{"report_id":"757d90d0-e9f7-430f-8ef1-5ab3f7d45cc7","version":0,"status":"done","tags":[],"date":"2026-09-29T16:10:49Z","url":{"schema":"https","addr":"booking.safeid.icu/196188778","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"booking.safeid.icu/196188778","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"title":"Booking.com | Kortbekreftelse Påkrevd","dom":{"size":39803,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1677)","md5":"fa8af45f4b74781eb315be29432f22a8","sha1":"2e896b70d36c3a8ca0d8e4e26c334fcd2dfdc48f","sha256":"4850908f65345a051718932aa63d529e7f8e3c1a1576996d1d105f58aa372189","sha512":"c1ba47a1626842985820aad62dbcb24fd1e16e9b430859d6e7b4518552419c3ac1914b5678ac15ea6081b07ad0bdeb836dd6ecde5206883bbaebb63b6d297ba5","ssdeep":"768:5BuO2fMhErZYzTpEtTHFnckdMm6b79R1oG:5yr8+9HFnckdMm6b7n1d","tlshash":"670374214db6693f2303859867d54f4b2b54d203ce6699c07bcc97e9afd7d80ce1b268","dom_hash":"domhash5c0df134ad0f516a6963f05e3e32407e","first_seen":"2026-09-29T16:10:55.528307Z","last_seen":"2026-09-29T16:10:55.528307Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"booking.safeid.icu/196188778","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-03T16:10:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-09-27T23:17:57.5349Z","alert_count":0,"request_count":5,"received_data":12661,"sent_data":2984,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cf2.bstatic.com","ip":{"addr":"3.174.2.31","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2009-04-24","domain_rank":582695,"first_seen":"2023-06-22T19:28:22Z","last_seen":"2026-09-04T07:54:44.972936Z","alert_count":0,"request_count":1,"received_data":1821,"sent_data":592,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"booking.safeid.icu","ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-27","domain_rank":0,"first_seen":"2026-09-29T16:10:50.945612Z","last_seen":"2026-09-29T16:10:50.945612Z","alert_count":147,"request_count":49,"received_data":451934,"sent_data":27990,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"raw.githubusercontent.com","ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2014-02-06","domain_rank":22021,"first_seen":"2014-03-01T07:08:08Z","last_seen":"2026-09-25T15:01:19.325666Z","alert_count":0,"request_count":5,"received_data":15082,"sent_data":3018,"comment":"","tags":null,"fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"booking.safeid.icu/js/support.js?v=56e0dbf3","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef23dad2390e2252abb3087685bd56b5","sha1":"51383cc2fe3d79d50836f70eed2d6055edf1b719","sha256":"fd436bbe86a0c050f454201c0d223c89e59e151aea43c9ebfe41794861fd47fd","sha512":"5cc20eefc622fac4de9d182439044825fd6979c3b556b665f4fa63f891bd1079907b80e369abe07745faf8e66d101ea82a211148db81fd33b8e6c240bbac7bfa","ssdeep":"1536:cV0f7a1J3INdfsGrwrUt6nWsbXudym/vvB1xyGD:zf7a19I2U0nWsbXu0m/vvB1xyGD","tlshash":"e983b7a0ea50c3bd7243ce636fbdd4c8d3140747b5c09b869688ed46a78971bc6ec9b4","size":84329,"data":"","first_seen":"2026-09-29T16:10:55.535989Z","last_seen":"2026-09-29T16:10:55.535989Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/js/payment-modal.js?v=8f3c471b","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c1d288fc070c04524fdefcebffe85e7e","sha1":"0ffe65d77067d45b0e7507baa9548a054eba35a2","sha256":"8f3c471b173b1cf71cff55084f73f9b92681575d76852fca5a82c592a79376d8","sha512":"2ab9a817d15023e49b317d24f6ae92ea56912474d20b4b664eb4758db9b5c4ec0214ca67d5341e873c3985d81f364e7f497888bd0b9aecdecffa809d1a78eed2","ssdeep":"1536:iEuWqAjNCxMM4L7t0m74ccNStwqE9IJBjVhhW:iEujAjNCxMM4L7tX743NSawJBjFW","tlshash":"dfb3c9817fa069ba2ba78ff7723b71d9f0a90c5a7c00154bc405bc512fe1b66dab1874","size":108094,"data":"","first_seen":"2026-09-29T16:10:55.540539Z","last_seen":"2026-09-29T16:10:55.540539Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"booking.safeid.icu/api/support/getMessages","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:34.849Z","timestamp":1790698234849,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booking.safeid.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1790698220486.6506\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wpbknZ%2FOQUufSxkomAXMQSe0i%2BdrvHRUPuAgvKouziIzGej2TRThbDEqEI%2BM7EGzcGCR1L44WmVC4mTtr7fkxpuWY3d3uLWi0WVlb9yCVLhJb%2BQWDVTiTkDJ%2BTkst7G4QUEjxGc%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c423fdcbbb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":859,"size_decoded":1150,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7258b7795a56b0fb2579922707a5565c","sha1":"05c75fa3357de556cd1fd14c3f39181ddc5c30c1","sha256":"b4217fa75664166a1f8fbf10356ea61889de9fd1c33aa993b8d12684ad3d3750","sha512":"8bbec0f7cc684e1b3e1fb1355a810a6b330f3955011679332c4e655e2c144d7bdc73aa416f8b5a82ef9b70eedfc6aa483bb10fdf3c7017334e77b72f22adbf80","ssdeep":"","tlshash":"52112301ed16aabf52ea1318b2027ddb516f942dc0a4599baa48ca1f18839f8631e107","first_seen":"2026-09-29T16:10:55.52979Z","last_seen":"2026-09-29T16:10:55.52979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/support/getMessages","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:44.950Z","timestamp":1790698244950,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booking.safeid.