{"report_id":"08597fca-5ae4-4a85-88af-788b52756a45","version":6,"status":"done","tags":[],"date":"2025-08-06T05:44:48Z","url":{"schema":"https","addr":"safestways.com/home","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"safestways.com/home","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"title":"Safestways: Logistics and Delivery Solutions"},"submit":{"url":{"schema":"https","addr":"safestways.com/home","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-10T05:44:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"safestways.com","ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"domain_registered":"2025-04-28","domain_rank":0,"first_seen":"2025-08-06T05:44:52.023414Z","last_seen":"2025-08-06T05:44:52.023414Z","alert_count":74,"request_count":74,"received_data":16358650,"sent_data":33773,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-07-30T15:24:51.957591Z","alert_count":0,"request_count":4,"received_data":46387,"sent_data":2156,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-07-30T15:14:12.092299Z","alert_count":0,"request_count":1,"received_data":7484,"sent_data":571,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"translate.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":1005,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2025-07-30T18:47:33.952812Z","alert_count":0,"request_count":3,"received_data":224982,"sent_data":1694,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":46890,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2025-08-06T05:43:52.749287Z","alert_count":0,"request_count":1,"received_data":18644,"sent_data":419,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-07-30T15:10:27.969323Z","alert_count":0,"request_count":3,"received_data":24548,"sent_data":1541,"comment":"","tags":null,"fingerprints":null},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"18.158.45.127","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2012-08-25","domain_rank":39452,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2025-08-02T15:14:54.599147Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":603,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":0,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2025-08-02T08:49:15.206736Z","alert_count":0,"request_count":1,"received_data":7508,"sent_data":488,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":0,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2025-07-31T21:16:18.315788Z","alert_count":0,"request_count":3,"received_data":308472,"sent_data":1361,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"translate.google.com","ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":1156,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2025-07-31T06:41:13.09668Z","alert_count":0,"request_count":2,"received_data":81195,"sent_data":940,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"3.124.230.70","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":43006,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2025-08-04T05:18:15.597885Z","alert_count":0,"request_count":1,"received_data":1556,"sent_data":521,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"safestways.com/revolution/js/extensions/revolution.extension.carousel.min.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"54aac3fc68b283e8ad22894408ae47a2","sha1":"8164c126f5b57e1ebf04b7440cce2e3aae7e5ba9","sha256":"6180c6c38c4e3b9ac75b0c51215dcf0d6aa5b62757be3d993df8a28ca17a8820","sha512":"35d94cffaa30b5bde92cf0400ccd3c7b309215a6d486dac7f46249ed949fe7a1ea21ab81cd48253a9fa740d2be063b7e4ec7d90051cff7b7b435d2c789766e41","ssdeep":"192:euN8q7sZ9sfpCfQcwaxXTZTn1WUCfl8YafSutLZgO:mqIypeQsZWqf9","tlshash":"13f1628460153daf0652b349966680f953fc294c672be8647cff7165085cacd027feee","size":7607,"data":"","first_seen":"2023-03-07T01:02:47Z","last_seen":"2026-07-27T15:00:25.593836Z","times_seen":1691,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/revolution/js/extensions/revolution.extension.kenburn.min.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"271f12aae2e3fa13230c21b67d39a504","sha1":"d3076c9447e2753a6d96ffc87a9dc38c39b5bc77","sha256":"babb248b22b49d281d8c0e8ac1ee23f072d15a1ddea7029f2643036788ae3b27","sha512":"aed5171fd80f2e2765b71402dc6a119392621be44b16e5fa031eedb19993b8594b9791a640924e886be57ad699e65561b78c3865bc9cd22d4f200c2d20ae53d2","ssdeep":"","tlshash":"047142d220166c5e4ca3a39295ef17c663f1ed283503981c9772b5801eccd1e28bbb9d","size":3756,"data":"","first_seen":"2023-03-07T01:06:36Z","last_seen":"2026-07-27T12:20:13.071218Z","times_seen":520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/home","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"75606a24bd728e5d7d7256fbb679bc26","sha1":"7bfbb31c174ab2a6f4c68c9852c8444c075eab43","sha256":"9932726d2c87611c904eb0b04d822e785cd73f693838aa2cae3fc90a7d8d7746","sha512":"323a9930f67a978713ee419824630ccd74ec99274ead49c8ab87eedc33d5bf4dcc9cd681961483dbef9181b8c884fb7bff7eb579d12e5ac90d194caab6167dc9","ssdeep":"","tlshash":"2ec09247f5b01a4b049ae20ae387488c72bc8509463a4e292791a0ca3eb3f9d070e1a8","size":134,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-06-25T23:48:49.64661Z","times_seen":3253,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/revolution/js/jquery.themepunch.revolution.min.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f238a7a79f7400123d58eba49395d28","sha1":"86dd4c7bc5ef427558f5e1802334aa578c90a424","sha256":"4313fa5bb5c7788ced1058ecc60b11f4e384716bf51b64c3595a712a17e80ee8","sha512":"0e0fdfe1fc4189c94480216b453bcc87fa9a3aa81c530ab6a9fbad6beada8e594afb5bfcff249deccabcacfb058bbbaed1d219c34b7d58795c2fef98bb285712","ssdeep":"1536:kCnzw4thxKWjQemOR3duEZG08YY7df85Jiw8Zwjz3Ui8wD8kVO1WilMO58wA1XXx:kCnzXn8ySEZV3U2ilM0A8pMB","tlshash":"8e53e964be1064b644fb7265a03e4614b2b26d3aa703c090f2a7987c6afcd45235ffdc","size":64995,"data":"","first_seen":"2023-03-07T01:06:36Z","last_seen":"2026-07-27T12:20:13.02853Z","times_seen":727,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/revolution/js/jquery.themepunch.tools.min.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"67a9644e880e7a471d49c73bb7621932","sha1":"2ac89b145da02402ce1877c580850e08076c5109","sha256":"a1dff8b0c66227748951c4ff891f146f49c5a382ac8e3d6e3c2e9cf8aa560dc8","sha512":"1496a2aabf901c0882bee50f779eed1a215caa73bb385944f37f4acc61fa0b3b189a32312ae17d9b2013eaaa0636559a4262756cb1f6b8644341037f044ed4b2","ssdeep":"1536:tQpnayKBPfF5aknBDU0KsIu5XOKvITONqvUejr3P99cN7H98rYx5s14/gCsBMXwU:tJfFYoDU0xVqvUejbs7dCYdInBwD0aD","tlshash":"56b319ca35517022859622a5517f0643723bdcbab4098d3df548d9ed3e2cc8921bffba","size":110564,"data":"","first_seen":"2023-03-07T01:02:47Z","last_seen":"2026-07-27T20:42:07.947184Z","times_seen":9879,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/revolution/js/extensions/revolution.extension.migration.min.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"67bbcfd4a3ece50288c9e5ac0480852c","sha1":"d893d33514e8d0da3b05e5e5f15e80fe29589124","sha256":"1c94040e2186822caf034fc3758f74f8372a5e8fbe42d5549061f27dd67d4142","sha512":"a24c3a1186e357b284845fe0e54353e351caffcd795c89d582e2351372a1767ee6c115112d0a629a4ed5f30e7b587dcd68fe9e9042885f0360e9f3011232cd5e","ssdeep":"384:dhOObjBeYJfz3zX3SWcN12H2DFQ9j6IDumFu7jaWIyUBj3RX2E:dIObR3zXpcN12H2DqZ9iA9QE","tlshash":"d8c2b8a976903cab5473667bc16a40b532728a357307ae6078efa6f0057ccd913e7e4c","size":26105,"data":"","first_seen":"2023-03-07T01:06:36Z","last_seen":"2026-07-27T12:20:12.985313Z","times_seen":674,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.O5gv-XEs8xQ.O/am=AAAE/d=1/exm=el_conf/ed=1/rs=AN8SPfqHbt8sVw7fokE2U_vb-QNNBOWx2Q/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1847809d96ee7dcbe495bd8c65711b22","sha1":"0ac03779bf867d05e1dc0c9bc36da4aa0d905049","sha256":"76e6be822ddc889ba19949689f59690db48caed7e8bf764ea5f18c8be5b67c19","sha512":"f0ad0c4c10239359029dd8ba415e38de604d6f941768ef6d6a71a79b6de280098b07d85b8fab689925b1c3f311e3458246e706a972dbcb2d1ac8f56b4e0a925b","ssdeep":"3072:GEupFCs3ncUcrhC9vYYrSXSHLsICyVUNJ1ixWf6ui8ThulnovEwpmnu:WBcUcg7HLsHJUFY","tlshash":"0f24e8d9b39271669363f4a6d17f000ab13ba859f9484d6cb28de8e25ef08190177f7c","size":222151,"data":"","first_seen":"2025-08-04T20:30:01.366813Z","last_seen":"2025-08-06T18:59:40.498922Z","times_seen":629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/js/modernizr-custom.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"287c849a2e81faf04e0bf95e64cbf4d0","sha1":"01346384aff67fa624850f42ee001653c6eeb06e","sha256":"078593a61d0455f3cb2931cb5d98459bc9f1c75ab4d9398265263ce550204cef","sha512":"210bbfda2b281e608ff44f2f9ed05beae0d7e230aab309d513fd45cb51d1b7f435610fbf9e9da25bc7d227d356b3f1b883f508a524d37af62161950077bce8d5","ssdeep":"","tlshash":"7b31421656a1e670828374d1252f180c4c7b6e886c56cc8df538b39d5b3c2da0bd6e29","size":1522,"data":"","first_seen":"2025-06-25T02:13:01.695995Z","last_seen":"2026-06-27T15:57:28.440584Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/js/lib/jquery-3.6.0.min.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e4bb227fb55271bfe9c9d4a09147bd8","sha1":"156837f75f6600ccb602b4efcbd393636c33f35e","sha256":"ee11e902416a1d896f538103110337b39a0e2e2606bc1faf5cd0652914891127","sha512":"f7810ef9df875a7fdfa7228f7e2f95dd34e18b57f56a46383198ebcc591e32f633b0d73cc6b271fbc669347f7fdc114cce6a6b43681104b25084fe2a1e7bee49","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:eIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"589309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:21Z","last_seen":"2026-07-27T19:52:09.493196Z","times_seen":10699,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/revolution/js/extensions/revolution.extension.slideanims.min.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"16dd37b372f293208d52d84d49a375ae","sha1":"dd9724509c9d79340d932082f40850f717532146","sha256":"9dcf557a9e9a7d3641fddaf711b224610496a92cdaeef962ff85b1813f358cca","sha512":"6134fd6e8ab237cbab8c5b8024dd0b697d145f304159e4f11786277ac7127052d21738d49b601edb82cb30a49c46055253fe7f89e3ad89b7d62df35408cad35d","ssdeep":"384:y1mxyUdZTo/ApwEN8vrISE3cXwfFWUDjZgTwTK+pYq1s0X37keYuL79+9fNMze5l:ppwEN8wcXwfFWUDj26pi27keYgcR","tlshash":"86d2f8dfea264c6280532142d3f589162219c977fe326fda37e9d0b505d301e22fbd9a","size":29072,"data":"","first_seen":"2023-03-07T01:06:36Z","last_seen":"2026-07-27T12:20:13.034377Z","times_seen":669,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/js/lib/nav.fixed.top.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0659e0488cfc3d08add6e78258c9c3d","sha1":"2d2950b26c7fec20ff81fd3c514ed188de442ee5","sha256":"2ffdd5e75f51628b7e53bf5fac40b83abc3944ced3e9e7c2948417f683cc7a3a","sha512":"adf246388c1982e820e8e99c884f19576492cb92568bd626988d101c1300a1513c514d1ab425493e1e8c9a1826849165e87b1fc97612f9efa8802c2528d7f6cf","ssdeep":"","tlshash":"2a113429b0991d5180737bf64a674000aab71837f102c32cb43d55e92fb290998f6e7f","size":1085,"data":"","first_seen":"2025-08-06T05:45:00.676142Z","last_seen":"2026-07-22T02:23:26.190856Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/js/main.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d1df76c4fd5ada36ec89bc48ec5d5c9","sha1":"269ae97862cb76572dce7a715c16e47a67e6fc5f","sha256":"384d5ad8dc19aba7310b385d894acaccb6f96052bd7a50fc6cc9bb043b1ec5f9","sha512":"2668e4eaadf732689bc69e7d890eea439bbbebaebf8c814785fce524aedace44aa8216d912b6bc23d09cd56018ce3f2009208840497ff1db783964dc55e4972e","ssdeep":"384:iCSKqQtQuJtQXzJtQWJjJDQgWJpQ0lJDQBoJDQLv:ZqQtQ4tQXVtQWbDQgwpQ0PDQByDQLv","tlshash":"35521546611620365c3fa37cbea90608fa254717d106a9673efe02801f7275d73e2f9e","size":13490,"data":"","first_seen":"2025-08-06T05:45:00.690387Z","last_seen":"2026-05-17T09:13:33.856309Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/revolution/js/extensions/revolution.extension.parallax.min.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"38d3cf2a1000666cf4932f157718a4a3","sha1":"d21822a0a6a9c10ed767a86b0c781b29c9180a64","sha256":"d7a37cf7668d8b45aaf3167078c9e807c91db38a198e20b6a91d15fb4721eb45","sha512":"a5d4f00ecdd9883abe5a9656145bf45d850f935c72a062ea6d1f27f876a5e1f057f77937cf055e50077f36013ff6e681ff30dbadecc5db819291a3b45a579395","ssdeep":"192:BcLK1q1e1XfU9dciEK5FKw0Vm7Wgput9mHJnGN82PbZ7:n1q1e1Xf4+KL6m7WgpAmHUNVPbZ7","tlshash":"0832d95a6e2028f640f3132cf9ad45d273228572e5068d41f9e6f9b9566ce9c037abcc","size":10933,"data":"","first_seen":"2023-03-07T01:06:36Z","last_seen":"2026-07-27T12:20:13.048228Z","times_seen":604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/revolution/js/extensions/revolution.extension.navigation.min.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"67bbcfd4a3ece50288c9e5ac0480852c","sha1":"d893d33514e8d0da3b05e5e5f15e80fe29589124","sha256":"1c94040e2186822caf034fc3758f74f8372a5e8fbe42d5549061f27dd67d4142","sha512":"a24c3a1186e357b284845fe0e54353e351caffcd795c89d582e2351372a1767ee6c115112d0a629a4ed5f30e7b587dcd68fe9e9042885f0360e9f3011232cd5e","ssdeep":"384:dhOObjBeYJfz3zX3SWcN12H2DFQ9j6IDumFu7jaWIyUBj3RX2E:dIObR3zXpcN12H2DqZ9iA9QE","tlshash":"d8c2b8a976903cab5473667bc16a40b532728a357307ae6078efa6f0057ccd913e7e4c","size":26105,"data":"","first_seen":"2023-03-07T01:06:36Z","last_seen":"2026-07-27T12:20:12.985313Z","times_seen":674,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/_/translate_http/_/js/k=translate_http.tr.no.O5gv-XEs8xQ.O/am=hMA/d=1/rs=AN8SPfodkdYrjwO74208-ACG3eDGJBkNKw/m=el_conf","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee234aa5c213ed76f62f684cb798f054","sha1":"acc57e6572ddfb1a79bc61546920834904fd4ca0","sha256":"912b910385315bc8983bcc4062af0170282fde0b3e89de0107f9fa3b9f5ef62e","sha512":"eccc6a076a60d4dc445ed685e88b73b283c2e8a659d83d79b537231acd609cb8d4ed96f307ca0e4e88fd9fda13cebb61d752a9f65f39f347fda9963cf2b2bd4b","ssdeep":"1536:XL5OCUXAtx+lUH2vCzFFpKbTiMOqbWr1RxgumlLtW8iCwNWTW:Xd7BzxKbTwJEY8icW","tlshash":"5673c8c8b6a674668367f5b5513f000fb23f5899e80c4cacb288d8e16eb5949413bf7d","size":78884,"data":"","first_seen":"2025-08-06T05:05:37.694723Z","last_seen":"2025-08-06T06:00:30.922372Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/js/lib/bootstrap.min.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bea60c34c5db6797150610dacdc6bce","sha1":"544afefd148715da7dd52d368a414703390ca0e0","sha256":"38544024da1a0fc2f706be6582557b5722d17f48ad9a8073594a0cf928e2e3ff","sha512":"2394e4bad0290e39d6b97fac98b20f64d870f8b85377c5ab4217422acc421514af845c76926f197c4a4d22117d9ead389ac1e13a413c04c3818f9404d3bca130","ssdeep":"768:WLlcnSRAIvHVAYIE8Pg76Tjx4vbh3p6viDl0TS6SXH6G7e6Pxh35CCmVla4:WLl4SE0MJS36GPxhAV1","tlshash":"c743a54a7254787206df747a817b060bb3366c99a40a816cb8699ced2f7cd493277f3c","size":60174,"data":"","first_seen":"2023-03-07T01:07:32Z","last_seen":"2026-07-27T23:19:08.990429Z","times_seen":8741,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/home","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a07b813483917de557201977ad00249","sha1":"173155589592a10df59e2d8ce24198c403cb4b3c","sha256":"fbcf48659353b0bb2c96b43ae6fbcaa5f663916c68c549f6c813eca2b1186ee0","sha512":"1839705832b0a0e012c14b5fef0228ef37efec1ea5219a5b57383169ac07e35ef7b599d7b0c4c5580f0974b087a8fdb83bc5c0e3a439c8e26b3db7b8899487a3","ssdeep":"","tlshash":"95e0ab3e3c344091479741b490b6e6283a1630604484d85388a6c8691cf0bee6d02994","size":418,"data":"","first_seen":"2025-08-06T05:45:00.745085Z","last_seen":"2025-08-06T05:45:00.745085Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/revolution/js/extensions/revolution.extension.video.min.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"09c5884dc09740f8848b919a708140ad","sha1":"48567c3fd1446c222489d85c53921c2f42fb8d67","sha256":"24a9f95ed6047c70cf1fe88e128174cf1fe6f88f9f7522cf499462f259441f63","sha512":"42db4fc36f3644e957bc817142a441212086a370fee0a7b57dbcba1ea6ee9648fce36ef3cdd653362318fec02744c78b4a24089f6cd0e2d1bd6e53ec05dd7a21","ssdeep":"384:wSzPnkV5CWrq1ePxVAlcCr/Rd1eVOgXEb/g18C+uL7+81XB1q0dlOqtUoU9glSsX:tkV1wqkteVINuL7+X0y19ESsg7G","tlshash":"84c2e717f508a8a59459f9d66c9f124033b1bb7ee0048f6069f3f6b81f3cd42225aadd","size":26081,"data":"","first_seen":"2023-03-07T14:33:28Z","last_seen":"2026-07-27T12:20:13.038368Z","times_seen":457,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/revolution/js/extensions/revolution.extension.layeranimation.min.