fittings-dailymed-spl-fetch

SUSPICIOUS. The medical-data purpose is plausible, but the real footprint is larger: it routes requests through a third-party paid gateway, instructs download-and-execute of an unverifiable script, and forwards a wallet private key into that script. The purpose is mostly aligned, but install trust, credential forwarding, and crypto payment scope make this high risk.