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1790698220486.6506\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kazXKx1IVyAn4uHo6K6Q47GFdn3lZUuCN82IrGKvOPFfBT%2FDQFKrn1B%2BSJJWCf67X0vzE2RCm2Nzw4Wovb4YZsT%2FUlDw43TMQhKIcThjEtov%2BP3BQfPbMgtxSdJniA82jlaEeCc%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c427efd08b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":859,"size_decoded":1148,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7258b7795a56b0fb2579922707a5565c","sha1":"05c75fa3357de556cd1fd14c3f39181ddc5c30c1","sha256":"b4217fa75664166a1f8fbf10356ea61889de9fd1c33aa993b8d12684ad3d3750","sha512":"8bbec0f7cc684e1b3e1fb1355a810a6b330f3955011679332c4e655e2c144d7bdc73aa416f8b5a82ef9b70eedfc6aa483bb10fdf3c7017334e77b72f22adbf80","ssdeep":"","tlshash":"52112301ed16aabf52ea1318b2027ddb516f942dc0a4599baa48ca1f18839f8631e107","first_seen":"2026-09-29T16:10:55.52979Z","last_seen":"2026-09-29T16:10:55.52979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/support/getMessages","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:46.949Z","timestamp":1790698246949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booking.safeid.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1790698220486.6506\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:47 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lNPWUpFHaUylc4DjJZPOki2wG7ie0CXWVr52D2okLO1HYoV6ZTChU0zIkHKlWrwVKmYRMFeux86uZ4k6x7HFLhks5EhFYny1jkbXPLg7w0JzFGkOnb%2F4XWoahfNS0nnpMKrb798%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c428b7e6bb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":859,"size_decoded":1142,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7258b7795a56b0fb2579922707a5565c","sha1":"05c75fa3357de556cd1fd14c3f39181ddc5c30c1","sha256":"b4217fa75664166a1f8fbf10356ea61889de9fd1c33aa993b8d12684ad3d3750","sha512":"8bbec0f7cc684e1b3e1fb1355a810a6b330f3955011679332c4e655e2c144d7bdc73aa416f8b5a82ef9b70eedfc6aa483bb10fdf3c7017334e77b72f22adbf80","ssdeep":"","tlshash":"52112301ed16aabf52ea1318b2027ddb516f942dc0a4599baa48ca1f18839f8631e107","first_seen":"2026-09-29T16:10:55.52979Z","last_seen":"2026-09-29T16:10:55.52979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/aaronfagan/svg-credit-card-payment-icons/main/logo/amex.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:21.377Z","timestamp":1790698221377,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /aaronfagan/svg-credit-card-payment-icons/main/logo/amex.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.safeid.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"709daa89345a1d3bb439f89ec8127634e1a8cfb3bde80204cfa01f7719cbd35f\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 5CF0:158C33:A981:1655C:6ABAE752\r\nx-github-edge-region: swedencentral\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Tue, 29 Sep 2026 16:10:21 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270025-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1790698222.658965,VS0,VE149\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: a3e35040717ab559f28b096b938ebbe34c1079b0\r\nexpires: Tue, 29 Sep 2026 16:15:21 GMT\r\nsource-age: 0\r\ncontent-length: 2455\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4879,"size_decoded":3393,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23cd5a2193b164182c1b386e47a3a042","sha1":"1ae6cf9651216301a1e9db31bc2f6455bacf60bb","sha256":"c9e69fc83a307407c427b0dbb759aeac0f801302aa093b283bb2331227550408","sha512":"2439a50c82d40768796dcb5aca56a8d2831ef3282a4a239741c2d8201321911b47c1b02be16fc7d13b10932b918966c4e64850e962820ff5483a2490b651e37f","ssdeep":"96:budZ9O8fybL5ZB/SisbTWfzSHfb/Nk7SW89kqalSZ9WcNaL:budZ9OTLfB6isvWWHTlk7Y3Z9Wc0L","tlshash":"1aa1a5c9efb462f82c414f5eef2418de39af24b53c71de54c22cef9594e39989a19840","first_seen":"2025-09-05T22:46:55.846441Z","last_seen":"2026-09-29T16:10:55.530868Z","times_seen":218,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":-1,"dns":10,"connect":11,"send":0,"wait":162,"receive":0,"ssl":245},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/support/getMessages","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:31.676Z","timestamp":1790698231676,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booking.safeid.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1790698220486.6506\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:31 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BALbZar6D7RXtYM%2FzxrKzPvmVkMe21TDwuN7vKXyWXUD1LHEF1xizAxgiCInlP7LScIsbzH9gG9niok%2BMRYcrkb6f2fmgnERDyHIOK1FewCHVtqwdUNcSPK%2BeLk6QGhXwIV%2BnLM%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c422c0a41b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":859,"size_decoded":1150,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7258b7795a56b0fb2579922707a5565c","sha1":"05c75fa3357de556cd1fd14c3f39181ddc5c30c1","sha256":"b4217fa75664166a1f8fbf10356ea61889de9fd1c33aa993b8d12684ad3d3750","sha512":"8bbec0f7cc684e1b3e1fb1355a810a6b330f3955011679332c4e655e2c144d7bdc73aa416f8b5a82ef9b70eedfc6aa483bb10fdf3c7017334e77b72f22adbf80","ssdeep":"","tlshash":"52112301ed16aabf52ea1318b2027ddb516f942dc0a4599baa48ca1f18839f8631e107","first_seen":"2026-09-29T16:10:55.52979Z","last_seen":"2026-09-29T16:10:55.52979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/196188778","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-29T16:10:19.807Z","timestamp":1790698219807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"GET /196188778 HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:20 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BXmQpRfoUQcPsnJT0l4jYUvNUdd%2BSaMZD%2FFxtsvYKtkCZiTEEFzCwLpUzX3I7WHu0v5znsjMeOFQOlCpBNCRDGMq2sJAbdnmd2nB9gB3PsBIlGrOtH7WlURba8Koc5wo8NnaT90%3D\"}]}\r\npriority: u=0,i\r\nset-cookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92; Max-Age=31536000; Domain=.safeid.icu; Path=/; HttpOnly; SameSite=Lax\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a42c41e2aa74b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92","quoted":false,"path":"/","domain":".safeid.icu","max_age":31536000,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92; Max-Age=31536000; Domain=.safeid.icu; Path=/; HttpOnly; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39660,"size_decoded":9782,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1677)","md5":"c3fc61ab4d6d7bbc499a6d8e3b817046","sha1":"00808a413d5bc5e1b41edc3485efb474dcc5d17e","sha256":"7b8d859501e1cd88e74fa4adbb211428bf0e7f31394bb282c720bdfe479809b9","sha512":"38fbeab0d4ced1f7f959d905430f64f4a79673441005457b83d9444426ce07b0dd71e23cfa236321d19f60d10a456d1cd06039242a6eb950b64451cb625903b0","ssdeep":"768:9ruOWfMhTrZYzTpEtTHFnckdbm6b79R1o4:9Pr8+9HFnckdbm6b7n1Z","tlshash":"e40373214db65a3f2303859867d54f4b2b54e203ce6699c07bcc97e9afd7d80ce1b268","first_seen":"2026-09-29T16:10:55.531586Z","last_seen":"2026-09-29T16:10:55.531586Z","times_seen":1,"resource_available":true,"data":null}},"time_used":964,"timings":{"blocked":-1,"dns":96,"connect":36,"send":0,"wait":832,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/css/payment-modal.css?v=1789835100","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:21.575Z","timestamp":1790698221575,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"GET /css/payment-modal.css?v=1789835100 HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.safeid.icu/196188778\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:21 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wk0QZMyRlVqMYViyNCMpgVUA6B3tqd4heOmbYYgZ%2BgVOLtpbC8%2FBZnZ6FwJYXfeGgC6Kp1wmWi8lMq4Myd2i62Q9xKnax43WbY7Dv4C1TYyIpouOZn94arUbA%2FSoFBGFD7mURNM%3D\"}]}\r\npriority: u=2,i=?0\r\ncache-control: no-store, no-cache, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 26 Sep 2026 09:14:32 GMT\r\netag: W/\"93ea-1a0dcfeac47\"\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a42c41eceb5fb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37866,"size_decoded":8708,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"3e0bf768866432e0deec2ce9e36c0c77","sha1":"98a37fb42553bd36916f3ac5adcf45acf47adb3e","sha256":"dc33a04abc470110a98c7612dd800b4d9db5460b75fcea7db25f37cc5bfc625b","sha512":"c5a02e0abaea5f5576d9205d567758fa8b20ff6548f21c284f81e3b62dff57331b6c3cb5d648e6077346a66a666061d66e3cac3c6ea3db7fdf74c7192708cde6","ssdeep":"768:7qVGQxfL4GdZMHm9HVCCIRWiUjLRd5Dqs1JG:7qVLEGdKm91fjLRd5Dqs7G","tlshash":"0a0372d166ab0618701fe93a21cfdb99636cd042a90adc7a7bd0312cdfcb7cd9661748","first_seen":"2026-09-29T16:10:55.533171Z","last_seen":"2026-09-29T16:10:55.533171Z","times_seen":1,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/support/getMessages","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:28.676Z","timestamp":1790698228676,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booking.safeid.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1790698220486.6506\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:28 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AHRr%2FLIEzbn9IaKNNFpRoF8BnlotB0WbKXct5S%2BxokC%2F%2Fn7MeRA9kz5rNmHS4E2WHwrn%2FispDlySSiZD0EgaC9ua0bu%2BqU5yBV8UhCc9NcP45izr5BXcwL3Ul5liqMVpWSryHnY%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c42194855b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":859,"size_decoded":1152,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7258b7795a56b0fb2579922707a5565c","sha1":"05c75fa3357de556cd1fd14c3f39181ddc5c30c1","sha256":"b4217fa75664166a1f8fbf10356ea61889de9fd1c33aa993b8d12684ad3d3750","sha512":"8bbec0f7cc684e1b3e1fb1355a810a6b330f3955011679332c4e655e2c144d7bdc73aa416f8b5a82ef9b70eedfc6aa483bb10fdf3c7017334e77b72f22adbf80","ssdeep":"","tlshash":"52112301ed16aabf52ea1318b2027ddb516f942dc0a4599baa48ca1f18839f8631e107","first_seen":"2026-09-29T16:10:55.52979Z","last_seen":"2026-09-29T16:10:55.52979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/support/getMessages","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:29.676Z","timestamp":1790698229676,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booking.safeid.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1790698220486.6506\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PsGGCrk1sh3zg4orZo91uKk79Aq4eDdO%2FgEKsLD%2FEaZcK83x9YMRgswJcfpyu%2Fu2a%2Fz%2FmDsnSzXzCjWc5YtiFCDANGn%2Bv8FLQ3buX7qbUTXejVDd0P7kKnciDtiL%2BkefXPd7Rnc%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c421f892ab521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":859,"size_decoded":1154,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7258b7795a56b0fb2579922707a5565c","sha1":"05c75fa3357de556cd1fd14c3f39181ddc5c30c1","sha256":"b4217fa75664166a1f8fbf10356ea61889de9fd1c33aa993b8d12684ad3d3750","sha512":"8bbec0f7cc684e1b3e1fb1355a810a6b330f3955011679332c4e655e2c144d7bdc73aa416f8b5a82ef9b70eedfc6aa483bb10fdf3c7017334e77b72f22adbf80","ssdeep":"","tlshash":"52112301ed16aabf52ea1318b2027ddb516f942dc0a4599baa48ca1f18839f8631e107","first_seen":"2026-09-29T16:10:55.52979Z","last_seen":"2026-09-29T16:10:55.52979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/support/getMessages","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:36.850Z","timestamp":1790698236850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booking.safeid.