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8fe098e4c85ea4ce1d978b5e8dd2563","sha1":"9acb50f205d771fcaf2c82978dec884b2933c029","sha256":"3327922dbad940348d79019ec680c730d71649132fa727675303bea91c6c4010","sha512":"52bb2d71b5d39f9bc7bfc602ffd39cdf4fd71bed07246df6ad40dc6fdb056b6d83e6120effc19e97df0cfafb63c9253bd3f79e4eb2bbe72ae99a6f548c0fd34c","ssdeep":"1536:VWS34eAk5Pljh5/dNAOQVja8les4DrC0XKxnA7Zz2hSoqadfjLB3lqo:VWS34M5Pljh5/dNAOQVja8lesdWZz2fZ","tlshash":"5743fcc5ed101cf952ab908ad07d456832247e3ce5078691f56af46e1e48e8232bbf7f","size":55811,"data":"","first_seen":"2023-03-07T01:06:36Z","last_seen":"2026-07-27T12:20:13.059535Z","times_seen":642,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/revolution/js/extensions/revolution.extension.actions.min.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"37b37940ac6cf4c7cbd47103bad5ccb5","sha1":"ad851d07c005bf59206a1c036458984930d8e845","sha256":"748f3e447f2f7475a4ba75f6f2e2e9f468a3ac443eae879e2104ec562b2158bc","sha512":"ba300130e18098219a467f506ce8fc973c20a8794c77665636c7847a2a40e53e57c2fd5b31ef26886fa81a9b2c613c70c4e19ce6035e4e0f2af89443259b02ed","ssdeep":"192:eHe3syiqiihWp2xgyhK1/l+zWJc2VJS/gkBVl1p:CMS/2f7R","tlshash":"7602b646f1016cff446765aee83702d2b1b1b59c560aa9b4f06bf1a82d3cb5105c77ec","size":8331,"data":"","first_seen":"2023-03-07T01:02:47Z","last_seen":"2026-07-27T12:20:13.07005Z","times_seen":1595,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/js/rev-sliders/slider-home-2.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5128c7f326c1f24b287ea96741aec196","sha1":"9da03ce60187ad47c39b8400ea1ef9c119e86a83","sha256":"243e4cbaef154a0af255bb5005169e442b9aef639df6dd0802492f01cf8a3eae","sha512":"ad7cdf61dc517941f7fa717b6cb8462345eb46880ddb69f00e0a3c9a7926ca5c7bb96b2d32e9e5aedfa1a6c42eb1955c687639f646c40e41a66163989293828a","ssdeep":"","tlshash":"a951fd27495150ba8a3b43abc9060611f271076f134b60a7fa7dab647f3305953c6fed","size":2744,"data":"","first_seen":"2025-08-06T05:45:00.620153Z","last_seen":"2026-05-17T09:13:33.909255Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/js/lib/plugins.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bdda967141027a2c36c853bf0713aa4a","sha1":"e8df5eb4a52aa935ebc2446eb42a224ef70cbf65","sha256":"4f68e94719d87920044e9a5b9950ffe61e24bd77aaa4fc3404e8ac818135775e","sha512":"49f361a62fbd358f232c3f692b08dbe7f0e9cb3e9a5bb9f24355a6ce1e732eb4bface25acfe058f04e3b901e318ff1eb4c84c5bbf95df3edf4360e5bf6fc299d","ssdeep":"6144:tWSfJP4NnYaWXaSqM1objHa1opBLYEoy239dHf4TmwOo:tWSf66aWXaO1OsHpTHg9","tlshash":"0984298db3413626829771f5512f010fb23ba96cb80584acb5a8d9ea6cbcc4d517bf7c","size":388823,"data":"","first_seen":"2025-08-06T05:45:00.700465Z","last_seen":"2026-07-22T02:23:26.167971Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#220","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"888a21ab7fc56d220a59dd25a83b18b6","sha1":"3bc9b8d495cf8e016aadf7e2bba091f2bd8b7188","sha256":"18c0d112e350349ca7390bc25c50a5fc92e9dc9b63416147c7e57851d105237e","sha512":"3dd8c3099c3300b3f74ffbe65e93e383d5c31087fb362f08bb241107c1061ef7dc8b61113851723a8588b54465c38056721341402f6a0072adce178ed3daf86e","ssdeep":"","tlshash":"b73147cdbbb7e0554272209a992f860bf17a2577981cd050e555ccd0fc70e9b447de14","size":1713,"data":"","first_seen":"2025-06-11T00:07:11.79824Z","last_seen":"2026-07-27T13:53:40.367911Z","times_seen":37097,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/js/lib/contact.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e228a896ca9bfe4158d4235d187dea63","sha1":"9176ce854e7609ee4e4de347948651a6aef48ebc","sha256":"6521d38e3fcb0947e043a6efee410bc915d17c7f9b9aff40928476aafa54b6c6","sha512":"84449ac19630d36284eb98df40d2f229c8fa3afe129b9fc5f3cb2f4768ad248b95d6c840f528403a103c41d6956402cdc48da7391da39a5e877382081a5a29c9","ssdeep":"384:cu0X3c18JqMj32ulSERXeCD7NpK+EfVidlRtWO18McTPWt3GSTuCuXu:VF9QnL","tlshash":"40423149396520020fb376f9aa9bc986f67d562a9037408074fd80e16fb0f94f7d5ee8","size":12597,"data":"","first_seen":"2025-08-06T05:45:00.739542Z","last_seen":"2026-06-27T15:57:28.427661Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b67300767490ee626178325c8efa3b14","sha1":"4378b772ab209e5280e60af15dd03414f2578f3d","sha256":"e3ccd7d38ffd01f14809ed081950d4a8c964d31fd6abb90a4433fb3574b9c8e0","sha512":"3c8acd1d71e685e71b69de130506fe13326f0908310caf3ac0bdf205cae4824c0dd0ef54eed3a7041cb37bd623308877df76973a28c8e691904e055e46fa706f","ssdeep":"384:fUx/y2k3g7xT7dWbEelfE4YYdWbE0rIcvCSI/a4GUpG:fUx/y2k3gli84YY8JeabB","tlshash":"4482a5ccb791a16543eb61b4843f710ff237692970098821ba65dae13c7898ee037f78","size":18141,"data":"","first_seen":"2025-05-05T10:50:11.676089Z","last_seen":"2026-07-27T14:00:09.825615Z","times_seen":9281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-lGOJV2Cd.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c080929ee5b9b8b7dc5d95e9b9eec0f7","sha1":"7bfee99cea3e7e33066a81046664fd48069f7f69","sha256":"bdfe5b581aff3b7b9bcda50a9c6e6a2f35666fe27513aa76b1c7a8b37cf0173b","sha512":"148559bd64d128376c21689658c6d9a0dc38518f5e52c8632d3551f03d480d9bae66958712c631a0fb1f0eeab46520d9e9ac79721ecc79fc576c77f67cb3a26d","ssdeep":"3072:CQfUXVejVfkdxSwVBVmMdgwYVPVF/z2ih1gPn4vFSC/0niYYu2g3QuO+jf/oNg9/:XsPn4vFSu0nLT3QuXD/oNgoPLwvwFe","tlshash":"fe445ad471a5703543a700e5607f1006b23e5c29a849c068f6aeddf67db99c8a2b7fbc","size":270282,"data":"","first_seen":"2025-07-28T09:46:38.948067Z","last_seen":"2025-08-07T03:39:22.606026Z","times_seen":285,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"8622c389b5bd91d82613ee672597811a","sha1":"e36f446779ba4400f154334b0d8ccbdc2973f517","sha256":"d44f27577d00aafd6f929f28a913a5986f2d9693244a991c79d7a4361b1b0d6e","sha512":"d1568e7e9fdb6747416867d113c21127bfdd4d1ec6ce5c66ee25d10c3dcd5fd4c7724ffa6cf24cc42d4ea32a62d4534b35fdd4b4becaf4db5dc68dbf78f7be3e","ssdeep":"","tlshash":"ac5130a1605ca01b4513d5d0f8a23eeef4de0058c77269d07e1c29efeaeacb7049715d","size":3010,"data":"","first_seen":"2025-07-31T18:36:26.143201Z","last_seen":"2025-08-14T19:04:18.772294Z","times_seen":1926,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"safestways.com/images/icons/support-orange.png","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /images/icons/support-orange.png HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 05:44:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 19 May 2021 07:37:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5572\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5572,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"bd5c580fe60dd32ec502d953e4e01eb5","sha1":"057649cbac3a9b028a12642eebd76f4ec5e32e4c","sha256":"a84a538e334d48bfb819cabc1f6dedc50b439c140049443a547f7125b2c9c5c4","sha512":"7c2cb39ad2cb08d22003a995a28d0693273f8ee403d57a2b8c8e1533fe3693e58812201dbc0e03dc4f21f4d7d27186b27bcb481fad61a06bab26f2262546e3ba","ssdeep":"96:eknmWINf18/juVQHck1yHjGYCixCIZjbgxHyIHv/jjboyZz0lId7lPmQ0cn8/Uq5:eknY122Q8k1y61iEIBbgxHFjIy1euPyJ","tlshash":"3fb14c43fe5057535b8d82a57fe8129f1f6f068046029825bcd4d863bef22b0c90dd76","first_seen":"2025-08-06T05:45:00.61318Z","last_seen":"2026-05-17T09:13:33.852638Z","times_seen":3,"resource_available":false,"data":null}},"time_used":680,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":666,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/revolution/js/extensions/revolution.extension.carousel.min.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /revolution/js/extensions/revolution.extension.carousel.min.js HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 19 May 2021 07:39:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2466\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7607,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7370), with CRLF line terminators","md5":"54aac3fc68b283e8ad22894408ae47a2","sha1":"8164c126f5b57e1ebf04b7440cce2e3aae7e5ba9","sha256":"6180c6c38c4e3b9ac75b0c51215dcf0d6aa5b62757be3d993df8a28ca17a8820","sha512":"35d94cffaa30b5bde92cf0400ccd3c7b309215a6d486dac7f46249ed949fe7a1ea21ab81cd48253a9fa740d2be063b7e4ec7d90051cff7b7b435d2c789766e41","ssdeep":"192:euN8q7sZ9sfpCfQcwaxXTZTn1WUCfl8YafSutLZgO:mqIypeQsZWqf9","tlshash":"13f1628460153daf0652b349966680f953fc294c672be8647cff7165085cacd027feee","first_seen":"2023-03-07T01:02:47Z","last_seen":"2026-07-27T15:00:25.593836Z","times_seen":1691,"resource_available":true,"data":null}},"time_used":1325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/images/icons/truck-2.png","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /images/icons/truck-2.png HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 05:44:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 19 May 2021 07:37:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2496\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2496,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"360b08a2cc7e2989c1d44861e4da6ecb","sha1":"e6dbbd21bed0d6f20835f0af70033a7285e63159","sha256":"52636aa97fc925c3f4b0bdcf0b4689f2b00fd92cdd6350ca14fb6d8822b60ea6","sha512":"78dfee529e762e87ab2a47017ed0bf6567a5033acfa5fabc9403a6b3338dda87d88ab0f0318991ea73898b3d8e1c2dfd24b6a76ed0971c9ba95e64b1821f4cda","ssdeep":"","tlshash":"8f515c9e72077e2c62594b467e316b0034023ec52a417348526bacb13bec529e3c29c7","first_seen":"2025-08-06T05:45:00.6173Z","last_seen":"2026-06-19T00:32:33.818922Z","times_seen":6,"resource_available":false,"data":null}},"time_used":807,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":805,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/revolution/js/extensions/revolution.extension.migration.min.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /revolution/js/extensions/revolution.extension.migration.min.js HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 19 May 2021 07:39:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6681\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26105,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (25862), with CRLF line terminators","md5":"67bbcfd4a3ece50288c9e5ac0480852c","sha1":"d893d33514e8d0da3b05e5e5f15e80fe29589124","sha256":"1c94040e2186822caf034fc3758f74f8372a5e8fbe42d5549061f27dd67d4142","sha512":"a24c3a1186e357b284845fe0e54353e351caffcd795c89d582e2351372a1767ee6c115112d0a629a4ed5f30e7b587dcd68fe9e9042885f0360e9f3011232cd5e","ssdeep":"384:dhOObjBeYJfz3zX3SWcN12H2DFQ9j6IDumFu7jaWIyUBj3RX2E:dIObR3zXpcN12H2DqZ9iA9QE","tlshash":"d8c2b8a976903cab5473667bc16a40b532728a357307ae6078efa6f0057ccd913e7e4c","first_seen":"2023-03-07T01:06:36Z","last_seen":"2026-07-27T12:20:12.985313Z","times_seen":674,"resource_available":true,"data":null}},"time_used":1176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/js/rev-sliders/slider-home-2.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /js/rev-sliders/slider-home-2.js HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 19 May 2021 07:38:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 771\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2744,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"5128c7f326c1f24b287ea96741aec196","sha1":"9da03ce60187ad47c39b8400ea1ef9c119e86a83","sha256":"243e4cbaef154a0af255bb5005169e442b9aef639df6dd0802492f01cf8a3eae","sha512":"ad7cdf61dc517941f7fa717b6cb8462345eb46880ddb69f00e0a3c9a7926ca5c7bb96b2d32e9e5aedfa1a6c42eb1955c687639f646c40e41a66163989293828a","ssdeep":"","tlshash":"a951fd27495150ba8a3b43abc9060611f271076f134b60a7fa7dab647f3305953c6fed","first_seen":"2025-08-06T05:45:00.620153Z","last_seen":"2026-05-17T09:13:33.909255Z","times_seen":6,"resource_available":true,"data":null}},"time_used":1167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.MOhKAPSS1-s.L.F4.O/am=hMA/d=0/rs=AN8SPfoSvcbOnFdaxQP_x8te6jzGQof28w/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:22.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.MOhKAPSS1-s.L.F4.O/am=hMA/d=0/rs=AN8SPfoSvcbOnFdaxQP_x8te6jzGQof28w/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 18:22:48 GMT\r\nexpires: Fri, 31 Jul 2026 18:22:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 22 May 2025 01:09:21 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 472894\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20298,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20298), with no line terminators","md5":"183cb263396f0b39789db1ae3f1e1b20","sha1":"502fcf18fa8d865213e282824ab2dfaadb9b8beb","sha256":"6a91c12a6fd1664f4d594040374fda61fe5b02fd3aee5f0c877ccbfc49488ec5","sha512":"ef280b60fa9f4bcb446d952f59a9b89442b6da6737bddc20a8fb38fcf0b4083170c09c008d7d221cf205084c8342da1f995bdd99ce907d70e8e14fc62d827acf","ssdeep":"192:nvqx/EhNINclXsfg0S0Q8CqA3ukLzSJFzvQVMZnUIfIxIRhpTpeuHjPtcmx4v78l:gM78Sr3fWJFzouRUqWQhpTpdHjPtc5G","tlshash":"bf92972047aed01967efa82364d36dff71d444db90523eeaaf5a7352cd821f231ea214","first_seen":"2025-06-11T00:07:11.687997Z","last_seen":"2026-07-27T10:36:14.980644Z","times_seen":37906,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/images/icons/delivery-box.png","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /images/icons/delivery-box.png HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 05:44:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 19 May 2021 07:37:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6822\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6822,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"5ffd97a925e01b69e8d3eb52006df178","sha1":"15200e7b9332cd1fd63ebeaa1da13f6fa7043d2c","sha256":"768bb9a274138bbd7cd4f2f653f5a6cde7561d8556eaf9863ace8733fccb8236","sha512":"1d7842c4b3f73b57c7ee7f0a35618ba564d66cff09ed24d75b587b0f82cab2c2bd68e93306d3e239e42ef1783f947ac2aa035cbb14bb925daa023b4675b957b8","ssdeep":"96:m2wyHEgupvLIko3/TrNMjrjSWfa5BSdlnksFH+eWAcqjzaws+3SL+d+zXdcFyNcL:uyHEtpMkKvSWQ6SpWAcaXscd+0y2OM","tlshash":"f0e1be0b9ccce1de410fdd682e1a10d3459aa10728d4e79f75a2fcdb6643df010bad60","first_seen":"2025-08-06T05:45:00.623083Z","last_seen":"2026-05-17T09:13:33.944544Z","times_seen":4,"resource_available":false,"data":null}},"time_used":699,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":665,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/images/icons/cargo-ship-2.png","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /images/icons/cargo-ship-2.png HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 05:44:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 19 May 2021 07:37:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3385\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3385,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"e29ed7ae9935e24c0ef6f2fbc08d685a","sha1":"e5c1ccdd765cccd4d1419137d0c6e642eec37614","sha256":"0ae6107c1fa2065212ee98a12407fa9f692ebd647a109a08783e996c1f2b4889","sha512":"c2eecd9793c2eb5cd006b796215ad4881841a644f56dafbfc9683e634d2243d43d4de6e82c5d8e2d481dc25ff09460471224b03d51979b6d00d1679702082566","ssdeep":"","tlshash":"bd613c67769f8c9713dced62438a54a90506698d196940ef3b0fb47d13abf8218d8059","first_seen":"2025-08-06T05:45:00.625407Z","last_seen":"2026-06-19T00:32:33.777207Z","times_seen":5,"resource_available":false,"data":null}},"time_used":861,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":861,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/images/commons/avatar-4.jpg","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /images/commons/avatar-4.jpg HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 05:44:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 May 2021 07:34:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 288366\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":288366,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=15, height=4480, bps=194, PhotometricInterpretation=RGB, description=Appealing young woman in sparkle sunglasses looking in distance. Portrait of glamorous european model with short haircut smilin, manufacturer=Canon, model=Canon EOS 5D Mark IV, orientation=upper-left, width=6720], baseline, precision 8, 600x600, components 3","md5":"524cdc63cf8cc19e857de399192f72f7","sha1":"a6a97e663a513047f0ce0c9d7cde6d3aabe33381","sha256":"1451d16ac7ebd20963082ad92bb53348617fc31515f6a8bd0e9dcb08109e96db","sha512":"d5514cddd8bfccf4e31947db3f6fa889a4b049696b4bb0114953c4a8ac03b4dd7e22b2fb780699179780cec39003b9a8c86d5a7cffe5e9c028fa0a8b0c450420","ssdeep":"6144:ufj3LsZnKZgjJbZtI6os0Pvvc9aVd9PIxZF:+3wn9VVtI66Pvvc0n9wt","tlshash":"56541216f5141621f4ed3735e8b986a193b3aff42e90404bb64eb624af30dd94ceb493","first_seen":"2025-08-06T05:45:00.627164Z","last_seen":"2025-11-02T08:03:57.055887Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1258,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/js/lib/bootstrap.min.