa056d5e3ae7bf711611e78ecb2a8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"ARRAffinity","value":"b82e99a67c67934cccb8b149fcc4f13b341aa056d5e3ae7bf711611e78ecb2a8"},{"name":"ARRAffinitySameSite","value":"b82e99a67c67934cccb8b149fcc4f13b341aa056d5e3ae7bf711611e78ecb2a8"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 506\r\nContent-Type: application/x-javascript\r\nDate: Sun, 11 Oct 2026 09:51:13 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"15e5a8c39bfd91:0\"\r\nLast-Modified: Tue, 25 Jul 2023 20:49:47 GMT\r\nVary: Accept-Encoding\r\nX-Powered-By: ASP.NET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":868,"size_decoded":815,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"fb0f9ec12aef98e011ee6493cb3b5d4a","sha1":"1c5180caf65b8b54111f6661bb8c971c8664bfc4","sha256":"fbf78cccc7fbc001b2e270e5cf812373118c5930e365fa296b02e2069767bb01","sha512":"d0234a79c37b9cfe8c3454473dad3968adbe6d2a3fcea4cd63b0fdb3a1c4027fa115aeea051ec723cdec149ef505ce31b44226455ebd620247e53d9fb78ba450","ssdeep":"","tlshash":"5311f50cd461d1c051f263a4ca47aa34da3b9237391121d47addbb402f3ec29456ffad","first_seen":"2023-08-28T00:41:24Z","last_seen":"2026-10-11T09:52:37.495443Z","times_seen":6,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":26,"send":0,"wait":31,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"chat-pal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"chat-pal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-pal.com/js/app.js","fqdn":"chat-pal.com","domain":"chat-pal.com","tld":"com"},"ip":{"addr":"20.50.64.7","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat-pal.com/","date":"2026-10-11T09:51:13.660Z","timestamp":1791712273660,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat-pal.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 18 Sep 2026 00:00:00 GMT","end":"Thu, 18 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EB:06:CF:BA:12:E9:98:72:B5:4D:CE:E4:57:86:87:84:56:1A:04:62","sha256":"78:CC:F3:DF:D9:7E:4D:AE:67:FC:86:DC:3A:D3:BC:57:EC:13:DD:8B:A0:FA:3B:69:28:9D:61:BE:60:57:09:E2"}}},"request":{"raw":"GET /js/app.js HTTP/1.1\r\nHost: chat-pal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-pal.com/\r\nCookie: ARRAffinity=b82e99a67c67934cccb8b149fcc4f13b341aa056d5e3ae7bf711611e78ecb2a8; ARRAffinitySameSite=b82e99a67c67934cccb8b149fcc4f13b341aa056d5e3ae7bf711611e78ecb2a8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"ARRAffinity","value":"b82e99a67c67934cccb8b149fcc4f13b341aa056d5e3ae7bf711611e78ecb2a8"},{"name":"ARRAffinitySameSite","value":"b82e99a67c67934cccb8b149fcc4f13b341aa056d5e3ae7bf711611e78ecb2a8"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 548\r\nContent-Type: application/x-javascript\r\nDate: Sun, 11 Oct 2026 09:51:13 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"80fbef1f7320da1:0\"\r\nLast-Modified: Sun, 26 Nov 2023 14:16:19 GMT\r\nVary: Accept-Encoding\r\nX-Powered-By: ASP.NET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1059,"size_decoded":858,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"8a32d7981877566990f45e8f1cd76b3f","sha1":"256b8b61598054812d0d942aeda81afe24c8e745","sha256":"46b96356ebcf9cd01bf5abfd9bb4323b68b35950672c57d7f0c818fd85f95b50","sha512":"913e009aa36b0c9dc4aefc87057d9cacd521eb28f24f3b8dc71e272cc04fe7e37cbe553d29831bcf78076016b8b677858b7746217813bd3429f468bd0f5d12e3","ssdeep":"","tlshash":"4b11bde7c51294c504b616ae1a8fae3cd3b3313724c5408575fd6295bfb9c3a4d06e9c","first_seen":"2024-08-20T09:12:11.522977Z","last_seen":"2026-10-11T09:52:37.497199Z","times_seen":3,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":27,"send":0,"wait":30,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"chat-pal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"chat-pal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-pal.com/favicon.ico","fqdn":"chat-pal.com","domain":"chat-pal.com","tld":"com"},"ip":{"addr":"20.50.64.7","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-pal.com/","date":"2026-10-11T09:51:13.969Z","timestamp":1791712273969,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat-pal.