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1790698220486.6506\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:36 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SX5Guxq97ZxuyHubdtqAbEflEujTvfyXU525A0F6Evs1GiT2HFzXdhv1HQ%2BMq12kHZfwEf2Q1biFWcZg1D7d0PXO32I6lvZJP5s3MgZ59Jx%2Bws8Afns0W1Qn9UIBeDUmr5stUZA%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c424c5e2eb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":859,"size_decoded":1144,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7258b7795a56b0fb2579922707a5565c","sha1":"05c75fa3357de556cd1fd14c3f39181ddc5c30c1","sha256":"b4217fa75664166a1f8fbf10356ea61889de9fd1c33aa993b8d12684ad3d3750","sha512":"8bbec0f7cc684e1b3e1fb1355a810a6b330f3955011679332c4e655e2c144d7bdc73aa416f8b5a82ef9b70eedfc6aa483bb10fdf3c7017334e77b72f22adbf80","ssdeep":"","tlshash":"52112301ed16aabf52ea1318b2027ddb516f942dc0a4599baa48ca1f18839f8631e107","first_seen":"2026-09-29T16:10:55.52979Z","last_seen":"2026-09-29T16:10:55.52979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aaronfagan/svg-credit-card-payment-icons@main/logo/amex.svg","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:21.365Z","timestamp":1790698221365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /gh/aaronfagan/svg-credit-card-payment-icons@main/logo/amex.svg HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.safeid.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 2356\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/svg+xml\r\nx-jsd-version: main\r\nx-jsd-version-type: branch\r\netag: W/\"130f-GubPllEhYwGh6dsxvC9kVbrPYLs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 31211\r\ndate: Tue, 29 Sep 2026 16:10:21 GMT\r\nx-served-by: cache-fra-eddf8230211-FRA, cache-bma-essb1270044-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4879,"size_decoded":3085,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23cd5a2193b164182c1b386e47a3a042","sha1":"1ae6cf9651216301a1e9db31bc2f6455bacf60bb","sha256":"c9e69fc83a307407c427b0dbb759aeac0f801302aa093b283bb2331227550408","sha512":"2439a50c82d40768796dcb5aca56a8d2831ef3282a4a239741c2d8201321911b47c1b02be16fc7d13b10932b918966c4e64850e962820ff5483a2490b651e37f","ssdeep":"96:budZ9O8fybL5ZB/SisbTWfzSHfb/Nk7SW89kqalSZ9WcNaL:budZ9OTLfB6isvWWHTlk7Y3Z9Wc0L","tlshash":"1aa1a5c9efb462f82c414f5eef2418de39af24b53c71de54c22cef9594e39989a19840","first_seen":"2025-09-05T22:46:55.846441Z","last_seen":"2026-09-29T16:10:55.530868Z","times_seen":218,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":6,"connect":10,"send":0,"wait":12,"receive":0,"ssl":246},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/support/getMessages","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:23.616Z","timestamp":1790698223616,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booking.safeid.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1790698220486.6506\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:23 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5w2713j8j7RjXE%2Fcr3Vi%2BKMuFF2vJvWsWklNXm6WFPC6R%2Bvu7klWbLqHo%2BoFg7%2F3d%2F%2FgXRVB5RrIuj1U72pUnljcNRqHiidLD%2FlBjzSyeVYLIu4u%2BjEREQL7jcxsQ7NpzJw7uqs%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c41f9acc5b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":859,"size_decoded":1158,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7258b7795a56b0fb2579922707a5565c","sha1":"05c75fa3357de556cd1fd14c3f39181ddc5c30c1","sha256":"b4217fa75664166a1f8fbf10356ea61889de9fd1c33aa993b8d12684ad3d3750","sha512":"8bbec0f7cc684e1b3e1fb1355a810a6b330f3955011679332c4e655e2c144d7bdc73aa416f8b5a82ef9b70eedfc6aa483bb10fdf3c7017334e77b72f22adbf80","ssdeep":"","tlshash":"52112301ed16aabf52ea1318b2027ddb516f942dc0a4599baa48ca1f18839f8631e107","first_seen":"2026-09-29T16:10:55.52979Z","last_seen":"2026-09-29T16:10:55.52979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/support/getMessages","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:38.850Z","timestamp":1790698238850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booking.safeid.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1790698220486.6506\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:38 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VZxrKMX7W5g%2F6LjU8hSchaKbjeaXCPv33cji9CPJnwUnwr4g9C3ypYrlWeukLJXjbQ5PSGApsiVJ9asc3whQFkhQzvs%2BQn%2FFlquh%2BRs%2BWdP6AG6pCie3JjmIk8GODQt5OcHuugs%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c4258d85bb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":859,"size_decoded":1150,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7258b7795a56b0fb2579922707a5565c","sha1":"05c75fa3357de556cd1fd14c3f39181ddc5c30c1","sha256":"b4217fa75664166a1f8fbf10356ea61889de9fd1c33aa993b8d12684ad3d3750","sha512":"8bbec0f7cc684e1b3e1fb1355a810a6b330f3955011679332c4e655e2c144d7bdc73aa416f8b5a82ef9b70eedfc6aa483bb10fdf3c7017334e77b72f22adbf80","ssdeep":"","tlshash":"52112301ed16aabf52ea1318b2027ddb516f942dc0a4599baa48ca1f18839f8631e107","first_seen":"2026-09-29T16:10:55.52979Z","last_seen":"2026-09-29T16:10:55.52979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/poll/196188778","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:39.619Z","timestamp":1790698239619,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"GET /api/poll/196188778 HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:39 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vVsDzmpykZ83KvZlhMwM5rqDOLZ6AjokaEJzxR%2Bw6p1HTt6Ng7n9a99vrQAXtQohQ%2FsrZw5WzK8HyyXIyOy46sWXLCqH2%2B7iP0vgq69HI8FdQ5S4Nw3TwK5sjIZ0Hax66SMCKvk%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c425da8cdb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":664,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-29T16:10:55.535271Z","times_seen":28,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/js/support.js?v=56e0dbf3","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:21.349Z","timestamp":1790698221349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"GET /js/support.js?v=56e0dbf3 HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.safeid.icu/196188778\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:21 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jKTRArVeQUE5uZmOLjyQ9Ft58jD%2B%2F5yQh8OHGwSANCbAG3RsWyHf4H3G4f6VRXWbsXh17rocJI04WWYHMXWtPKGgUwPFizcDGdQSd2blhOv501yroTbM1PdYPiBsSo9mv%2Be0XqY%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 29 Sep 2026 13:27:10 GMT\r\netag: W/\"1497f-1a0ed5909e8\"\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a42c41eb7b4bb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84351,"size_decoded":23163,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65514), with no line terminators","md5":"ef23dad2390e2252abb3087685bd56b5","sha1":"51383cc2fe3d79d50836f70eed2d6055edf1b719","sha256":"fd436bbe86a0c050f454201c0d223c89e59e151aea43c9ebfe41794861fd47fd","sha512":"5cc20eefc622fac4de9d182439044825fd6979c3b556b665f4fa63f891bd1079907b80e369abe07745faf8e66d101ea82a211148db81fd33b8e6c240bbac7bfa","ssdeep":"1536:cV0f7a1J3INdfsGrwrUt6nWsbXudym/vvB1xyGD:zf7a19I2U0nWsbXu0m/vvB1xyGD","tlshash":"e983b7a0ea50c3bd7243ce636fbdd4c8d3140747b5c09b869688ed46a78971bc6ec9b4","first_seen":"2026-09-29T16:10:55.535989Z","last_seen":"2026-09-29T16:10:55.535989Z","times_seen":1,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/support/getMessages","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:22.615Z","timestamp":1790698222615,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booking.safeid.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1790698220486.6506\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:22 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UJoq0NBWZY0eAoburHmX%2F2VEdN5L1Wiy5qTW3NY%2BForxfSxj49lzbgIi%2Fd0jA%2B9m8UAH1Q6frnDRjqK%2BKG%2FEgzXXAHc%2BPLCRiZCRnJI4xo0mtpD6H0u%2FEsIlq%2F9Mr4mEtktbcxc%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c41f36c29b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":859,"size_decoded":1158,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7258b7795a56b0fb2579922707a5565c","sha1":"05c75fa3357de556cd1fd14c3f39181ddc5c30c1","sha256":"b4217fa75664166a1f8fbf10356ea61889de9fd1c33aa993b8d12684ad3d3750","sha512":"8bbec0f7cc684e1b3e1fb1355a810a6b330f3955011679332c4e655e2c144d7bdc73aa416f8b5a82ef9b70eedfc6aa483bb10fdf3c7017334e77b72f22adbf80","ssdeep":"","tlshash":"52112301ed16aabf52ea1318b2027ddb516f942dc0a4599baa48ca1f18839f8631e107","first_seen":"2026-09-29T16:10:55.52979Z","last_seen":"2026-09-29T16:10:55.52979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":359,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/support/getMessages","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:41.851Z","timestamp":1790698241851,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booking.safeid.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1790698220486.6506\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:41 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aYOIbAxoZx3g3%2Fyin%2FPbuH2yaLIfd5SUaI9QTOmZi47vmhcHq7y%2F4H61jM6%2F%2BEeVzZlVVa18ewQyaVaYFMctHKuWI0OG1jm2C7b1Z2L1bzjguUNR5D%2BimRNR4p14er6VtrL1rlA%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c426b9b0eb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":859,"size_decoded":1152,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7258b7795a56b0fb2579922707a5565c","sha1":"05c75fa3357de556cd1fd14c3f39181ddc5c30c1","sha256":"b4217fa75664166a1f8fbf10356ea61889de9fd1c33aa993b8d12684ad3d3750","sha512":"8bbec0f7cc684e1b3e1fb1355a810a6b330f3955011679332c4e655e2c144d7bdc73aa416f8b5a82ef9b70eedfc6aa483bb10fdf3c7017334e77b72f22adbf80","ssdeep":"","tlshash":"52112301ed16aabf52ea1318b2027ddb516f942dc0a4599baa48ca1f18839f8631e107","first_seen":"2026-09-29T16:10:55.52979Z","last_seen":"2026-09-29T16:10:55.52979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/support/getMessages","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:32.748Z","timestamp":1790698232748,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booking.safeid.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1790698220486.6506\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EDE3EfwWyAJa%2FOLfQr17xtUi3qOhK%2Fnrc6wmhYdFlW9iDTBQ2hVDq3vBc8tS59U8xXN4GRA%2BS1U90bKNXTrkCJcfIuwNEe76DbaksLR5bYWBsc20JmnFdgP4AOiTbRI%2FDSWsxbg%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c4232bb21b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":859,"size_decoded":1148,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7258b7795a56b0fb2579922707a5565c","sha1":"05c75fa3357de556cd1fd14c3f39181ddc5c30c1","sha256":"b4217fa75664166a1f8fbf10356ea61889de9fd1c33aa993b8d12684ad3d3750","sha512":"8bbec0f7cc684e1b3e1fb1355a810a6b330f3955011679332c4e655e2c144d7bdc73aa416f8b5a82ef9b70eedfc6aa483bb10fdf3c7017334e77b72f22adbf80","ssdeep":"","tlshash":"52112301ed16aabf52ea1318b2027ddb516f942dc0a4599baa48ca1f18839f8631e107","first_seen":"2026-09-29T16:10:55.52979Z","last_seen":"2026-09-29T16:10:55.52979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aaronfagan/svg-credit-card-payment-icons@main/logo/maestro.svg","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:21.371Z","timestamp":1790698221371,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /gh/aaronfagan/svg-credit-card-payment-icons@main/logo/maestro.svg HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.safeid.