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /js/lib/bootstrap.min.js HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 19 May 2021 07:38:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14242\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":60174,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (59893)","md5":"6bea60c34c5db6797150610dacdc6bce","sha1":"544afefd148715da7dd52d368a414703390ca0e0","sha256":"38544024da1a0fc2f706be6582557b5722d17f48ad9a8073594a0cf928e2e3ff","sha512":"2394e4bad0290e39d6b97fac98b20f64d870f8b85377c5ab4217422acc421514af845c76926f197c4a4d22117d9ead389ac1e13a413c04c3818f9404d3bca130","ssdeep":"768:WLlcnSRAIvHVAYIE8Pg76Tjx4vbh3p6viDl0TS6SXH6G7e6Pxh35CCmVla4:WLl4SE0MJS36GPxhAV1","tlshash":"c743a54a7254787206df747a817b060bb3366c99a40a816cb8699ced2f7cd493277f3c","first_seen":"2023-03-07T01:07:32Z","last_seen":"2026-07-27T23:19:08.990429Z","times_seen":8741,"resource_available":true,"data":null}},"time_used":1450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1322,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/images/commons/logis-57.jpg","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /images/commons/logis-57.jpg HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 05:44:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 May 2021 07:36:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 731132\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":731132,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=15, height=4480, bps=194, PhotometricInterpretation=RGB, description=Organizing goods export via freight trains., manufacturer=Canon, model=Canon EOS R, orientation=upper-left, width=6720], baseline, precision 8, 992x992, components 3","md5":"0b3c984795f5bfccb4ca922c8183203d","sha1":"00ccc01331c041db4f23ae9fe235746308a7d7ab","sha256":"5a3e8b1da323add9971750298e2ed70dd9a5a7c3ec3486d4abf3c1f8f716e31b","sha512":"2948ed264de9bb17bd907aac9f7f0f64dbd8925bcaa08f2d0d0c2257e29b98ac630f15c98300165580180d708c4973e6fb603f869ccaa291b237427b71a33805","ssdeep":"12288:1RrfD91O2EDPIi5M7fkxRh5MOCy3SnGY9FL5+BezVjbpb+3lYydc9/ruF/2hHzlU:zf51qPu7ERh5M5AWGY99NzVPJOdcoF/5","tlshash":"0ef4237195922c10d90a2e34a7b483ddc3671a9e8e5a1116facf8601bf67ce86dff4d0","first_seen":"2025-08-06T05:45:00.629959Z","last_seen":"2026-05-17T09:13:33.940914Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1098,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":917,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/images/commons/avatar-1.jpg","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /images/commons/avatar-1.jpg HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 05:44:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 May 2021 07:34:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 214170\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":214170,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=21, height=5663, bps=266, compression=none, PhotometricInterpretation=RGB, description=No problem concept. Bearded man makes okay gesture, has everything under control, all fine gesture, wears spectacles and jumper, manufacturer=Canon, model=Canon EOS 5DS R, orientation=upper-left, width=8494], baseline, precision 8, 600x600, components 3","md5":"1ae2c2ce0e4ec2664a3b094fe45b78b7","sha1":"16f5eec8318dd91b3fc50c526c25d716b871685d","sha256":"1e899ee22780d64dc836f556b11440f0708ee4294717aed6098183be675e3f75","sha512":"f0c7d8aee98095a28e37c3e5eacf7c062df11a3f4edd0223d9e496f2ca6a8c33c00150549d67f3d9e602735a465615afeb7c59d5f91b49393f80bc657f5776dd","ssdeep":"6144:ey6EdQNLzWZ+wmdzo60qeKSBBHw3Z1J3O:8oQGUwuo60qeKS/w3XJe","tlshash":"93240246a5a20942f8557d3c56fcc609d2b718e09fb1c10d376ca8867f538887cee79b","first_seen":"2025-08-06T05:45:00.631761Z","last_seen":"2025-11-02T08:03:57.060179Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":915,"receive":189,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/css/main.css","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /css/main.css HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Mar 2023 09:03:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5854\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":29817,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"12b1300285e243057371a3cb06a868e5","sha1":"10e1d62722496d344c5b797c5f84f03cc8350cfa","sha256":"86c96eee8e0d8debd0f6d2534d7831c8a58cd3877a3b79dd49f5aa36ef464e9c","sha512":"a84942edde8651c48967fce99b5a30eca102c134d46a8c4b9c8bf25588f9b2a4a26180fa37e7beb0ea48738ecf268becd480f8338f27a1fe2505b109129591f8","ssdeep":"192:oTVNVvIpo8UkEnfeOhH5goPsPTjjDSJ5ITbRQDMozYytyX+onJ/QkXZCdStZFvRU:oFJxaEuVQGZt+r","tlshash":"7dd27559ca126201a53bdbb8f7a3572cfb220063df031aaabfd55545abe436c0211fdd","first_seen":"2025-08-06T05:45:00.633616Z","last_seen":"2025-08-06T05:45:00.633616Z","times_seen":1,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/revolution/css/layers.css","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /revolution/css/layers.css HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 19 May 2021 07:39:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9985\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":146597,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"67b50bc0d49c4b80742a835113b03562","sha1":"29ce5433ed65387f6f6ef97159071e5987ae1599","sha256":"cc830234af8b0e2ac01ad515ff209c43b29ba78d5145505a1088b18beefd2ac9","sha512":"5991d613af7c17ff93728dff20841b8996f8ae8e0b34f891ea6066f76d836ca58140d2ef5774abaa7a6711dc8fef91acc221a0f12a2c55dca2702d01982478e4","ssdeep":"384:0jgGE3ZtaszFwt62cEGrmvNNRLv3A2qsbJNaNT8KiiOSGO2TK5NTXNG6IPXuuK2m:r3TreNNRIzGTTYIv+Yby","tlshash":"77e3ee61f90541c77073d91833729fc8eb690253ae078a35fbad23648f7d2acaa5179c","first_seen":"2023-04-11T01:29:53Z","last_seen":"2026-07-27T14:34:25.269151Z","times_seen":1692,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/css/stylesheet.css","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /css/stylesheet.css HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 27 Feb 2022 16:11:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9146\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":70877,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"b4b257fa93e28d163d66bd6ebe93328f","sha1":"30dc9a1edf03f8f467abe55b7c6c884738302bc7","sha256":"094a7aec0c783c7e1cb876fe970154699b437e96ae950c01cb4659a443d5e523","sha512":"e535c48903fddeb458f0e21cd9c860738a2c6537acdd64755455ab1501702dfebdc969eef28cd8af4d8ed0cbf987a655a35d71c77d9a37ccc448b5a189c8b95d","ssdeep":"768:zSAr7zufuxoSSsKR/tZGThSFNSBb6Zo4WbjL:2Ar7zuBsKR/7GThcSBb6Zo4WvL","tlshash":"d963629cc6574106a537ab6863a2676932744862df074b7ebbf62054f2c0bfc5222fcd","first_seen":"2025-08-06T05:45:00.636033Z","last_seen":"2026-05-17T09:13:33.870444Z","times_seen":3,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:20.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/poppins/v23/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://safestways.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 30 Jul 2025 21:40:24 GMT\r\nexpires: Thu, 30 Jul 2026 21:40:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 547436\r\nlast-modified: Wed, 23 Apr 2025 16:07:25 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-07-28T01:20:29.978409Z","times_seen":289005,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":132,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"18.158.45.127","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:22.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"35:57:04:01:81:87:91:69:91:5F:FB:F3:51:3F:C3:50:59:25:59:2D","sha256":"D8:0F:70:51:28:C9:4C:A6:5A:C3:91:80:AC:41:82:E2:B2:73:5A:0B:A4:07:51:81:EC:03:09:9E:87:4F:81:F7"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://safestways.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: H+g2HmwaMTt+5b47Pqguuw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 06 Aug 2025 05:44:22 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: R8WXsWeeY9Xib4UY5JH0EQNGZbw=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T01:22:25.15752Z","times_seen":17571767,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":86,"connect":107,"send":0,"wait":23,"receive":0,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/revolution/js/extensions/revolution.extension.video.min.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /revolution/js/extensions/revolution.extension.video.min.js HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 19 May 2021 07:39:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6692\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26081,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (25833), with CRLF line terminators","md5":"09c5884dc09740f8848b919a708140ad","sha1":"48567c3fd1446c222489d85c53921c2f42fb8d67","sha256":"24a9f95ed6047c70cf1fe88e128174cf1fe6f88f9f7522cf499462f259441f63","sha512":"42db4fc36f3644e957bc817142a441212086a370fee0a7b57dbcba1ea6ee9648fce36ef3cdd653362318fec02744c78b4a24089f6cd0e2d1bd6e53ec05dd7a21","ssdeep":"384:wSzPnkV5CWrq1ePxVAlcCr/Rd1eVOgXEb/g18C+uL7+81XB1q0dlOqtUoU9glSsX:tkV1wqkteVINuL7+X0y19ESsg7G","tlshash":"84c2e717f508a8a59459f9d66c9f124033b1bb7ee0048f6069f3f6b81f3cd42225aadd","first_seen":"2023-03-07T14:33:28Z","last_seen":"2026-07-27T12:20:13.038368Z","times_seen":457,"resource_available":true,"data":null}},"time_used":1170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/home","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:22.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /home HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T01:22:25.15752Z","times_seen":17571767,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/css/lib/flickity.min.css","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /css/lib/flickity.min.css HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 27 Feb 2022 16:11:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 548\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1860,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1758), with CRLF line terminators","md5":"2f8b1c43ca7133461bf5b4715bca147e","sha1":"65672235aa6a49f0be98a4925b3324d5dcecadc8","sha256":"4ff34190cc310bbb81481a9a89e16aabccd9568eaff5631686e956bd5b2065f4","sha512":"6ed8d43fd947679565dcf7be67a9641a8b7c95093da35303f3f42e5bf9c5b8d5b893e8c42759273a522a7d31f0ebc4d07b10285712b4ab02c1fb138fdb7a7357","ssdeep":"","tlshash":"c031b832ac51360d501ff3265da1f489f002c952b6720b74f2606a76c2cbdcc22af0ca","first_seen":"2023-05-09T21:46:03Z","last_seen":"2026-07-20T18:48:43.943897Z","times_seen":3209,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/css/responsive.css","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /css/responsive.css HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 27 Feb 2022 16:11:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2098\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12398,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"827347565b90ec0c9eab4987bdebc679","sha1":"86986fd614ec91d75a32e60324534ba9c0e269c8","sha256":"b9d8778c874bac36f7c69af468998474eda5563727db1f86ae79bb7f3745ee69","sha512":"fb96ae870c9026dd59dc7a8d7fd8683692a0fd361e70813232d2b4f865cf33580764beb187fe53d8888621db3a8932f401e089c7f3a1b3aec465caaaf86acb8b","ssdeep":"192:eGtW+wFP4vPZKGYvwM5gOGlGl4KGU+ijGho9nAg:BSI0Go3B","tlshash":"3342ac05da521804b0b6b3a8cff302adf72314b3e74345e5bae0e191cf786988599edd","first_seen":"2025-08-06T05:45:00.641355Z","last_seen":"2026-05-17T09:13:33.880998Z","times_seen":3,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/images/icons/technology-orange.png","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /images/icons/technology-orange.png HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 05:44:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 19 May 2021 07:37:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7313\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7313,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"8ddc0dd88c069c4afb5fdbcc2376e3fb","sha1":"b62d5055953fa383ffd39890f6478d2949d6f42b","sha256":"293a30dc911d30ce093c9ea78ccca4b2b977e2abb849d8a3731961cd7cb0b39c","sha512":"4544dcc23affd7831651df777b73f7094560113c0eeaad8895bd4efc917dba3bbc40d4c30c0f8ffb7f9462c7ef1d2fdb4ed63da6ca6f38e2fad5f628290c86f9","ssdeep":"192:eknEdZ83aCevrtrWsfQ9ptTcElQMEP5VGl9mv5xI57j:1nkvTRWd97ruN5VKkRet","tlshash":"48e18e0de505fc012595e9c57d4a21d7a84baac8a902a480ecdfe90a58a533d8c197c7","first_seen":"2025-08-06T05:45:00.643497Z","last_seen":"2026-05-17T09:13:33.920266Z","times_seen":3,"resource_available":false,"data":null}},"time_used":669,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":653,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/images/icons/packege-orange.png","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /images/icons/packege-orange.png HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 05:44:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 19 May 2021 07:37:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5980\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5980,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"fcd5b6db2d1e65a7961d773a56d26d09","sha1":"7f148f355ea29f55c3269e3446154ae908eebb78","sha256":"5bcbf81cae9c6541acc0ae13d494f60fb0d2aa9911a3a8b1832740bcb9cc61a4","sha512":"8521d77e3f70916845a6751c479bb5ea756933e8953401868e2a8f146fdfd1380bdbbd3e5a1f683aef70304fc322ad1661addfbed355941c62c362bc4ab9969b","ssdeep":"96:IknmWINqn/404qHcXHj27nqM2l/ksLZPhGDT6YgYN4h6tEtmPUjzdG0aapYkHj4:IknHB4q8XMd0/F5lYIkEzXFD4","tlshash":"06c15c8b98256c109a0cf9506af4a5432f669f9496d0ba11fed8cf2f94104f9cdac2c2","first_seen":"2025-08-06T05:45:00.645815Z","last_seen":"2026-05-17T09:13:33.936592Z","times_seen":3,"resource_available":false,"data":null}},"time_used":917,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":917,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/revolution/fonts/font-awesome/css/font-awesome.css","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /revolution/fonts/font-awesome/css/font-awesome.css HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 19 May 2021 07:44:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7116\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41576,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (392)","md5":"0092ba247d4760defa26571525f80cb7","sha1":"50f62988740ec965eaf1b91f23ddaeb0e8a4ec4b","sha256":"5c8cc8dbee34792c4567cb009763eb574950fecbba611ed41b8785945081e18f","sha512":"affcbd7c66c8c058fbd9290dfa9ac5a8c8e8a45e96c0914ea5f757b8a96c50da5e6a905fbef4131b6a0e1d0e01b71408c3ca8b243bdfffaadadd3b047ae7a121","ssdeep":"768:4lnlnhQmIDvz/3er+6Us0lKHAcHvXrM4BVOwBKR+kqIyFVG:4BlnhQfb3y+6UPlKHAoXrMyVOwBK6Iy+","tlshash":"f01317eca5bf18904391e0d1634a6670fb2da72cdd8a6c5cf2a7789cb5e1215c5823fc","first_seen":"2023-05-10T10:40:25Z","last_seen":"2026-07-01T02:25:06.005801Z","times_seen":34,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/revolution/js/extensions/revolution.extension.kenburn.min.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /revolution/js/extensions/revolution.extension.kenburn.min.js HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 19 May 2021 07:39:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1438\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3756,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3515), with CRLF line terminators","md5":"271f12aae2e3fa13230c21b67d39a504","sha1":"d3076c9447e2753a6d96ffc87a9dc38c39b5bc77","sha256":"babb248b22b49d281d8c0e8ac1ee23f072d15a1ddea7029f2643036788ae3b27","sha512":"aed5171fd80f2e2765b71402dc6a119392621be44b16e5fa031eedb19993b8594b9791a640924e886be57ad699e65561b78c3865bc9cd22d4f200c2d20ae53d2","ssdeep":"","tlshash":"047142d220166c5e4ca3a39295ef17c663f1ed283503981c9772b5801eccd1e28bbb9d","first_seen":"2023-03-07T01:06:36Z","last_seen":"2026-07-27T12:20:13.071218Z","times_seen":520,"resource_available":true,"data":null}},"time_used":1322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:22.