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 18 Sep 2026 00:00:00 GMT","end":"Thu, 18 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EB:06:CF:BA:12:E9:98:72:B5:4D:CE:E4:57:86:87:84:56:1A:04:62","sha256":"78:CC:F3:DF:D9:7E:4D:AE:67:FC:86:DC:3A:D3:BC:57:EC:13:DD:8B:A0:FA:3B:69:28:9D:61:BE:60:57:09:E2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: chat-pal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-pal.com/\r\nCookie: ARRAffinity=b82e99a67c67934cccb8b149fcc4f13b341aa056d5e3ae7bf711611e78ecb2a8; ARRAffinitySameSite=b82e99a67c67934cccb8b149fcc4f13b341aa056d5e3ae7bf711611e78ecb2a8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"ARRAffinity","value":"b82e99a67c67934cccb8b149fcc4f13b341aa056d5e3ae7bf711611e78ecb2a8"},{"name":"ARRAffinitySameSite","value":"b82e99a67c67934cccb8b149fcc4f13b341aa056d5e3ae7bf711611e78ecb2a8"}],"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nContent-Length: 103\r\nContent-Type: text/html\r\nDate: Sun, 11 Oct 2026 09:51:13 GMT\r\nServer: Microsoft-IIS/10.0\r\nX-Powered-By: ASP.NET\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":103,"size_decoded":263,"mime_type":"text/html","magic":"ASCII text, with no line terminators","md5":"96c5637e1eb8f8f8c34172f2d23eafc6","sha1":"2a416f86c3c9e26f9c34bf1f8b1bb5daa46e86f9","sha256":"90b2d35cd5e08370ed20db81197dd9da1a4dbb421f71293fd5733ea49eb7b3e1","sha512":"4686ba81d38403b2dcfdb0514f1151df5bf555eb12ea47214ffa2e8ea2bed44348144d6731a01eba38890b33726a76dfa26822b4233eb59bf12ed58e9ebb86d3","ssdeep":"","tlshash":"7eb0129b32042073e1c7151c194029410f4483c09b798454c26bad3026f6fd34626ec1","first_seen":"2023-03-12T11:04:24Z","last_seen":"2026-10-11T09:52:37.498851Z","times_seen":4347,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"chat-pal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"chat-pal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-pal.com/","fqdn":"chat-pal.com","domain":"chat-pal.com","tld":"com"},"ip":{"addr":"20.50.64.7","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-11T09:51:11.030Z","timestamp":1791712271030,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat-pal.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 18 Sep 2026 00:00:00 GMT","end":"Thu, 18 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EB:06:CF:BA:12:E9:98:72:B5:4D:CE:E4:57:86:87:84:56:1A:04:62","sha256":"78:CC:F3:DF:D9:7E:4D:AE:67:FC:86:DC:3A:D3:BC:57:EC:13:DD:8B:A0:FA:3B:69:28:9D:61:BE:60:57:09:E2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: chat-pal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 346\r\nContent-Type: text/html\r\nDate: Sun, 11 Oct 2026 09:51:13 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"a34525f83bbfd91:0\"\r\nLast-Modified: Tue, 25 Jul 2023 21:07:07 GMT\r\nSet-Cookie: ARRAffinity=b82e99a67c67934cccb8b149fcc4f13b341aa056d5e3ae7bf711611e78ecb2a8;Path=/;HttpOnly;Secure;Domain=chat-pal.com\nARRAffinitySameSite=b82e99a67c67934cccb8b149fcc4f13b341aa056d5e3ae7bf711611e78ecb2a8;Path=/;HttpOnly;SameSite=None;Secure;Domain=chat-pal.com\r\nVary: Accept-Encoding\r\nX-Powered-By: ASP.NET\r\n\r\n","headers":null,"cookies":[{"name":"ARRAffinity","value":"b82e99a67c67934cccb8b149fcc4f13b341aa056d5e3ae7bf711611e78ecb2a8","quoted":false,"path":"/","domain":"chat-pal.com","secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"ARRAffinity=b82e99a67c67934cccb8b149fcc4f13b341aa056d5e3ae7bf711611e78ecb2a8;Path=/;HttpOnly;Secure;Domain=chat-pal.com"},{"name":"ARRAffinitySameSite","value":"b82e99a67c67934cccb8b149fcc4f13b341aa056d5e3ae7bf711611e78ecb2a8","quoted":false,"path":"/","domain":"chat-pal.com","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"ARRAffinitySameSite=b82e99a67c67934cccb8b149fcc4f13b341aa056d5e3ae7bf711611e78ecb2a8;Path=/;HttpOnly;SameSite=None;Secure;Domain=chat-pal.com"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":384,"size_decoded":916,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"a21010aa806b221ef74acf8a1550658e","sha1":"d5ab74d1bda6dce8ff83ac3c2f3d93e4e41b7b1b","sha256":"83a5e1201ea3af53bb1e6260160bae7b63c9644bca99fc407e95ba513a2e20e9","sha512":"64be6162339f8ea8b9511cd5522ea5202c1ef93f502beb48e6023cd86d6ce71307fc2b61fbad089705b9eefe4f0679511bd80e4a514103844ee21df78915c245","ssdeep":"","tlshash":"08e0926e7d46ecae41b06e7b21a1f1595456fa08b2d0dc69a2f428272d917988c83981","first_seen":"2023-08-28T00:41:24Z","last_seen":"2026-10-11T09:52:37.5Z","times_seen":7,"resource_available":true,"data":null}},"time_used":2372,"timings":{"blocked":-1,"dns":45,"connect":27,"send":0,"wait":30,"receive":0,"ssl":2269},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"chat-pal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"chat-pal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-pal.com/js/vendor/jquery-2.2.4.min.js","fqdn":"chat-pal.com","domain":"chat-pal.com","tld":"com"},"ip":{"addr":"20.50.64.7","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat-pal.com/","date":"2026-10-11T09:51:13.655Z","timestamp":1791712273655,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat-pal.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 18 Sep 2026 00:00:00 GMT","end":"Thu, 18 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EB:06:CF:BA:12:E9:98:72:B5:4D:CE:E4:57:86:87:84:56:1A:04:62","sha256":"78:CC:F3:DF:D9:7E:4D:AE:67:FC:86:DC:3A:D3:BC:57:EC:13:DD:8B:A0:FA:3B:69:28:9D:61:BE:60:57:09:E2"}}},"request":{"raw":"GET /js/vendor/jquery-2.2.4.min.js HTTP/1.1\r\nHost: chat-pal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-pal.com/\r\nCookie: ARRAffinity=b82e99a67c67934cccb8b149fcc4f13b341aa056d5e3ae7bf711611e78ecb2a8; ARRAffinitySameSite=b82e99a67c67934cccb8b149fcc4f13b341aa056d5e3ae7bf711611e78ecb2a8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"ARRAffinity","value":"b82e99a67c67934cccb8b149fcc4f13b341aa056d5e3ae7bf711611e78ecb2a8"},{"name":"ARRAffinitySameSite","value":"b82e99a67c67934cccb8b149fcc4f13b341aa056d5e3ae7bf711611e78ecb2a8"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 38310\r\nContent-Type: application/x-javascript\r\nDate: Sun, 11 Oct 2026 09:51:13 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"b1fdebe159bdd91:0\"\r\nLast-Modified: Sun, 23 Jul 2023 11:36:12 GMT\r\nVary: Accept-Encoding\r\nX-Powered-By: ASP.NET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":85582,"size_decoded":38622,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (32065), with CRLF line terminators","md5":"710458dd559c957714ac4a8e95357eb5","sha1":"f694238d616f579a0690001f37984af430c19963","sha256":"b409c14a10b4caad6b54844aa63a5faf748b83eecc2dd0d4fb1d913f8de55365","sha512":"282d65828a43bfe50fe0f9aea8bca3838ac1b5250e7c7c359c066e0428aa723f001d31c2463681b2ad6816a49a8571bf9f3ae29b2dc53adf1bbd7d5c4471322b","ssdeep":"1536:fYE1JVoiB9JqZdXXe2pD3PgoIiulrUn6Z6a4tfOR7WpfWBZPBJda4w9W3qG9a98N:u4J+rlfOhWpgCW6G9a98Hrp","tlshash":"3583c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-10-11T09:52:37.504066Z","times_seen":13043,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":215,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"chat-pal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"chat-pal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}