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 698\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/svg+xml\r\nx-jsd-version: main\r\nx-jsd-version-type: branch\r\netag: W/\"58a-OYiUEwQYs8ezDjL4718Zlx4+JJM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 16787\r\ndate: Tue, 29 Sep 2026 16:10:21 GMT\r\nx-served-by: cache-fra-etou8220106-FRA, cache-bma-essb1270044-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1418,"size_decoded":1425,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5a44ff01b20aa7692ee7e4579dcd478f","sha1":"398894130418b3c7b30e32f8ef5f19971e3e2493","sha256":"eea18aabfd772d504260fdced1e4ed10e36483265239094c9e8abccaf0feafb1","sha512":"b7a4fa7daa06821c375201057c9baefe60b3f9522a8bf0c49621b26c1114eb2bed75682f4776eb8c739175057d1e367284b87d8d947d1dbf2b5004ba4de3a297","ssdeep":"","tlshash":"742122ec276488c04844cbe2bf3a1acd0ddfc5d32cd5cc59e51c5b0a658463a9cd1ae7","first_seen":"2026-02-01T07:53:46.692926Z","last_seen":"2026-09-29T16:10:55.537645Z","times_seen":216,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":12,"receive":0,"ssl":243},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/aaronfagan/svg-credit-card-payment-icons/main/logo/mastercard.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:21.375Z","timestamp":1790698221375,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /aaronfagan/svg-credit-card-payment-icons/main/logo/mastercard.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.safeid.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"71db7e3e6cb790c798ee53e59438f4909759bba7f1b675f343c51259aba181ff\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: FABE:713CA:414C9:73398:6AB41AE2\r\nx-github-edge-region: swedencentral\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Tue, 29 Sep 2026 16:10:21 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270025-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1790698222.653870,VS0,VE144\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 4512a202f195cf9129e3532c21f5681dd0a760f8\r\nexpires: Tue, 29 Sep 2026 16:15:21 GMT\r\nsource-age: 0\r\ncontent-length: 401\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":813,"size_decoded":1338,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"05c5498a6ca3ca61f6452d7d88843e35","sha1":"6a90b8f4820427c8d1fd773e7d3ba22abd061445","sha256":"1c8f56fb410ec06e8467423cec0fb9fe54d6b18eba703591548d3159e744496b","sha512":"865d660fce4df17306d34901ca420e7e8430561a0a85840b2e2df7bd0a00a0cd14c210ad5189ee91008041d25051cbdaea0469b39900d104759823f52e56b96f","ssdeep":"","tlshash":"3b0189e5a7988451c9e503af6f3638804e1bd0a40189923ddf262f17658195f6d99ec1","first_seen":"2025-06-23T21:13:45.862706Z","last_seen":"2026-09-29T16:10:55.538398Z","times_seen":251,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":12,"connect":9,"send":0,"wait":155,"receive":0,"ssl":246},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/poll/196188778?ci=%7B%22userAgent%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22language%22%3A%22en-US%22%2C%22platform%22%3A%22Linux%20x86_64%22%2C%22screen%22%3A%7B%22width%22%3A1280%2C%22height%22%3A1024%7D%2C%22window%22%3A%7B%22width%22%3A1280%2C%22height%22%3A1024%7D%2C%22deviceMemory%22%3Anull%2C%22hardwareConcurrency%22%3A8%2C%22gpu%22%3A%22llvmpipe%2C%20or%20similar%22%2C%22dpr%22%3A1%2C%22timezone%22%3A%22UTC%22%2C%22connection%22%3A%22%22%2C%22theme%22%3A%22light%22%7D","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:21.557Z","timestamp":1790698221557,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"GET /api/poll/196188778?ci=%7B%22userAgent%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22language%22%3A%22en-US%22%2C%22platform%22%3A%22Linux%20x86_64%22%2C%22screen%22%3A%7B%22width%22%3A1280%2C%22height%22%3A1024%7D%2C%22window%22%3A%7B%22width%22%3A1280%2C%22height%22%3A1024%7D%2C%22deviceMemory%22%3Anull%2C%22hardwareConcurrency%22%3A8%2C%22gpu%22%3A%22llvmpipe%2C%20or%20similar%22%2C%22dpr%22%3A1%2C%22timezone%22%3A%22UTC%22%2C%22connection%22%3A%22%22%2C%22theme%22%3A%22light%22%7D HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:21 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8CsrBaWEUJOqz7QMVgvYQx4csnb%2BGZvYS5btBwPkZkSrcvxerRRE7AJT%2BWbSmK635iT4TvLRWXvQaZV9bKpsu0tqYBjzY%2BFQfvBGVxobls0Y3epdEiWNYeiQ7DrnZiDlywHvEVQ%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c41eccb5cb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":664,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-29T16:10:55.535271Z","times_seen":28,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/poll/196188778","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:42.619Z","timestamp":1790698242619,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"GET /api/poll/196188778 HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:42 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8s%2Butx5%2FpXyA2TuaoOmrw%2F%2F%2FN1X0TtcORhfsFF%2BKuKqMqwoaVgT8itzvYKn%2F3%2FkjfWXq8GkWLKH9f7WSFjbO7%2BluWT7yoMn9bhUBko4V85xhw7D6HcimIcesbQ2ZgSzh2Y8eK30%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c42706b97b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":676,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-29T16:10:55.535271Z","times_seen":28,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/aaronfagan/svg-credit-card-payment-icons/main/logo/discover.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:21.379Z","timestamp":1790698221379,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /aaronfagan/svg-credit-card-payment-icons/main/logo/discover.