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Oct 2024 00:00:00 GMT","end":"Sun, 16 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"F8:69:46:5B:91:2C:2E:CA:94:48:1B:4B:A4:21:4D:B9:48:55:E2:FF","sha256":"6F:B2:38:92:36:6B:54:7A:DB:D1:6C:60:C8:1E:67:C8:67:64:D9:14:BE:4E:72:47:9B:32:12:16:2A:47:4A:09"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://safestways.com/\r\nOrigin: https://safestways.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 05:44:22 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: 4faad7cbc61f201e7592bd2193a44fcebb277e5e\r\nx-77-nzt: EwwBuUwJCgH3VwEAAAwBuUwKEwGzWQIAAAwBnJIhJwG3AAAAAA\r\nx-77-nzt-ray: e2f754206368dcbcb6eb926818e9a70a\r\nx-77-cache: HIT\r\nx-77-age: 343\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7011,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3f71cbd41c0cbff277d0920c46c1300a","sha1":"6165ffc1d5ddd6b132180f05f5ecf915475d4477","sha256":"7395a5d00e656c9d8401c7a117f179033b5db6d90ed820913cd058384c9f84e5","sha512":"78c4830b0740df37fb17f4cf6497b03134863ca7844a8b137a87739301bb1d1cac920459979b176b23fc7df1fd0c0ee57318214b05ab746b8af993e5317a75a8","ssdeep":"192:P4lkA+UC1IY8pZbXF/UQq29yg4zPYfXhIIdeD/L:Al3GKYKZrJA2Yg48fXPdeD/L","tlshash":"7ae1b74f9a144da987c6438276cfb84675bc80734250997afd8cc8b852797cd63e3b98","first_seen":"2025-06-17T03:42:07.109827Z","last_seen":"2025-10-06T18:30:30.166524Z","times_seen":2514,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/images/icons/warehouse-orange.png","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /images/icons/warehouse-orange.png HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 05:44:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 19 May 2021 07:37:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5248\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5248,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"862db11201cb091f6ccb1baa84a06c69","sha1":"ec96f1dc797fe8718015bd36bfe9834e7d9d5d2d","sha256":"14414e1b45ed36af2108905dc843cbc198d48f62557f1af2c45989f6a2a7ffbc","sha512":"71373cf8d267822ce9acef30d51d57e8c9cfd8373535ae2c875afe95190d7a43e474f4dc4fb3b39451444085bf7606de098979ad80001b3347e62c7ac1a58969","ssdeep":"96:FmC2YD0J/2TJpCdWOJEoqDah1Jx6/j/sGrxxu6aMvaMZE08f1:FmCIoTnfuim+0Yekx0d","tlshash":"32b17c88a78e284db59b073dd7a00b513b53becc38b95879e634906c040d97e146cdef","first_seen":"2025-08-06T05:45:00.653785Z","last_seen":"2026-05-17T09:13:33.900485Z","times_seen":3,"resource_available":false,"data":null}},"time_used":918,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":918,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/revolution/fonts/revicons/revicons90c6.woff?5510888","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:21.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /revolution/fonts/revicons/revicons90c6.woff?5510888 HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/revolution/css/settings.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 Aug 2025 05:44:21 GMT\r\ncontent-type: font/woff\r\nlast-modified: Wed, 19 May 2021 07:39:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7536\r\ndate: Wed, 06 Aug 2025 05:44:21 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7536,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 7536, version 1.0","md5":"04eb8fc57f27498e5ae37523e3bfb2c7","sha1":"d942ae11706c3f7e511e3c49b0e4574d7ad199c4","sha256":"f7b9c3065e55fa3b9e320093612e7b30dcb14355a44ec461247b495a3e729686","sha512":"fa6508c8a1a822794036174b0b9dbc6e91b5afc1fd340381b868ede6d928dd0f3e66b5a91308d2c0c4c4c64b27dab7761a904c0b6e6b3c0e3e736e5d6342f365","ssdeep":"192:340F/mM4Oa0wA2jPOf2X62xqpjjjaT64iSNizw:34sxBwCujqpj/aT6nSYzw","tlshash":"20f18e14fec0f56dfd8f52702780e6f6b2646de260560dc52d48e65c14e291ae27d47c","first_seen":"2023-04-05T13:50:09Z","last_seen":"2026-07-27T23:15:06.115914Z","times_seen":32025,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/css/lib/owl.carousel.min.css","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /css/lib/owl.carousel.min.css HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 27 Feb 2022 16:11:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 819\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3027,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2865), with CRLF line terminators","md5":"69b9211cc0187d2455e1e035479bb2c9","sha1":"5f4a0c5acbead237aae15c29813bd4bdb0d815cf","sha256":"39c83aa3e839937fcb0567cbd1ab47bd456f8d3186c7ea52e387302b26d61c63","sha512":"cf255fd586cb8e49032d70aab036cbd65480b4eec7c85e92b3ea82ec2cd36341550236de303bef632df54fb868d8309de23f520849cd7e1c4ad431032c28ffeb","ssdeep":"","tlshash":"1651bde6214b225e481f87221ddc1e43793dcc53d866069aa1bbe614879ae1c113ffcf","first_seen":"2025-08-06T05:45:00.657355Z","last_seen":"2026-07-22T02:23:26.148593Z","times_seen":10,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/images/commons/avatar-3.jpg","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /images/commons/avatar-3.jpg HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 05:44:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 May 2021 07:34:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 248209\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":248209,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=18, height=3651, bps=230, PhotometricInterpretation=RGB, description=Close up portrait of young caucasian man isolated on black studio background. Photoshot of real emotions of male model. Standin, manufacturer=Canon, model=Canon EOS 5DS R, orientation=upper-left, width=5477], baseline, precision 8, 600x600, components 3","md5":"7af96b321f928d146d0094e1de4907f1","sha1":"3a167469d80e5aaec7f06730e18b057c3905ffd5","sha256":"c928b65997cc02fbda84a8454ee741ef250494ae3b06b4632616b906c2e1a5c3","sha512":"1c382e2d9195f36741c9fd056b3afae7d2846d8c82d86a34bde1fde84e29c502b394bddaab4855a9a6d3d4e4439211a89fa4e65c470d724849818562dfdafea9","ssdeep":"6144:VPmoKeUKLXWjdBsFVmwJM694ylRfKDfJW1Bxdv6QW:VPVgKLXWjdWFdzNPYRW1BnCF","tlshash":"d0340224b8611460d9a67a79d4edc24183f32ed1ccb2510fbacd9d14afb4ad8adc52f3","first_seen":"2025-08-06T05:45:00.659925Z","last_seen":"2025-11-02T08:03:57.117373Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1104,"receive":158,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:20.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/poppins/v23/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://safestways.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 30 Jul 2025 21:38:19 GMT\r\nexpires: Thu, 30 Jul 2026 21:38:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 547561\r\nlast-modified: Wed, 23 Apr 2025 16:07:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-07-28T01:05:08.205204Z","times_seen":283817,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":138,"dns":1,"connect":16,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/images/commons/logis-30.jpg","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /images/commons/logis-30.jpg HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 05:44:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 May 2021 07:35:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 800515\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":800515,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=6789, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=4528], progressive, precision 8, 992x1200, components 3","md5":"30a44456588685beeaaea839e2e17d3f","sha1":"c182ea074a889a00e5743d968d13e9427493ee68","sha256":"9b3db6655a9febf18ee2f6e6e0ddbaf7fdc6b7d8272e63865da84eefa594e27f","sha512":"ce3f31cedd13e1c32a285b2cd9384dd16c3f9a3c15cef1ccc92c3c6ff2e94b489aa8015eaa1eba82971821cffeade562494ee92b77be1ba69b7a8e072180130c","ssdeep":"12288:ng0kSRpRbXXZcAdXSRUD30sjujIkqbnyoiF9NwKtcZt/CM0FynuBRB4VNsSdqmIM:g0fRHXXZLRSQZnF09eNtpiIV6Sd6p6","tlshash":"fa05333ed7b58a90e5f92376914dd910013cfe7e963709d17e8e6b4293e034631ab84b","first_seen":"2025-08-06T05:45:00.66372Z","last_seen":"2026-05-17T09:13:33.930341Z","times_seen":2,"resource_available":false,"data":null}},"time_used":995,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":775,"receive":220,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/revolution/js/extensions/revolution.extension.parallax.min.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /revolution/js/extensions/revolution.extension.parallax.min.js HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 19 May 2021 07:39:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3010\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10933,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10692), with CRLF line terminators","md5":"38d3cf2a1000666cf4932f157718a4a3","sha1":"d21822a0a6a9c10ed767a86b0c781b29c9180a64","sha256":"d7a37cf7668d8b45aaf3167078c9e807c91db38a198e20b6a91d15fb4721eb45","sha512":"a5d4f00ecdd9883abe5a9656145bf45d850f935c72a062ea6d1f27f876a5e1f057f77937cf055e50077f36013ff6e681ff30dbadecc5db819291a3b45a579395","ssdeep":"192:BcLK1q1e1XfU9dciEK5FKw0Vm7Wgput9mHJnGN82PbZ7:n1q1e1Xf4+KL6m7WgpAmHUNVPbZ7","tlshash":"0832d95a6e2028f640f3132cf9ad45d273228572e5068d41f9e6f9b9566ce9c037abcc","first_seen":"2023-03-07T01:06:36Z","last_seen":"2026-07-27T12:20:13.048228Z","times_seen":604,"resource_available":true,"data":null}},"time_used":1173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800\u0026amp;display=swap\u0026amp;family=Open+Sans:ital,wght@0,300;0,400;0,600;0,700;0,800;1,400\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:20.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css2?family=Poppins:wght@300;400;500;600;700;800\u0026amp;display=swap\u0026amp;family=Open+Sans:ital,wght@0,300;0,400;0,600;0,700;0,800;1,400\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 06 Aug 2025 05:44:20 GMT\r\ndate: Wed, 06 Aug 2025 05:44:20 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6798,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6cae65df57d87a03e565a55773b91c06","sha1":"7221bd66f0935b8471b9b156d0ef7b3855af38cc","sha256":"b679f8b4754270098e2228ff21d616c253630cb3f4a5663d1714a290c848abea","sha512":"79547dd053e7710cc5fc4fc2de0385ef3403e1b06376666f1ac13aa7414eb1992597f6d4ba5d0b3d8f33a0c3613ea2cda4b7d3e17239207766311f4369cb1f3a","ssdeep":"96:SOWaOWiJc+ukOWlN3OLOOLrJc+ukOLlN3OgaOgiJc+ukOglN3OxT9OxTNJc+ukOy:Kyq/i7vSl0qVAKlwqKubalgOa","tlshash":"61e18bd2097be50467831cc212df7d36ef0ea244b450a574abfe0c98ada7c69537272d","first_seen":"2025-04-25T00:51:48.134569Z","last_seen":"2025-09-08T10:32:54.131724Z","times_seen":87,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":101,"dns":1,"connect":15,"send":0,"wait":31,"receive":0,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/fonts/webfonts/fa-regular-400.woff2","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:20.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /fonts/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/fonts/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 Aug 2025 05:44:20 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 19 May 2021 09:01:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13600\r\ndate: Wed, 06 Aug 2025 05:44:20 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13600,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13600, version 331.17301","md5":"3a3398a6ef60fc64eacf45665958342e","sha1":"5e4d45052f43e55aaad7f14d13280215e39aa45b","sha256":"245818b22d1ec4892fcb722437e32888e97f63a0316bd22aaf9f44cde01f4c91","sha512":"ea6cdf83006f33c93085442252d1a942401d5b2b43fe9583340f5273a02448f6529a7d6b6b036c29e31c91aa42831cd32ddf53135a92ad2082a723c0371583cb","ssdeep":"192:fVxNTq9bXRrdxZlxdqhgK0qN3CJDzfiTKiUnuTb1/46vk3Bup9l0ggrTIXlyDkq:fNqXHZegtyU+KN6k3Bml0N7","tlshash":"f752b0a93d3355fe0180e3e93d09f1605300eb5faaed38fe35299b464840fb2a4da95c","first_seen":"2023-04-10T17:49:13Z","last_seen":"2026-07-27T23:26:16.262541Z","times_seen":1951,"resource_available":false,"data":null}},"time_used":687,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":117,"receive":570,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/images/commons/logis-31.jpg","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /images/commons/logis-31.jpg HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 05:44:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 May 2021 07:36:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1197050\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1197050,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=15, height=4480, bps=194, PhotometricInterpretation=RGB, description=Train wagons carrying cargo containers for shipping companies., manufacturer=Canon, model=Canon EOS R, orientation=upper-left, width=6720], baseline, precision 8, 992x1200, components 3","md5":"057db8c58efea880791fd875ff327403","sha1":"02a5182097be7bc20443398fa3f2f09dc3fd9338","sha256":"844a8037453a396ee33c827512b119ef12f812386a3e99d82cd4586860f9fc80","sha512":"f8e5c2c7436341f207f94dc336963b26f04016745517b78e16c88e7f03def95aa898e3e8d83e2d73c402a07a8b94db9e07851799adec5cb43bbb8586144ee5cb","ssdeep":"24576:yysH87YVY6JjVEF55CU3XL6Ojtzj5etRn:M8hOmXC07rjtz92n","tlshash":"2e252315f9221c52e8695d7df5fac9408ae31b480d92460f789da839ffb0ec84fdb492","first_seen":"2025-08-06T05:45:00.669853Z","last_seen":"2026-05-17T09:13:33.861445Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":861,"receive":353,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/images/icons/touch-orange.png","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /images/icons/touch-orange.png HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 05:44:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 19 May 2021 07:37:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6981\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6981,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"1d4a591437c100532442be197a78cb5a","sha1":"622c2a9e0c8aba87756b67fb50b546fe3aa00b90","sha256":"428a56d62971207c36850f20898ba7ab7501abafee39f6d920ea9985a40625de","sha512":"a713843d3078e5f02f1b4cf64f0bc3de466c3a4c07ecfd43c7340bd24420950c30c815d3e3bfcbcdc7efd9649400b4f0665fda5119ef5f74f8d284ca4ad812ee","ssdeep":"192:eknEpsj86WkAiWJSEiNIYe3NfXTAif7rhFklTnaowZ:1n3ARNoEyI1dEi7dFczQ","tlshash":"a7e17d47fe10a8018f5ce79976df12082f7563c7c741a894bca8896b29ee8740e5a1b3","first_seen":"2025-08-06T05:45:00.672093Z","last_seen":"2026-05-17T09:13:33.888528Z","times_seen":3,"resource_available":false,"data":null}},"time_used":668,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":653,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/images/commons/logis-32.jpg","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /images/commons/logis-32.jpg HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 05:44:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 May 2021 07:36:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1008035\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1008035,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=16, height=3640, bps=206, PhotometricInterpretation=RGB, description=Aerial view of container cargo ship in sea., manufacturer=Hasselblad, model=L1D-20c, orientation=upper-left, width=5464], baseline, precision 8, 992x1200, components 3","md5":"a0f3008db82cd6c5899c498b9700f568","sha1":"2767c7914b5c769b2e5c68a2380e7e6275372016","sha256":"1d911369d41d99447a80c1967c0bc15fb7521436d8a5354e5ad4e93543977d6a","sha512":"d879a21d529f7cfa02a1f4ee63d3e724829fe81e6ebd03fec2c6d3b9aecff1d7315962ee05de15c064b4f18155c6d13a85d29300d3a1ff871dc3e061e3e4a48f","ssdeep":"24576:BMQnF3/S5T8F/BG64jWvrmTEgWSHNeCLjRXgC:BMC3a5T8BEcviQg1AsRXl","tlshash":"8e25125478211852d45c3db8d9eeb0c5c3e77b8a4de1020b33ede984eb659e88d935b3","first_seen":"2025-08-06T05:45:00.674076Z","last_seen":"2026-05-17T09:13:33.912413Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":804,"receive":381,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/js/lib/nav.fixed.top.