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.safeid.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"a898221ac2c9b26d70e44e28b377e6c8e225ec809b34f4fc7aba1f6201e446d7\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 693E:141A76:46EDD:7CAA8:6AB41D1F\r\nx-github-edge-region: swedencentral\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Tue, 29 Sep 2026 16:10:21 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270025-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1790698222.653840,VS0,VE168\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 6f729f2da8cec77d94ea381a8122f8a1fdda3e21\r\nexpires: Tue, 29 Sep 2026 16:15:21 GMT\r\nsource-age: 0\r\ncontent-length: 1105\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2078,"size_decoded":2044,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"71dfc3b50c775ba7c65e51141f4bbb48","sha1":"82e6ca5d19b86e4bb2bc659395f9bf61f0f08ce4","sha256":"8ef8d5002bc7364c2468f24156a6cb5bd9321a4461f4fda5de5aa21cfc9a13ca","sha512":"c7e20a645942511d895a273993ab5a6fd168cfd8e46f9b547f5fb57c70d962301c4d6fcdea228c51c00c98c20946b3e08f2ce439cde56760b0a8b82f87f1bab3","ssdeep":"","tlshash":"8a4173e4efb174fdc8c96398db709c5831b734b87425ca0801ae9bd89981a0c8fadcd0","first_seen":"2025-11-30T04:12:51.981515Z","last_seen":"2026-09-29T16:10:55.539109Z","times_seen":213,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":8,"connect":11,"send":0,"wait":180,"receive":0,"ssl":242},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/poll/196188778","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:23.057Z","timestamp":1790698223057,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"GET /api/poll/196188778 HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:23 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r7qqm92EVLtxqiWr5r%2FWdggAp6HR3uWiZ4E9STvadCGz7xWFulyKuGwCsIYAUr65gRpfX3Wai0IifrwjBDtF9IIcHWITtoDpZrt8u29lJbQQSv6HwqEw9fQnWC9lMUMPK46IUrE%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c41f62c6cb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":660,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-29T16:10:55.535271Z","times_seen":28,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":124,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/poll/196188778","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:35.092Z","timestamp":1790698235092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"GET /api/poll/196188778 HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:35 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rYm7Y9cR1po8fTnXurco%2BbevdDTbNko4Uqb3CRzDHXENDTA2Wuh%2FyHF%2FTe4TojBjNUNbzx3ALoNO9YSfgee6WJQd7xqxEPR7LfgJcYviYNA4dZE7xkXIZUIvRK8R7mAJol%2BdKKA%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c42415cedb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":666,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-29T16:10:55.535271Z","times_seen":28,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/support/getMessages","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:39.850Z","timestamp":1790698239850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booking.safeid.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1790698220486.6506\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:39 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yQqXPW7lNhA39%2FT%2B4JDAZ4VvnXt3TJuFysomp%2FQmBh9oVMArpyjpA8Rlq7HlJLdxlQzuN5kinYr9kmk6qxVNWMI2x9nOnJqS6p5w87HMQAcz5hvRKf03GkVW1x8Tgr%2F9DGd1d%2BQ%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c425f18fbb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":859,"size_decoded":1150,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7258b7795a56b0fb2579922707a5565c","sha1":"05c75fa3357de556cd1fd14c3f39181ddc5c30c1","sha256":"b4217fa75664166a1f8fbf10356ea61889de9fd1c33aa993b8d12684ad3d3750","sha512":"8bbec0f7cc684e1b3e1fb1355a810a6b330f3955011679332c4e655e2c144d7bdc73aa416f8b5a82ef9b70eedfc6aa483bb10fdf3c7017334e77b72f22adbf80","ssdeep":"","tlshash":"52112301ed16aabf52ea1318b2027ddb516f942dc0a4599baa48ca1f18839f8631e107","first_seen":"2026-09-29T16:10:55.52979Z","last_seen":"2026-09-29T16:10:55.52979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/support/getMessages","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:40.850Z","timestamp":1790698240850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booking.safeid.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1790698220486.6506\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:40 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QqVFWeyBI3FDA3zThHYh9zURKMG97kbJu7msicS5ZOg0AqXZ6o%2BhTehCrJLw%2Fky6IeuHvoMK%2BL93okWz2MpgauTVpVaANPrTzeyh0%2FrVlIQhnRt6onQgwH%2FOmewcLxpyLrNokiE%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c426559cab521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":859,"size_decoded":1150,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7258b7795a56b0fb2579922707a5565c","sha1":"05c75fa3357de556cd1fd14c3f39181ddc5c30c1","sha256":"b4217fa75664166a1f8fbf10356ea61889de9fd1c33aa993b8d12684ad3d3750","sha512":"8bbec0f7cc684e1b3e1fb1355a810a6b330f3955011679332c4e655e2c144d7bdc73aa416f8b5a82ef9b70eedfc6aa483bb10fdf3c7017334e77b72f22adbf80","ssdeep":"","tlshash":"52112301ed16aabf52ea1318b2027ddb516f942dc0a4599baa48ca1f18839f8631e107","first_seen":"2026-09-29T16:10:55.52979Z","last_seen":"2026-09-29T16:10:55.52979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/support/getMessages","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:43.949Z","timestamp":1790698243949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booking.safeid.