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /js/lib/nav.fixed.top.js HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 19 May 2021 07:38:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 312\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1085,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"b0659e0488cfc3d08add6e78258c9c3d","sha1":"2d2950b26c7fec20ff81fd3c514ed188de442ee5","sha256":"2ffdd5e75f51628b7e53bf5fac40b83abc3944ced3e9e7c2948417f683cc7a3a","sha512":"adf246388c1982e820e8e99c884f19576492cb92568bd626988d101c1300a1513c514d1ab425493e1e8c9a1826849165e87b1fc97612f9efa8802c2528d7f6cf","ssdeep":"","tlshash":"2a113429b0991d5180737bf64a674000aab71837f102c32cb43d55e92fb290998f6e7f","first_seen":"2025-08-06T05:45:00.676142Z","last_seen":"2026-07-22T02:23:26.190856Z","times_seen":21,"resource_available":true,"data":null}},"time_used":1334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/revolution/js/extensions/revolution.extension.slideanims.min.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /revolution/js/extensions/revolution.extension.slideanims.min.js HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 19 May 2021 07:39:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6507\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":29072,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (28818), with CRLF line terminators","md5":"16dd37b372f293208d52d84d49a375ae","sha1":"dd9724509c9d79340d932082f40850f717532146","sha256":"9dcf557a9e9a7d3641fddaf711b224610496a92cdaeef962ff85b1813f358cca","sha512":"6134fd6e8ab237cbab8c5b8024dd0b697d145f304159e4f11786277ac7127052d21738d49b601edb82cb30a49c46055253fe7f89e3ad89b7d62df35408cad35d","ssdeep":"384:y1mxyUdZTo/ApwEN8vrISE3cXwfFWUDjZgTwTK+pYq1s0X37keYuL79+9fNMze5l:ppwEN8wcXwfFWUDj26pi27keYgcR","tlshash":"86d2f8dfea264c6280532142d3f589162219c977fe326fda37e9d0b505d301e22fbd9a","first_seen":"2023-03-07T01:06:36Z","last_seen":"2026-07-27T12:20:13.034377Z","times_seen":669,"resource_available":true,"data":null}},"time_used":1171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/assets/images/home-slider-9.jpg","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /assets/images/home-slider-9.jpg HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 05:44:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 May 2021 07:20:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1130571\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1130571,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=16, height=5504, bps=206, PhotometricInterpretation=RGB, description=Warehouse inventory manager holding checklist and looking aside., manufacturer=NIKON CORPORATION, model=NIKON D850, orientation=upper-left, width=8256], baseline, precision 8, 1920x1080, components 3","md5":"6f660be993f806ab031d1fb0f6db3014","sha1":"476e1fd77f65dfd2b664eb0ba51c57b8a068d744","sha256":"0caf6f0f25614698c9b4fe1825fc6d00db1d3b638778952e27a8bb50cfc5168e","sha512":"e06ac97b6a6e5c47fd1d3e2c149adc00dca7f2fd7db67b1dbcfcf70cfb80f59e369e5ea0e6e1b271bced6feb5db37eaa01ff698fbb2b2ae13b94b967e4ec7259","ssdeep":"24576:d2xIZVnq0sxyD6YP+TemcpBC7uWvqjkK8zh9mVKiTBhC1i8OCt:dYUVnq0myD3mt7Vqjklzh91ithChOg","tlshash":"492523307d125e88d5183b7de9fa83e927234fae0913014a369e9819ef70ed49d858e7","first_seen":"2025-08-06T05:45:00.67874Z","last_seen":"2026-05-17T09:13:33.943065Z","times_seen":3,"resource_available":false,"data":null}},"time_used":764,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":504,"receive":260,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:21.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 05 Aug 2025 18:55:13 GMT\r\nexpires: Wed, 05 Aug 2026 18:55:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 38948\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-07-28T01:09:44.578611Z","times_seen":77208,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/images/icons/warehouse.png","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /images/icons/warehouse.png HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 05:44:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 19 May 2021 07:37:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3272\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3272,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"890cbe32941f3c5a7f049ca7df8c9113","sha1":"c0abfd5a322536878189c920fe44a2f6f090bb36","sha256":"c5910605fb936aeb435ee24e15b47192d5a507098c14c2e10cc2660bfb3ad9d8","sha512":"096df16b5e59383f64526ef26b1893532039159136e9a61407248796abb647199c497e9afc74e30db7224cb969dd49062a20f415fa335e1b4b77e31328a81239","ssdeep":"","tlshash":"cc613bffab7ce3b8d55323531b53a6229eb749d21d11f4f5c276c748156104558e4348","first_seen":"2025-08-06T05:45:00.682121Z","last_seen":"2026-05-17T09:13:33.904603Z","times_seen":5,"resource_available":false,"data":null}},"time_used":665,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":665,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-lGOJV2Cd.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:22.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Oct 2024 00:00:00 GMT","end":"Sun, 16 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"F8:69:46:5B:91:2C:2E:CA:94:48:1B:4B:A4:21:4D:B9:48:55:E2:FF","sha256":"6F:B2:38:92:36:6B:54:7A:DB:D1:6C:60:C8:1E:67:C8:67:64:D9:14:BE:4E:72:47:9B:32:12:16:2A:47:4A:09"}}},"request":{"raw":"GET /assets/main-lGOJV2Cd.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://safestways.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 05:44:22 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"68873fee-41fca\"\r\nexpires: Tue, 28 Jul 2026 09:26:07 GMT\r\nlast-modified: Mon, 28 Jul 2025 09:16:30 GMT\r\nx-77-nzt: EwwBuUwJCgH3b6kLAAwBuUwKDAH3GAAAAAwBw7WvBgG3AAAAAA\r\nx-77-nzt-ray: e2f754206368dcbcb6eb9268c1a5e504\r\nx-77-cache: HIT\r\nx-77-age: 764271\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":270282,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28849)","md5":"c080929ee5b9b8b7dc5d95e9b9eec0f7","sha1":"7bfee99cea3e7e33066a81046664fd48069f7f69","sha256":"bdfe5b581aff3b7b9bcda50a9c6e6a2f35666fe27513aa76b1c7a8b37cf0173b","sha512":"148559bd64d128376c21689658c6d9a0dc38518f5e52c8632d3551f03d480d9bae66958712c631a0fb1f0eeab46520d9e9ac79721ecc79fc576c77f67cb3a26d","ssdeep":"3072:CQfUXVejVfkdxSwVBVmMdgwYVPVF/z2ih1gPn4vFSC/0niYYu2g3QuO+jf/oNg9/:XsPn4vFSu0nLT3QuXD/oNgoPLwvwFe","tlshash":"fe445ad471a5703543a700e5607f1006b23e5c29a849c068f6aeddf67db99c8a2b7fbc","first_seen":"2025-07-28T09:46:38.948067Z","last_seen":"2025-08-07T03:39:22.606026Z","times_seen":285,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/css/lib/aos.min.css","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /css/lib/aos.min.css HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 27 Feb 2022 16:11:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1540\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25948,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (25948), with no line terminators","md5":"fb1fcc9be071dec9f9bac128ecd93ed4","sha1":"67dff7ab608f45a65aa52780007df55ad551c6d4","sha256":"cc9b53150a18e2837e7fc7858c5c82c3aa222ce9ebe8530ec5505c49c58269bb","sha512":"dc71babdb5a9fdc0e969857923d65b59017fc5aa915e0112c18c0c8fda0dc8533048c5ee62dcef729e31218aa1d54bdce4fa9c617746e1f43c548a2e697f95eb","ssdeep":"768:IITCCYNUh6cuI8P83SGy2wp0VSoWsMrcL6yCqYHg8st8FsgMYcP4/UiYKsJsp883:IITCCYNUh6cuI8P83SGy2wp0VSoWsMrp","tlshash":"bdc269497e4c9200af879b13629f2a0c5a35b549e530580abf3e36c52cc5ce77973fa5","first_seen":"2023-05-22T04:26:51Z","last_seen":"2026-06-27T15:57:28.492146Z","times_seen":27,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/images/commons/logis-29.jpg","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /images/commons/logis-29.jpg HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 05:44:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 May 2021 07:35:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 955680\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":955680,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=17, height=3744, bps=218, PhotometricInterpretation=RGB, description=Airplane at sunset - back lit, manufacturer=Canon, model=Canon EOS 5D Mark II, orientation=upper-left, width=5616], baseline, precision 8, 992x1200, components 3","md5":"0b5593ce18cfd31aa3b3a7c6a16169cd","sha1":"58c08c371fb60dd0f23873010e0ba8d6a7a68a18","sha256":"f738e139245306160ef0249b54620021e3a04e540abd81db4984ce85d9846796","sha512":"1865b4cf8045a1c41d070216acaa9f6240c5c6b13be92c9e9b70e1e5c3ff8a3cfca3bd1b95a2f9424fbb5e8c037596d63f0361546bd3966da196d764c867b5e0","ssdeep":"12288:HpB6x5mlkF7oKOMLMEMxVsSa2WKsf5qtUF/jzxSmQMwWXQ8wISa4Wwc+wWyS7Jm+:zQ+wodMLdlhjxF/1aJa43ccyS8Rc+DfI","tlshash":"151523213f28ca78e8a43870545c695273a64af0e517c3973f4c9fa45f80bd9cc5ea9b","first_seen":"2025-08-06T05:45:00.68676Z","last_seen":"2026-05-17T09:13:33.8978Z","times_seen":2,"resource_available":false,"data":null}},"time_used":859,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":762,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20250804","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:22.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20250804 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: image/gif; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 06 Aug 2025 05:44:22 GMT\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport, script-src 'nonce-pdkuL36FeLgKJ6Py5jm6eg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self'\r\ncross-origin-opener-policy: same-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nreporting-endpoints: default=\"/_/TranslateApiHttp/web-reports?context=eJzj4tDikmLw15BiEOLh2Hb99BE2gYYPv3sZlZSS8gvjS4oS84pzEktSi1OLylKL4o0MjEwNLAxM9Aws4gsMAC6AExY\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-ENID=28.SE=M4jAP3tg7V0vCBmX0Zbmf3wve2PjyxRE1r9mBDvojnEceIDCwmBz4szDiz8tQajUNmKIUlQ-1keyxps5IFCLyvFar6ioFry5UkA35WOyYYVkKlHH0GjNphuIjCjR-owVzVAO6gOVn1rLPoAGsqj1wqYxcao6xufykGHEaRBNhCZs9gPYUAX8u3IXvL-4iuHAdu0peZKafAqt38aEVeYPjnbhifEkMcqXDuf402kgYoS_g5PN; expires=Sat, 05-Sep-2026 22:02:40 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T01:22:25.15752Z","times_seen":17571767,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/images/icons/world-shipping.png","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /images/icons/world-shipping.png HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 05:44:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 19 May 2021 07:37:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7969\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7969,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"adba4af4ea036705f6d2ad1c1ab6ad45","sha1":"90d899d1c4dff49a1b8644034ac42c312e1b34d1","sha256":"3d0ae16dc0f436d2deea9882fc23abaae91790cfeeb646576bae707af987d8d7","sha512":"34288cad87549b38fe783f57a7a28d749d331f9c717ffae3d80235291e3f73b9498c6919bcf12fae3ebdacc19a4931947b343a9181e98c3a8398804b2dd4fade","ssdeep":"192:eknHQM88CfZLlT37f0w+K6smvhXjwzKs/d6:1nHQM5WLT7fX+K6XMWuE","tlshash":"1cf1af08b150a511f69bda409de460bb6d75dbc0edc8aa655d5cccc931122f8c9093eb","first_seen":"2025-08-06T05:45:00.68859Z","last_seen":"2026-05-17T09:13:33.905941Z","times_seen":3,"resource_available":false,"data":null}},"time_used":917,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":917,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/js/main.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 19 May 2021 07:38:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2661\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13490,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"4d1df76c4fd5ada36ec89bc48ec5d5c9","sha1":"269ae97862cb76572dce7a715c16e47a67e6fc5f","sha256":"384d5ad8dc19aba7310b385d894acaccb6f96052bd7a50fc6cc9bb043b1ec5f9","sha512":"2668e4eaadf732689bc69e7d890eea439bbbebaebf8c814785fce524aedace44aa8216d912b6bc23d09cd56018ce3f2009208840497ff1db783964dc55e4972e","ssdeep":"384:iCSKqQtQuJtQXzJtQWJjJDQgWJpQ0lJDQBoJDQLv:ZqQtQ4tQXVtQWbDQgwpQ0PDQByDQLv","tlshash":"35521546611620365c3fa37cbea90608fa254717d106a9673efe02801f7275d73e2f9e","first_seen":"2025-08-06T05:45:00.690387Z","last_seen":"2026-05-17T09:13:33.856309Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/revolution/js/jquery.themepunch.revolution.min.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /revolution/js/jquery.themepunch.revolution.min.js HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 19 May 2021 07:39:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 17419\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":64995,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (64660), with CRLF line terminators","md5":"9f238a7a79f7400123d58eba49395d28","sha1":"86dd4c7bc5ef427558f5e1802334aa578c90a424","sha256":"4313fa5bb5c7788ced1058ecc60b11f4e384716bf51b64c3595a712a17e80ee8","sha512":"0e0fdfe1fc4189c94480216b453bcc87fa9a3aa81c530ab6a9fbad6beada8e594afb5bfcff249deccabcacfb058bbbaed1d219c34b7d58795c2fef98bb285712","ssdeep":"1536:kCnzw4thxKWjQemOR3duEZG08YY7df85Jiw8Zwjz3Ui8wD8kVO1WilMO58wA1XXx:kCnzXn8ySEZV3U2ilM0A8pMB","tlshash":"8e53e964be1064b644fb7265a03e4614b2b26d3aa703c090f2a7987c6afcd45235ffdc","first_seen":"2023-03-07T01:06:36Z","last_seen":"2026-07-27T12:20:13.02853Z","times_seen":727,"resource_available":true,"data":null}},"time_used":1329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1328,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/images/icons/favicon.png","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:21.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /images/icons/favicon.png HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 05:44:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Mar 2023 09:11:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11437\r\ndate: Wed, 06 Aug 2025 05:44:21 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11437,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 71 x 62, 8-bit/color RGBA, non-interlaced","md5":"08589d64af7bd743c5078ec4d53c2943","sha1":"b35b6cbaa5ce1dc0ecee528f40202464589fe39a","sha256":"0183b8692483c1edc4fb306822263cb8085089073fe4936f9ca26cf2ca1834e6","sha512":"3c8ab406b157dcd8b183882f959be4021754c1e6fda964c933922367fe042a32b40c44daf47d1e320d5b411f6bc1c3200a5bec07567a6b6e0c4085285d5148c5","ssdeep":"192:6knm4VjnOb/53c0rjB7kAh36DlrngLe93CDOuDm7vf6r3OnJHUmoo0BZwFr147V:JnmAjnOT5sYoAhqpsa9jmuvf6lm9F14p","tlshash":"ec329e6deca15d2c535ffad02de152321b435b80d790a420aef84a9bd9b02f6c22d5ca","first_seen":"2025-08-06T05:45:00.693142Z","last_seen":"2025-08-06T05:45:00.693142Z","times_seen":1,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-DGcCvwDA.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:22.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Oct 2024 00:00:00 GMT","end":"Sun, 16 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"F8:69:46:5B:91:2C:2E:CA:94:48:1B:4B:A4:21:4D:B9:48:55:E2:FF","sha256":"6F:B2:38:92:36:6B:54:7A:DB:D1:6C:60:C8:1E:67:C8:67:64:D9:14:BE:4E:72:47:9B:32:12:16:2A:47:4A:09"}}},"request":{"raw":"GET /assets/style-DGcCvwDA.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://safestways.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 05:44:22 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"68873fee-8911\"\r\nexpires: Tue, 28 Jul 2026 09:26:07 GMT\r\nlast-modified: Mon, 28 Jul 2025 09:16:30 GMT\r\nx-77-nzt: EwwBuUwJCgH3cakLAAwBuUwKCQH3FgAAAAwBJRPCLgG3AAAAAA\r\nx-77-nzt-ray: e2f754206368dcbcb6eb926822640305\r\nx-77-cache: HIT\r\nx-77-age: 764273\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":35089,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (35088)","md5":"628df02a7460555ba6e64f14897f0624","sha1":"16785e09bb64eb92724dde63fe6a775740637c18","sha256":"7d6c22ffcc0b7e3cd13f78895d8ab8df8ad1880ad130185f9c76857c9b11ac3c","sha512":"c00f075a2fa109a9ee3edc774e0702d8b1c03a345d42fdc8e9b9f228034419f601efbf42b6fe62757b3706e260037e588e17ecdee94aa6d697fc94246c97b5af","ssdeep":"768:E8J9oTcrW0vNXFZxrnSJPHs24nqfdZFu/v9+ggFgN:E8PoTcrW0lXpuPF4nqfdZFu/g2N","tlshash":"bcf2a75daad4093cac33c166e3f4e58c9229e5d1df322adaf6473a048ac27bf1987514","first_seen":"2025-07-28T09:46:38.964364Z","last_seen":"2025-08-21T13:42:44.033386Z","times_seen":1105,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/revolution/css/settings.css","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /revolution/css/settings.css HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 19 May 2021 07:39:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6860\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":30092,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29721), with CRLF line terminators","md5":"abb6e2da73a6cfa0b773761de254a8cd","sha1":"3e1424958e90f98ff0aee8548a260763bb01796a","sha256":"62e6f0ec8c886a71dc7ba02f5d17fe4fabef76d92f2528a4e9ec5e08a919e487","sha512":"857267fc6970e04c2869c0b354d1102b55799e3a90ba946d9604f0f3fcba68009d41c727bef04dd499d7e200e0c8406d5a422ef531da4d767d93c5ea5a1427f4","ssdeep":"384:bTx/MEow4rLT4ILX8sSeUiOWC7G7C5+TU1Zz80id48f/:bdME0LTPX8sSeFOWCy7wmU1h8D283","tlshash":"86d2da70f98975fc77a7c22562c0b7adb02ad122e6520d6ef02f72f986d3086446e658","first_seen":"2023-07-13T06:13:30Z","last_seen":"2026-07-21T09:39:05.868347Z","times_seen":45,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/images/icons/train-2.png","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /images/icons/train-2.png HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 05:44:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 19 May 2021 07:37:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2704\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2704,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"2e5a0d0af20e88807a62794cb32ee0f7","sha1":"f0ecf5734ba91680c524ef937e6a1b4621b6b1d5","sha256":"6e7d86cb33c02855689a6f7c55e3ed0c631ac550b3a5390339a5ae5b0e03949e","sha512":"d23fc2c39d61542640c825eec49d7e80b06a745ffdcfaddd3b8d917a2754486c0832c5ad42759d108b0260949a0400125a930a33d6e74608cfc8acc2fc2cee02","ssdeep":"","tlshash":"3f512b667447962582b4bf1f805adc7d7e7294de2c032040daca5c6a130ce83a364e4e","first_seen":"2025-08-06T05:45:00.697725Z","last_seen":"2026-06-19T00:32:33.849439Z","times_seen":6,"resource_available":false,"data":null}},"time_used":918,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":918,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/css/lib/normalize.css","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:20.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /css/lib/normalize.css HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/css/main.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 27 Feb 2022 16:11:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1623\r\ndate: Wed, 06 Aug 2025 05:44:20 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7162,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"f3a2153a2dc2825037a5170a581172c7","sha1":"57a44458c9461a171b287879c28b63187f6957fb","sha256":"6ce535bd9bd04ee0c98097bc25f3903d13a9d5846b8830d87f023628e0787968","sha512":"18d71dea0e2380a6e9d1c38cfdd043281ad2331b8ec0677dccf4ebe2ce88e71b233d596db02eef853eeadddcf5d32106aa5a658fb1bd5262f985efd01e840c5a","ssdeep":"96:FCcOT8gWMM70Mp0334nE8oSthBiBrJXB+UxtnLI6Tqi72CT2nE:FKT8K3onE8o+IrZB+QLIUqiqCCE","tlshash":"5de1bc3116c02ed2a1714b78a75b2a45f331026ba7843cda78f912b44f717f5de68bca","first_seen":"2023-05-06T10:21:47Z","last_seen":"2026-07-22T02:23:26.123195Z","times_seen":177,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/js/lib/plugins.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /js/lib/plugins.js HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 19 May 2021 07:38:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 106677\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":388823,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32019), with CRLF line terminators","md5":"bdda967141027a2c36c853bf0713aa4a","sha1":"e8df5eb4a52aa935ebc2446eb42a224ef70cbf65","sha256":"4f68e94719d87920044e9a5b9950ffe61e24bd77aaa4fc3404e8ac818135775e","sha512":"49f361a62fbd358f232c3f692b08dbe7f0e9cb3e9a5bb9f24355a6ce1e732eb4bface25acfe058f04e3b901e318ff1eb4c84c5bbf95df3edf4360e5bf6fc299d","ssdeep":"6144:tWSfJP4NnYaWXaSqM1objHa1opBLYEoy239dHf4TmwOo:tWSf66aWXaO1OsHpTHg9","tlshash":"0984298db3413626829771f5512f010fb23ba96cb80584acb5a8d9ea6cbcc4d517bf7c","first_seen":"2025-08-06T05:45:00.700465Z","last_seen":"2026-07-22T02:23:26.167971Z","times_seen":21,"resource_available":true,"data":null}},"time_used":1452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1335,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/home","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-06T05:44:19.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /home HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]}],"data":{"size":64994,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (612), with CRLF line terminators","md5":"bd27e45e3851d0243f40c40420f59484","sha1":"aa484533be795ec9cef19dbd9fd8f447db798ea1","sha256":"5368e5a169d12992e37318dd59b40e08c9f5ac2c4da10460a0ed5aa5109181a9","sha512":"a9e91c72a1bc3468349a1b8060526b8a7c8ab1a4e3ce79cb0f6f09816aa9f3861b75f7f6d783b949f22bf8b8aeef914ed940f5df12ec4bb9ea05c345ef64f1ca","ssdeep":"1536:zB4q5+yspVs7xCosF/sGDdBsLusyJRTBfK:zBD5+yspVs7xCosF/sGDdBsLusynTBS","tlshash":"fa5331247ac00127013385cbea3a5b59ff71e207a60a8554f2ed1ba79ffad67e403359","first_seen":"2025-08-06T05:45:00.702394Z","last_seen":"2025-08-06T05:45:00.702394Z","times_seen":1,"resource_available":false,"data":null}},"time_used":695,"timings":{"blocked":290,"dns":63,"connect":106,"send":0,"wait":115,"receive":0,"ssl":117},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/images/logos/logo.png","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /images/logos/logo.png HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 05:44:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 28 Apr 2025 23:33:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5609\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5609,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 204 x 70, 8-bit/color RGBA, non-interlaced","md5":"b37dbee818f7d2a6fb488c783af77fb8","sha1":"1db17863c304f4f6356fcf7e8f840c66154a8c20","sha256":"e07691bf5432a1aac10ef7a1ff4b7b9e72e9df2325619416ebecf0b3fa4f6dd2","sha512":"19f6045fc138870d23e21a808c1c4ea99f54c584ccf2ec7eba6488c78a2439c1e7f94a49eb54353b098db328d4a907103f874eb46ad551e0c9926a665d4c7a6e","ssdeep":"96:ULWlknWOp2Xcvhwu98oHYgHkqHyIDDOHUfHWg5wfH3SuZwNfkrcNG7WEk7GpRTEi:JknWA34gEq5O2GjGZOdkKw8YksK5","tlshash":"5dc1e904fa125e208a0dbb85aee9e0664bb71bc497d1d190bee5dd071ca02bdcc4f6c6","first_seen":"2025-08-06T05:45:00.703962Z","last_seen":"2025-08-06T05:45:00.703962Z","times_seen":1,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/images/icons/air-plane.png","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /images/icons/air-plane.png HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 05:44:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 19 May 2021 07:37:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3886\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3886,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"2f44072b90bca2ec515b7e4495d816d2","sha1":"17563569eba34963ceaa63d5bc48a609dd695333","sha256":"820f29da9a15f38e0c6f1593509265d62c8458ee987e59d7854b123119af6a17","sha512":"bd39cf618be61ff5953f47363a92cce4a302c0eb8a56a4b8ff52db404c5331d140f227f8f8e938355cc523e11fa3ca527b5b75418c98f96c462ed970e7567800","ssdeep":"","tlshash":"52816ba341a0790eeb9c5f7918932dc398279a0c01815d11deef72617a06beac1f0fd3","first_seen":"2025-08-06T05:45:00.705583Z","last_seen":"2026-06-19T00:32:33.794807Z","times_seen":6,"resource_available":false,"data":null}},"time_used":775,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":775,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/images/commons/logis-51.jpg","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:20.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /images/commons/logis-51.jpg HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/css/stylesheet.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 05:44:20 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 May 2021 07:36:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2155980\r\ndate: Wed, 06 Aug 2025 05:44:20 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2155980,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=13, height=3036, bps=0, PhotometricInterpretation=RGB, description=An aerial shot of large shipping containers area, orientation=upper-left, width=5396], baseline, precision 8, 1920x1080, components 3","md5":"35d7ad65ea3813dfbb1606afa4b06e52","sha1":"099beb460b1fe751633284172353b7df009f68a1","sha256":"0384bbef8645ff320d25cf9d05872a605eb51d51d7c99c0de434b1fb60cde004","sha512":"0b8b1cbaaabec7bad871e5c213351d3204ad52df65dd4efadef46b92b35caf3b49acd35b2ff394bee4412015abc005756983e2aa97f3df67f5b6d90372958b07","ssdeep":"24576:vzOgmz9ScZSDpE3+iRheXCzi1rJeCyW6KuUNH+TX96H4mOY:7OgWwcZ2po+iRh7i14CaZu6Na4q","tlshash":"702533794f089c9bf9acb776567c828836710063c612af8e791cd21a5b6778c8f1870f","first_seen":"2025-08-06T05:45:00.70707Z","last_seen":"2026-05-17T09:13:33.949174Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1222,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":123,"receive":1099,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.O5gv-XEs8xQ.O/am=AAAE/d=1/exm=el_conf/ed=1/rs=AN8SPfqHbt8sVw7fokE2U_vb-QNNBOWx2Q/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:21.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.O5gv-XEs8xQ.O/am=AAAE/d=1/exm=el_conf/ed=1/rs=AN8SPfqHbt8sVw7fokE2U_vb-QNNBOWx2Q/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 76732\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 04 Aug 2025 18:29:05 GMT\r\nexpires: Tue, 04 Aug 2026 18:29:05 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 02 Aug 2025 05:09:26 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 126916\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":222151,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2544)","md5":"1847809d96ee7dcbe495bd8c65711b22","sha1":"0ac03779bf867d05e1dc0c9bc36da4aa0d905049","sha256":"76e6be822ddc889ba19949689f59690db48caed7e8bf764ea5f18c8be5b67c19","sha512":"f0ad0c4c10239359029dd8ba415e38de604d6f941768ef6d6a71a79b6de280098b07d85b8fab689925b1c3f311e3458246e706a972dbcb2d1ac8f56b4e0a925b","ssdeep":"3072:GEupFCs3ncUcrhC9vYYrSXSHLsICyVUNJ1ixWf6ui8ThulnovEwpmnu:WBcUcg7HLsHJUFY","tlshash":"0f24e8d9b39271669363f4a6d17f000ab13ba859f9484d6cb28de8e25ef08190177f7c","first_seen":"2025-08-04T20:30:01.366813Z","last_seen":"2025-08-06T18:59:40.498922Z","times_seen":629,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":72,"dns":2,"connect":28,"send":0,"wait":29,"receive":57,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/revolution/js/extensions/revolution.extension.layeranimation.min.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /revolution/js/extensions/revolution.extension.layeranimation.min.js HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 19 May 2021 07:39:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13731\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":55811,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (55556), with CRLF line terminators","md5":"b8fe098e4c85ea4ce1d978b5e8dd2563","sha1":"9acb50f205d771fcaf2c82978dec884b2933c029","sha256":"3327922dbad940348d79019ec680c730d71649132fa727675303bea91c6c4010","sha512":"52bb2d71b5d39f9bc7bfc602ffd39cdf4fd71bed07246df6ad40dc6fdb056b6d83e6120effc19e97df0cfafb63c9253bd3f79e4eb2bbe72ae99a6f548c0fd34c","ssdeep":"1536:VWS34eAk5Pljh5/dNAOQVja8les4DrC0XKxnA7Zz2hSoqadfjLB3lqo:VWS34M5Pljh5/dNAOQVja8lesdWZz2fZ","tlshash":"5743fcc5ed101cf952ab908ad07d456832247e3ce5078691f56af46e1e48e8232bbf7f","first_seen":"2023-03-07T01:06:36Z","last_seen":"2026-07-27T12:20:13.059535Z","times_seen":642,"resource_available":true,"data":null}},"time_used":1180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1179,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/fonts/webfonts/fa-solid-900.woff2","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:20.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /fonts/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/fonts/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 Aug 2025 05:44:20 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 19 May 2021 09:01:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 80148\r\ndate: Wed, 06 Aug 2025 05:44:20 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":80148,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 80148, version 331.17301","md5":"c500da19d776384ba69573ae6fe274e7","sha1":"6290834672aba86d5b6c1c73b30b57c9c53996f7","sha256":"cfe3b7382e477059da11be2099914b94f0e2a4f08240c60542c376957b8d9658","sha512":"e7391f2b8d8acd4b82f64927ed98acc863e09ab4330d46094d548db9c55e23291304f9b35bc58ae4b175327c786cbc8ca568dbea110938ab8aa3251caccf5c8c","ssdeep":"1536:RzTGdimix2Wk4COoesKvwaBf3vZRLYVQGfyhPg8JJgR+nIHEMeYuF83uxzMLg31:RfGdimk2Wk4CPevvr5R24/JaMIHE2uFF","tlshash":"a973020fd63e701286c9b735967bab41e0501a3bbfdd231571a2cdb46de6bc703a058a","first_seen":"2023-04-05T23:07:45Z","last_seen":"2026-07-28T00:02:41.225954Z","times_seen":18711,"resource_available":false,"data":null}},"time_used":696,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":695,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:32.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"POST /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://safestways.com/\r\nX-Goog-AuthUser: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1180\r\nOrigin: https://safestways.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting\r\nreport-to: {\"group\":\"clearcut-frontend-http-prod-hiqos\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/httpsserver2/clearcut-frontend-http-prod-hiqos\"}]}\r\ncontent-security-policy-report-only: script-src 'none';form-action 'none';frame-src 'none'; report-uri https://csp.withgoogle.com/csp/httpsserver2/clearcut-frontend-http-prod-hiqos\r\naccess-control-allow-origin: https://safestways.com\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Wed, 06 Aug 2025 05:44:32 GMT\r\nserver: Playlog\r\ncontent-length: 131\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"ca0b7e866005f6774d284b9f438ebfd2","sha1":"53644f5ee3640189bdb223473ba6a2d46606c556","sha256":"502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358","sha512":"939c4526c623db033ad40bfdc6c8848a1dcd0ca797f17fbbd89fbec1b49dededc16e89084b3759e62fa0ffc8fe896980b10a1ff8daee22736a70b08f1ee13e2f","ssdeep":"","tlshash":"58c08c50330469e1080e82c8c0026858228c903b46708cf10bbd68125d3234a1004854","first_seen":"2023-04-05T03:14:56Z","last_seen":"2026-07-28T01:19:58.593065Z","times_seen":582123,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/css/navbar.css","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /css/navbar.css HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 27 Feb 2022 16:11:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1395\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8723,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"8acb9470c4ab8d94d9734090567c11cb","sha1":"a1facbb9f48aa643597109fb17b4a12ae1c58099","sha256":"184c94789d946f136588e57ab4fef9d3b01446741a0c92dbaa3e6f4f2427aeeb","sha512":"c5b84db038ca47f0f79e5d25eddcbddeff34e9f46d55d800cc4be6a67d15740bf292195a647326faf432d35db2563ce71e1875143e49eacd6d3bec5a69ece6e0","ssdeep":"192:scuXwK6+vf8UAZiyVKRWGdvkWouuehxbnZjZ7+cJUVSY6lmluJ23J20:scrK6Tiy8RWGOWoMbZjZ7u","tlshash":"3102d0589aa1340412721b1cebe64b14ef3e54235d024f7b77f352ca9f636ac1189f9d","first_seen":"2025-08-06T05:45:00.711377Z","last_seen":"2026-05-17T09:13:33.868833Z","times_seen":4,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/images/icons/cd-top-arrow.svg","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:20.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /images/icons/cd-top-arrow.svg HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 Aug 2025 05:44:20 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 19 May 2021 07:37:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 334\r\ndate: Wed, 06 Aug 2025 05:44:20 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":562,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e8ffcff1b2d29a2d6209835f6254dbde","sha1":"784e1b396a3546ce4bbffccfaf439f6bd6d32dfd","sha256":"3d1aa143071e7a7c055e6cc817b05f9f3732febf298008634da840bd3318f552","sha512":"6c2de32352bc1403ec4153d96fe84d774768778040b8aff384420749672adbae0b20376ef746be4353ec8714f5f6c8cd718ea8c8ea55a68526d2650e0898af7d","ssdeep":"","tlshash":"5cf0e19c97459c7cb055873172b896c753b1b081d09304ecc48138fbd656da957d52bc","first_seen":"2023-05-02T11:05:38Z","last_seen":"2026-07-27T13:51:57.525647Z","times_seen":1297,"resource_available":false,"data":null}},"time_used":710,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":709,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:21.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 10:00:44 GMT\r\nexpires: Fri, 31 Jul 2026 10:00:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 503017\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-07-27T22:51:35.31276Z","times_seen":54920,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/revolution/fonts/pe-icon-7-stroke/css/pe-icon-7-stroke.css","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /revolution/fonts/pe-icon-7-stroke/css/pe-icon-7-stroke.css HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 19 May 2021 07:44:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1688\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10394,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"703bb254d67f07c562aa243afbc2a176","sha1":"c17f231509cf784bb6547a7ac8a955cfc62c2697","sha256":"66171974b66d12442e1663584a2f1b71f26e0b1254756f01cf81aa5ce2980c08","sha512":"d52f441d918eb851cfcdcc45d19edf0b90441839b25ffdd8f5beab09e74ef1057e81b4848bffc403410f3674c3329b2fbfe202f54133a92ed4e4bcd4e9eed591","ssdeep":"192:/jU1qCQWNm2UCmIarE0OijpSxNtff6q+1fEm31J/:wQW3lG8l6Qa3","tlshash":"4722a9f8de6f24aa5791fa82a3f86e561f5df2bddf40082dc0067e4c95d321c29806d8","first_seen":"2023-04-20T22:23:59Z","last_seen":"2026-07-20T03:40:00.540045Z","times_seen":114,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/css/rev-slider.css","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /css/rev-slider.css HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 27 Feb 2022 16:11:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 549\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1496,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"35100036edf41a8c7a2cf6a6c35af5a9","sha1":"cd2bbffc9cf20e185f4a830ddf2eb82ce0d450fc","sha256":"a387cb1dc55cd1298c6d25bd607359d72153cd7406b121f7828db59a3fa1be74","sha512":"d7aa2c2fcea0b70d4d5ca149e0a895ae42c0858727c3316c36bfaa259429ae937ef5b48eea60a5a6435052016b4ba30df1eb78b956e3c4549e1c1b58e166a02a","ssdeep":"","tlshash":"33310f64c20a204af337ae6c2ba5655ee91800276f024054bbd8f60dcfb647a6161fcc","first_seen":"2025-08-06T05:45:00.716784Z","last_seen":"2026-06-19T00:32:33.775248Z","times_seen":7,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 06 Aug 2025 05:44:20 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":78884,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1801)","md5":"ee234aa5c213ed76f62f684cb798f054","sha1":"acc57e6572ddfb1a79bc61546920834904fd4ca0","sha256":"912b910385315bc8983bcc4062af0170282fde0b3e89de0107f9fa3b9f5ef62e","sha512":"eccc6a076a60d4dc445ed685e88b73b283c2e8a659d83d79b537231acd609cb8d4ed96f307ca0e4e88fd9fda13cebb61d752a9f65f39f347fda9963cf2b2bd4b","ssdeep":"1536:XL5OCUXAtx+lUH2vCzFFpKbTiMOqbWr1RxgumlLtW8iCwNWTW:Xd7BzxKbTwJEY8icW","tlshash":"5673c8c8b6a674668367f5b5513f000fb23f5899e80c4cacb288d8e16eb5949413bf7d","first_seen":"2025-08-06T05:05:37.694723Z","last_seen":"2025-08-06T06:00:30.922372Z","times_seen":44,"resource_available":true,"data":null}},"time_used":490,"timings":{"blocked":182,"dns":65,"connect":21,"send":0,"wait":58,"receive":0,"ssl":161},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/images/commons/logis-56.jpg","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /images/commons/logis-56.jpg HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 05:44:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 May 2021 07:36:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 733998\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":733998,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=13, height=3576, bps=170, PhotometricInterpretation=RGB, orientation=upper-left, width=5007], baseline, precision 8, 992x950, components 3","md5":"fda950dda0e19141769b23a0321af6ab","sha1":"d95920f3a581d701d7addfd615345f86d07eceaf","sha256":"d249967acb2ffd8a9ef82b5a85efee4b0f287c64338eb9eb739a0596e0a35a4f","sha512":"2b399250c69afeaa06ecb969e02b3319b379a47aeb3f7f53a85c3d482265dc9c409d033eeeee3f7e630be15ce95bd3cd1ee7ceec6af49ef30d13e79340081cb7","ssdeep":"12288:gYkYWSSY91+GRyLVg6DZ3Zgq/+mUH4MMcCNXRBYQY5Lqnp71UpEwY/pKy/:gYkYWSSY91+GRiMq/+vzMcCNXvFnhz7/","tlshash":"1df4232d79958b30dd6a9df309f4cba83eca4fa74bf34101b69c7100eb987946f5442a","first_seen":"2025-08-06T05:45:00.719016Z","last_seen":"2025-10-29T04:32:35.822901Z","times_seen":2,"resource_available":false,"data":null}},"time_used":919,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":686,"receive":233,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/88c456a1da5ad03f82187e790582eb8a7b45832d.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"3.124.230.70","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:21.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 01 Jan 2025 00:00:00 GMT","end":"Fri, 30 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E1:C6:B6:6C:12:F6:01:2B:C5:12:CD:14:1F:5F:98:93:35:23:E6:72","sha256":"62:89:5E:08:77:16:42:58:9D:77:1F:38:8C:73:AA:58:D5:ED:1F:1A:79:6A:FB:C6:2A:FF:C5:C1:C9:87:AE:AE"}}},"request":{"raw":"GET /widget/88c456a1da5ad03f82187e790582eb8a7b45832d.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://safestways.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 05:44:21 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 144a363f30d9c9165f08f3a591e8e2bf34692360\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4ae-Jt95KB4lhLcE8+iQwCNZPCueNIE\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1198,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4f18805e17e4c1e8e9e07a360e4a69d2","sha1":"26df79281e2584b704f3e890c023593c2b9e3481","sha256":"6281c13b7e0567048cb6d2f22a76664459e11449f8de893a5852cbd5b5f202f9","sha512":"367418c85fe832ff0d1c662bcc9c08160f6bd9e7fa17da26c06a5620f111a62eee9ab949fb41b9cdad283bca566c40db697449e3c99b7fc3865936d14c504043","ssdeep":"","tlshash":"9421686d4a6822fd5245c7d6c5047a076bbcdcb371043e7eea0d0a4e70db2e5223646b","first_seen":"2025-07-17T12:46:19.667078Z","last_seen":"2026-06-09T14:35:11.404451Z","times_seen":5255,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":68,"dns":1,"connect":21,"send":0,"wait":25,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/js/lib/jquery-3.6.0.min.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /js/lib/jquery-3.6.0.min.js HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 19 May 2021 07:38:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 30260\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"3e4bb227fb55271bfe9c9d4a09147bd8","sha1":"156837f75f6600ccb602b4efcbd393636c33f35e","sha256":"ee11e902416a1d896f538103110337b39a0e2e2606bc1faf5cd0652914891127","sha512":"f7810ef9df875a7fdfa7228f7e2f95dd34e18b57f56a46383198ebcc591e32f633b0d73cc6b271fbc669347f7fdc114cce6a6b43681104b25084fe2a1e7bee49","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:eIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"589309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:21Z","last_seen":"2026-07-27T19:52:09.493196Z","times_seen":10699,"resource_available":true,"data":null}},"time_used":1338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1188,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/revolution/js/extensions/revolution.extension.navigation.min.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /revolution/js/extensions/revolution.extension.navigation.min.js HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 19 May 2021 07:39:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6681\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26105,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (25862), with CRLF line terminators","md5":"67bbcfd4a3ece50288c9e5ac0480852c","sha1":"d893d33514e8d0da3b05e5e5f15e80fe29589124","sha256":"1c94040e2186822caf034fc3758f74f8372a5e8fbe42d5549061f27dd67d4142","sha512":"a24c3a1186e357b284845fe0e54353e351caffcd795c89d582e2351372a1767ee6c115112d0a629a4ed5f30e7b587dcd68fe9e9042885f0360e9f3011232cd5e","ssdeep":"384:dhOObjBeYJfz3zX3SWcN12H2DFQ9j6IDumFu7jaWIyUBj3RX2E:dIObR3zXpcN12H2DqZ9iA9QE","tlshash":"d8c2b8a976903cab5473667bc16a40b532728a357307ae6078efa6f0057ccd913e7e4c","first_seen":"2023-03-07T01:06:36Z","last_seen":"2026-07-27T12:20:12.985313Z","times_seen":674,"resource_available":true,"data":null}},"time_used":1175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/images/commons/avatar-5.jpg","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /images/commons/avatar-5.jpg HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 05:44:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 May 2021 07:34:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 455867\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":455867,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=20, height=3840, bps=254, PhotometricInterpretation=RGB, description=Looking into distance. Close-up cheerful attractive african-american woman searching something, found great holidays discount, , manufacturer=Canon, model=Canon EOS 5D Mark III, orientation=upper-left, width=5760], baseline, precision 8, 600x600, components 3","md5":"2856456df2f18d81087d3d82e57e80de","sha1":"2b4452494523a44523b1a25a11a0aa9149f7b0db","sha256":"2bf6dbc3e9512895caa6ff0dac61a9d51037b0fa8d1972ee477c94fb39c61f31","sha512":"8431eef3af401ed12c1212955b4fc880f07608973db9f8ff9950fa280147cdaee0ade68fa1e7a9b69bfddac8a921e096ab1d803cabdae1b3db7e4c3ef453c69e","ssdeep":"12288:ThSdXbcr4SBe2cRBK00YIvr6rSajYaFYg:c1i4SQ2cyXWr9jY7g","tlshash":"87a41218f5825840f4957e39eefde9c0d7f31aa24c62018ff65d5828af10dc06ee62a7","first_seen":"2025-08-06T05:45:00.722023Z","last_seen":"2025-11-02T08:03:57.093124Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1103,"receive":160,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/revolution/js/extensions/revolution.extension.actions.min.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /revolution/js/extensions/revolution.extension.actions.min.js HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 19 May 2021 07:39:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2412\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8331,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8089), with CRLF line terminators","md5":"37b37940ac6cf4c7cbd47103bad5ccb5","sha1":"ad851d07c005bf59206a1c036458984930d8e845","sha256":"748f3e447f2f7475a4ba75f6f2e2e9f468a3ac443eae879e2104ec562b2158bc","sha512":"ba300130e18098219a467f506ce8fc973c20a8794c77665636c7847a2a40e53e57c2fd5b31ef26886fa81a9b2c613c70c4e19ce6035e4e0f2af89443259b02ed","ssdeep":"192:eHe3syiqiihWp2xgyhK1/l+zWJc2VJS/gkBVl1p:CMS/2f7R","tlshash":"7602b646f1016cff446765aee83702d2b1b1b59c560aa9b4f06bf1a82d3cb5105c77ec","first_seen":"2023-03-07T01:02:47Z","last_seen":"2026-07-27T12:20:13.07005Z","times_seen":1595,"resource_available":true,"data":null}},"time_used":1326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/css/lib/bootstrap.min.css","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /css/lib/bootstrap.min.css HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 27 Feb 2022 16:11:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 21469\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":160403,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65324)","md5":"3afe15e976734d9daac26310110c4594","sha1":"4f14a09a606c99a11f8fda15564ef66f70402826","sha256":"680af6669abc319f9803f0fa26d443df1b6bc29133d88a8e4bea560ffed7288c","sha512":"aced925c428148809afc07f28442b966a58508ea24d6b7203d87c63aab57df93b28ab68183a5dae0d9c12705e0a484685de5a370099c42788c869db686d0dcea","ssdeep":"1536:2THqIJOT7SyEIA1pDEBi8yNcuSEeA1/uypq3SYiLENM6HN26H:YH9vGGq3SYiLENM6HN26H","tlshash":"03f353a6f5a0312de4a7c61964d0bafd152f8245d7224bfbf8273b6447892c70a73e4c","first_seen":"2023-04-05T04:00:44Z","last_seen":"2026-07-27T21:56:24.795459Z","times_seen":25762,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/assets/images/home-slider-7.jpg","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /assets/images/home-slider-7.jpg HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 05:44:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 May 2021 07:20:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 444566\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":444566,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1080, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1920], progressive, precision 8, 1920x1080, components 3","md5":"6b93aef691b49368b42186f64beb95f2","sha1":"7be1742c652b03a3cb9e07d50decec70974ff494","sha256":"1cd27e47e7a5607df47294cd7a2fec2085c2fec4fca1aa2350850f7019614e5f","sha512":"bb805a85fb38982532bef0acd4ac0d6efbc47a974d281c16247e85c8688cf57e3e932883fd114896461999537cc2e6abda6e395fc9e945c2b3f6bf0883d21ec1","ssdeep":"12288:lNnuH6jrFE895a5b05q8Hh2lcPO4Emwjxazlarm8IBmcsMHI:ruH41naYDUcr6+lwIBRxo","tlshash":"2b9423198bee3f34e3608e79d19ad21b3164662129dc6ae67bfd8c1037713701219b5b","first_seen":"2025-08-06T05:45:00.725262Z","last_seen":"2026-05-17T09:13:33.896474Z","times_seen":4,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":255,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/assets/images/home-slider-8.jpg","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /assets/images/home-slider-8.jpg HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 05:44:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 May 2021 07:20:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 804946\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":804946,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=15, height=4912, bps=194, PhotometricInterpretation=RGB, description=Portrait of gorgeous brunette woman manager controlling business in warehouse logistic center. Well dressed successful woman ch, manufacturer=NIKON CORPORATION, model=NIKON D800E, orientation=upper-left, width=7360], baseline, precision 8, 1920x1080, components 3","md5":"1fe6b2f5ca6c6ee1e3b4f78b23cc1b27","sha1":"df14022d2810d427e278781cd71005ff13e7e266","sha256":"fee408f68957f2fd33896056bab904b4d60ba03858e9a7b77028c6d06a909bb7","sha512":"0404cdebce06d543a5c7f49d8777fdd5c28a7f6ddcf59d216ea9c13e5229527339a39356cb50b8195e6c4a0f6c38698c368e5ddcc1f5ed5f1e7b9e6e60969813","ssdeep":"24576:eDrHDixJ/nA5M6eV+gstIRjdrh1tfYR0JogvqL:eQNA5HgMIRjdrqYZqL","tlshash":"dd052320ed656a87e88e3f3be4abebc811e35e711761d09b318fbc487f616805c85d06","first_seen":"2025-08-06T05:45:00.727015Z","last_seen":"2026-05-17T09:13:33.882338Z","times_seen":3,"resource_available":false,"data":null}},"time_used":652,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":352,"receive":300,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/images/icons/medal-orange.png","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /images/icons/medal-orange.png HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 05:44:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 19 May 2021 07:37:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8243\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8243,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"1357f83d5fda4e0a2be14bb3acd2975c","sha1":"3792ca3c8d4d4ea7af676a71c3b00ec224964f29","sha256":"33c842e5f933ed866121a3304a0d222acbe4ca280b4d8ef3cdf49215d6b35da3","sha512":"73eb5974326da253b54ea88aec2e8bb1e0723fdeb946bf74a6ff867f1116a5be999355d269ceacf2b530916fd72af3acd39d351a0ebb77fbdcc4d16d2ee0c29e","ssdeep":"192:eknUtz8siqfzTuCnr5d5HYq4+ks9UW4/2sCzGWtrU9:1ngpiq7TuCrz5HYq4FsaW4OsmX5k","tlshash":"2702af0cfc561b0040a4f995a8f512f21b559b944083b6f8ecdfae9afc511f6c58d6e3","first_seen":"2025-08-06T05:45:00.7287Z","last_seen":"2026-05-17T09:13:33.932773Z","times_seen":4,"resource_available":false,"data":null}},"time_used":680,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":652,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/css/lib/slick.min.css","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /css/lib/slick.min.css HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 27 Feb 2022 16:11:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 377\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1280,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1280), with no line terminators","md5":"499c110c1b78a4299ed3f205b9ddd3c4","sha1":"6c71ea144c2b3dd7a8f477c41d2f5697df5d3d21","sha256":"dfe5b0c5c4ea22159419e3066ccf99534359734205a02be932d2ea67924f33fb","sha512":"674c1a2e2c3cd7e6e85e24cf21986a5329c37a078e152986098fabb9683bb3c5b6397562bef37c9dd31c6792959b0d58cf7e6fb186bb49cf407149d7e55830ce","ssdeep":"","tlshash":"192179251496115a4127e7016dd3df9a38ebf1521c3607cef7448309ce8faae1dd29eb","first_seen":"2023-05-11T15:12:37Z","last_seen":"2026-07-21T18:16:06.220474Z","times_seen":120,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/images/commons/logis-7.jpg","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:20.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /images/commons/logis-7.jpg HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/css/stylesheet.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 05:44:20 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 May 2021 07:36:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2587574\r\ndate: Wed, 06 Aug 2025 05:44:20 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2587574,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=17, height=3744, bps=218, PhotometricInterpretation=RGB, description=container operation in port series, manufacturer=Canon, model=Canon EOS 5D Mark II, orientation=upper-left, width=5616], baseline, precision 8, 1920x1080, components 3","md5":"d8afbbc65b71b3f25c3f8905e8948348","sha1":"2969da555ce78b5eacc0f5d83dbf785c8e7a6e13","sha256":"867619b4b368aa13d4ac5c624b924c56fb692752b616b00a040bf4b45f18574c","sha512":"78f6bd2b8c49b008ceb9bd524bb99e08a08a29a40424744d8cf7df66ef1d4a1d05577062c09ddde848f7b71388c00c290cddd0297f3cd78d4bafa0f4f5ddae2d","ssdeep":"24576:Zaesgh1JOzR3CAsgAANrz1SfXn6j4Wo194Cc/vr1DU3rBc58NaR:MgpOzR30JAhkKjq4CcnxGBnNm","tlshash":"c8252330951e9c25e486edb690fdc28b84ab7650cb93e62573bc4d281fa07c4ec4f5a7","first_seen":"2025-08-06T05:45:00.731311Z","last_seen":"2026-05-17T09:13:33.915349Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":1064,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:21.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 04 Dec 2024 00:00:00 GMT","end":"Sun, 28 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"5E:7A:A9:36:B1:77:7D:E9:4A:88:DF:57:72:66:9B:49:8C:C2:1B:7B","sha256":"5B:82:B2:0D:AE:78:68:58:AD:62:AD:72:F0:D2:53:96:BC:77:BA:01:A6:44:FE:40:68:2B:94:C4:F0:C0:C0:C3"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 05:44:21 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"687faa84-46dd\"\r\nexpires: Wed, 06 Aug 2025 05:49:14 GMT\r\nlast-modified: Tue, 22 Jul 2025 15:13:08 GMT\r\nx-77-nzt: EwwBuUwJGwH3BwAAAAwBuUwKCQH3AAAAAAwBJRPCNAG3AAAAAA\r\nx-77-nzt-ray: fdb54123475a54d7b5eb92681f595623\r\nx-77-cache: HIT\r\nx-77-age: 7\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18141,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18068)","md5":"b67300767490ee626178325c8efa3b14","sha1":"4378b772ab209e5280e60af15dd03414f2578f3d","sha256":"e3ccd7d38ffd01f14809ed081950d4a8c964d31fd6abb90a4433fb3574b9c8e0","sha512":"3c8acd1d71e685e71b69de130506fe13326f0908310caf3ac0bdf205cae4824c0dd0ef54eed3a7041cb37bd623308877df76973a28c8e691904e055e46fa706f","ssdeep":"384:fUx/y2k3g7xT7dWbEelfE4YYdWbE0rIcvCSI/a4GUpG:fUx/y2k3gli84YY8JeabB","tlshash":"4482a5ccb791a16543eb61b4843f710ff237692970098821ba65dae13c7898ee037f78","first_seen":"2025-05-05T10:50:11.676089Z","last_seen":"2026-07-27T14:00:09.825615Z","times_seen":9281,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":49,"dns":3,"connect":7,"send":0,"wait":7,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/fonts/css/all.min.css","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /fonts/css/all.min.css HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 19 May 2021 09:00:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12268\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":58947,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (58761)","md5":"39a8dc6a30908f9738be84d34294a151","sha1":"858f5c36db2e51ce42983213105b69376cd1bb8f","sha256":"f36a56c5cf078d2f55f0cfed66a45e187448eb23fcd6fd5b7d1b8b4f71cc5c65","sha512":"952827899bb3aa0240c939a155aaeae97e1cc48fcc5c97ea93a624930a06d64eef022b24747ea9579ecae6049e5a10fb97da70bd7b7202dd9288d93f0a025383","ssdeep":"768:qEC31IPiyXNq4/xBowbHJmkwFR/sMQyYJYX9BftF5Qzi:qEPPxXE4/XJH8dF+fy9ltk2","tlshash":"6b43fbb8e54c01c9b731c44bef81b2bc61baf73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-06-24T04:44:27Z","last_seen":"2026-07-22T17:37:21.197655Z","times_seen":67,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/revolution/js/jquery.themepunch.tools.min.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /revolution/js/jquery.themepunch.tools.min.js HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 19 May 2021 07:39:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 37078\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":110564,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (27287), with CRLF line terminators","md5":"67a9644e880e7a471d49c73bb7621932","sha1":"2ac89b145da02402ce1877c580850e08076c5109","sha256":"a1dff8b0c66227748951c4ff891f146f49c5a382ac8e3d6e3c2e9cf8aa560dc8","sha512":"1496a2aabf901c0882bee50f779eed1a215caa73bb385944f37f4acc61fa0b3b189a32312ae17d9b2013eaaa0636559a4262756cb1f6b8644341037f044ed4b2","ssdeep":"1536:tQpnayKBPfF5aknBDU0KsIu5XOKvITONqvUejr3P99cN7H98rYx5s14/gCsBMXwU:tJfFYoDU0xVqvUejbs7dCYdInBwD0aD","tlshash":"56b319ca35517022859622a5517f0643723bdcbab4098d3df548d9ed3e2cc8921bffba","first_seen":"2023-03-07T01:02:47Z","last_seen":"2026-07-27T20:42:07.947184Z","times_seen":9879,"resource_available":true,"data":null}},"time_used":1330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1329,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:31.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-goog-authuser\r\nReferer: https://safestways.com/\r\nOrigin: https://safestways.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ncross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting\r\nreport-to: {\"group\":\"clearcut-frontend-http-prod-hiqos\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/httpsserver2/clearcut-frontend-http-prod-hiqos\"}]}\r\ncontent-security-policy-report-only: script-src 'none';form-action 'none';frame-src 'none'; report-uri https://csp.withgoogle.com/csp/httpsserver2/clearcut-frontend-http-prod-hiqos\r\naccess-control-allow-origin: https://safestways.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Wed, 06 Aug 2025 05:44:31 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T01:22:25.15752Z","times_seen":17571767,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/css/lib/magnific-popup.min.css","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /css/lib/magnific-popup.min.css HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 27 Feb 2022 16:11:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1410\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5259,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5259), with no line terminators","md5":"64912a79884a20761ab19de42f85218c","sha1":"8d29cea8f84afdcaa69c0594e37263f7374dc8a6","sha256":"3d92e113ac3031b838001ddddf965d045f470ff748ff2e116b30378910eeaecb","sha512":"f84a0fc3e162c21e9e49e44aef3c08286d8c03c8b7ad5fc319aded76db501a05b26ad1bf4a49dc4f9dca1d0692e4987d30d393ddd9852f41634d8d3c02777f0b","ssdeep":"96:VuKSCO7EWP9UrJjIjZQX8ZO9d5Zkxudls5/Dm5Mk9nCWh3:VSCO7EWP9UrpIjZQMZO9d5pd+qMk9CWB","tlshash":"43b175f3a941313ac633da16d5c39f9c3227a227f663569fcf82a419c6ce89c0525384","first_seen":"2023-04-05T08:30:27Z","last_seen":"2026-07-28T00:48:42.350192Z","times_seen":5125,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:22.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Oct 2024 00:00:00 GMT","end":"Sun, 16 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"F8:69:46:5B:91:2C:2E:CA:94:48:1B:4B:A4:21:4D:B9:48:55:E2:FF","sha256":"6F:B2:38:92:36:6B:54:7A:DB:D1:6C:60:C8:1E:67:C8:67:64:D9:14:BE:4E:72:47:9B:32:12:16:2A:47:4A:09"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://safestways.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 05:44:22 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"68873fee-5db\"\r\nexpires: Mon, 28 Jul 2025 09:31:07 GMT\r\nlast-modified: Mon, 28 Jul 2025 09:16:30 GMT\r\nx-77-nzt: EwwBuUwJCgH3GAAAAAwBuUwKCQH3AAAAAAwBnJIhJwG3AAAAAA\r\nx-77-nzt-ray: e2f754206368dcbcb6eb9268a0d15302\r\nx-77-cache: HIT\r\nx-77-age: 24\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1499,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8e78e68aacc713e41f52aa07900ad287","sha1":"7820e121aa5bbe7d7008e6aff92af4d6b51065df","sha256":"b565da117e803f47fc173ed3a174bd8c0344238a68bbc80f40d77b9fff31152b","sha512":"f7f802882bd9fc155a6d9f75b02d9abbb6064d8db5e421b043e559bdf218698f27baf4b47215e0ab16657ff72bdc06b6e7ce5e3568f2586376dfbe3523736c38","ssdeep":"","tlshash":"88310713c4fd0c5317dc6225b8945641695041cbec8a3e08369cc96f2f5defa10d7bad","first_seen":"2025-07-28T09:46:38.908996Z","last_seen":"2025-08-07T03:39:22.598054Z","times_seen":285,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":25,"dns":1,"connect":7,"send":0,"wait":7,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/revolution/css/navigation.css","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /revolution/css/navigation.css HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 19 May 2021 07:39:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7687\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59601,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c1f2697c20b0058adee26466f363c26f","sha1":"e0e436c77badb27c44298dacfe0df9a78a4f530a","sha256":"88e3a0397a268761f02287fee88271186537264b6161e0d67ca7973cff676cbf","sha512":"6d245011ecbbf6b9e26c84dacd1ac8fcefa1227c399239187ccb13846f7690a3ae206b4ea1453fc88605def5b30503c70dfbc18c7f1add97f2ac6741397e937a","ssdeep":"1536:Gww1nwqr7ymlY5XYWlSDWLam+aIjU742TzJq3:VtLXt/2","tlshash":"154371aa5e936100b127c6049fc54bace33e8017e552cdaeb79e74cedf415c891ae38d","first_seen":"2025-08-06T05:45:00.736412Z","last_seen":"2026-06-19T00:32:33.805933Z","times_seen":10,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/images/commons/logis-8.jpg","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /images/commons/logis-8.jpg HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 05:44:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 May 2021 07:36:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 706857\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":706857,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=18, height=2133, bps=230, PhotometricInterpretation=RGB, description=Man working at a carboard factory, manufacturer=Canon, model=Canon EOS 5D Mark IV, orientation=upper-left, width=3200], baseline, precision 8, 992x800, components 3","md5":"9b794bf9cd6f2ff9f111cfab4131d6d0","sha1":"4404b8f4cfa915d179facf454f81b1930c2c2425","sha256":"2fba7952ae72053f9ebd2cd56983bb27a7cebbeb9d2cc69b873f1916ccf696cf","sha512":"f466f424b22c49771293ed408fbe29720f188ea2d9d61c6c39380aff28a1c1bfa1142a7fc987de9a1d58996ac9f4566ea88a3ee364db0b73fc59aa04fa429ba5","ssdeep":"12288:YADUe/xFxQscsnRNYp0t9DmS+b6LXt+IYfhwjnXonIL7FynSTLpKR9pL/SI/IAc:YA4e/X2AbVWq9gfmjXonl2lKR9pjSp","tlshash":"14e423187052ac01f99778b4e4e892eacf732ee5aca1290d379d8d18ef25cc61d613d7","first_seen":"2025-08-06T05:45:00.738022Z","last_seen":"2026-05-17T09:13:33.907206Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1099,"receive":374,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/js/lib/contact.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /js/lib/contact.js HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 19 May 2021 07:38:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3131\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12597,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"e228a896ca9bfe4158d4235d187dea63","sha1":"9176ce854e7609ee4e4de347948651a6aef48ebc","sha256":"6521d38e3fcb0947e043a6efee410bc915d17c7f9b9aff40928476aafa54b6c6","sha512":"84449ac19630d36284eb98df40d2f229c8fa3afe129b9fc5f3cb2f4768ad248b95d6c840f528403a103c41d6956402cdc48da7391da39a5e877382081a5a29c9","ssdeep":"384:cu0X3c18JqMj32ulSERXeCD7NpK+EfVidlRtWO18McTPWt3GSTuCuXu:VF9QnL","tlshash":"40423149396520020fb376f9aa9bc986f67d562a9037408074fd80e16fb0f94f7d5ee8","first_seen":"2025-08-06T05:45:00.739542Z","last_seen":"2026-06-27T15:57:28.427661Z","times_seen":16,"resource_available":true,"data":null}},"time_used":1331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.MOhKAPSS1-s.L.F4.O/am=hMA/d=0/rs=AN8SPfoSvcbOnFdaxQP_x8te6jzGQof28w/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:20.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.MOhKAPSS1-s.L.F4.O/am=hMA/d=0/rs=AN8SPfoSvcbOnFdaxQP_x8te6jzGQof28w/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 18:22:48 GMT\r\nexpires: Fri, 31 Jul 2026 18:22:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 22 May 2025 01:09:21 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 472892\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20298,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20298), with no line terminators","md5":"183cb263396f0b39789db1ae3f1e1b20","sha1":"502fcf18fa8d865213e282824ab2dfaadb9b8beb","sha256":"6a91c12a6fd1664f4d594040374fda61fe5b02fd3aee5f0c877ccbfc49488ec5","sha512":"ef280b60fa9f4bcb446d952f59a9b89442b6da6737bddc20a8fb38fcf0b4083170c09c008d7d221cf205084c8342da1f995bdd99ce907d70e8e14fc62d827acf","ssdeep":"192:nvqx/EhNINclXsfg0S0Q8CqA3ukLzSJFzvQVMZnUIfIxIRhpTpeuHjPtcmx4v78l:gM78Sr3fWJFzouRUqWQhpTpdHjPtc5G","tlshash":"bf92972047aed01967efa82364d36dff71d444db90523eeaaf5a7352cd821f231ea214","first_seen":"2025-06-11T00:07:11.687997Z","last_seen":"2026-07-27T10:36:14.980644Z","times_seen":37906,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":139,"dns":1,"connect":21,"send":0,"wait":21,"receive":0,"ssl":113},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safestways.com/js/modernizr-custom.js","fqdn":"safestways.com","domain":"safestways.com","tld":"com"},"ip":{"addr":"192.3.141.252","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:19.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.safestways.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 23:45:16 GMT","end":"Fri, 26 Sep 2025 23:45:15 GMT"},"fingerprint":{"sha1":"3B:CE:4C:70:13:DD:18:27:D8:13:B0:E2:4E:A1:82:4C:D9:2D:2A:A3","sha256":"29:88:BB:AA:B9:DA:4E:D3:27:76:5F:B3:84:5B:8B:95:1B:C8:B9:95:ED:DB:9E:6C:C9:B1:2C:2A:A5:C7:27:B2"}}},"request":{"raw":"GET /js/modernizr-custom.js HTTP/1.1\r\nHost: safestways.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safestways.com/home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 05:44:19 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 19 May 2021 07:38:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 705\r\ndate: Wed, 06 Aug 2025 05:44:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1522,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1428)","md5":"287c849a2e81faf04e0bf95e64cbf4d0","sha1":"01346384aff67fa624850f42ee001653c6eeb06e","sha256":"078593a61d0455f3cb2931cb5d98459bc9f1c75ab4d9398265263ce550204cef","sha512":"210bbfda2b281e608ff44f2f9ed05beae0d7e230aab309d513fd45cb51d1b7f435610fbf9e9da25bc7d227d356b3f1b883f508a524d37af62161950077bce8d5","ssdeep":"","tlshash":"7b31421656a1e670828374d1252f180c4c7b6e886c56cc8df538b39d5b3c2da0bd6e29","first_seen":"2025-06-25T02:13:01.695995Z","last_seen":"2026-06-27T15:57:28.440584Z","times_seen":19,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"safestways.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safestways.com/home","date":"2025-08-06T05:44:21.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.MOhKAPSS1-s.L.F4.O/am=hMA/d=0/rs=AN8SPfoSvcbOnFdaxQP_x8te6jzGQof28w/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 04 Aug 2025 21:10:00 GMT\r\nexpires: Tue, 04 Aug 2026 21:10:00 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 117261\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-07-28T01:09:44.607619Z","times_seen":72296,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}