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1790698220486.6506\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7zZHjAOaALR%2BcYGFmk%2FvZWC9KXgiCs3TWHi7oLLIE1xoswZiZ6O45CEtD7iy9FxXelRER%2FrOF6qlJ6jCfTtOMrBtDNj08t2UUyFcStReXnektxE9Mywzkck%2BJpveg1laUSIfFn0%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c4278bc7db521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":859,"size_decoded":1148,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7258b7795a56b0fb2579922707a5565c","sha1":"05c75fa3357de556cd1fd14c3f39181ddc5c30c1","sha256":"b4217fa75664166a1f8fbf10356ea61889de9fd1c33aa993b8d12684ad3d3750","sha512":"8bbec0f7cc684e1b3e1fb1355a810a6b330f3955011679332c4e655e2c144d7bdc73aa416f8b5a82ef9b70eedfc6aa483bb10fdf3c7017334e77b72f22adbf80","ssdeep":"","tlshash":"52112301ed16aabf52ea1318b2027ddb516f942dc0a4599baa48ca1f18839f8631e107","first_seen":"2026-09-29T16:10:55.52979Z","last_seen":"2026-09-29T16:10:55.52979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/aaronfagan/svg-credit-card-payment-icons/main/logo/maestro.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:21.380Z","timestamp":1790698221380,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /aaronfagan/svg-credit-card-payment-icons/main/logo/maestro.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.safeid.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"b9851849fc716685f0543bed6e51e61de8c314460c47403a1c1afe563b259132\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 2CAE:226D33:4729D:7CD85:6AB41D20\r\nx-github-edge-region: swedencentral\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Tue, 29 Sep 2026 16:10:21 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270025-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1790698222.654331,VS0,VE149\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: c06155f6549c78aeecbb49671039c02ff9525313\r\nexpires: Tue, 29 Sep 2026 16:15:21 GMT\r\nsource-age: 0\r\ncontent-length: 730\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":1418,"size_decoded":1668,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5a44ff01b20aa7692ee7e4579dcd478f","sha1":"398894130418b3c7b30e32f8ef5f19971e3e2493","sha256":"eea18aabfd772d504260fdced1e4ed10e36483265239094c9e8abccaf0feafb1","sha512":"b7a4fa7daa06821c375201057c9baefe60b3f9522a8bf0c49621b26c1114eb2bed75682f4776eb8c739175057d1e367284b87d8d947d1dbf2b5004ba4de3a297","ssdeep":"","tlshash":"742122ec276488c04844cbe2bf3a1acd0ddfc5d32cd5cc59e51c5b0a658463a9cd1ae7","first_seen":"2026-02-01T07:53:46.692926Z","last_seen":"2026-09-29T16:10:55.537645Z","times_seen":216,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":6,"connect":11,"send":0,"wait":159,"receive":0,"ssl":244},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/poll/196188778","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:24.558Z","timestamp":1790698224558,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"GET /api/poll/196188778 HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:24 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j6mdlqHsZP0wZfU5u5utvnQvqGL%2BP4XYP04M3JhkqnBxugCmTN2p6DJmpzaysjmQq3HPhDP%2F9tCZBwILvsjhwLR7fs%2FmqoWOghgpTy1g%2FkUNesBJVTt5lndXe8TurOd1rXklDXw%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c41ff8d25b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":666,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-29T16:10:55.535271Z","times_seen":28,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/poll/196188778","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:32.092Z","timestamp":1790698232092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"GET /api/poll/196188778 HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qJHS1N5QseUUs342qiDyJfoBWmpEjOgpEnmJtXQn6B4GKkLcYvOTkTpJhuh%2B3ZQNm1J8EnCZhicGwS6t38GSR2tUf55fCx9R3kF458a9HmZhCKgk4t65xPLZaCtNVYvm9Ng2M5A%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c422e9a84b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":660,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-29T16:10:55.535271Z","times_seen":28,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/support/getMessages","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:33.748Z","timestamp":1790698233748,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booking.safeid.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1790698220486.6506\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f9SLg59T9KMghkGOaAge4Zj1JsQOQRDi0pQDs4RxAXT9pf6kn5j7gyJyAZIKWDBf2CULsOwyMW5krVIfhvXqY%2BDr2hTLkZ85V5owm%2FWBNxnaPmLsFEW2VeguMNAQ21N4f2DK2nU%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c4238fbc3b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":859,"size_decoded":1144,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7258b7795a56b0fb2579922707a5565c","sha1":"05c75fa3357de556cd1fd14c3f39181ddc5c30c1","sha256":"b4217fa75664166a1f8fbf10356ea61889de9fd1c33aa993b8d12684ad3d3750","sha512":"8bbec0f7cc684e1b3e1fb1355a810a6b330f3955011679332c4e655e2c144d7bdc73aa416f8b5a82ef9b70eedfc6aa483bb10fdf3c7017334e77b72f22adbf80","ssdeep":"","tlshash":"52112301ed16aabf52ea1318b2027ddb516f942dc0a4599baa48ca1f18839f8631e107","first_seen":"2026-09-29T16:10:55.52979Z","last_seen":"2026-09-29T16:10:55.52979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/aaronfagan/svg-credit-card-payment-icons/main/logo/visa.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:21.373Z","timestamp":1790698221373,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /aaronfagan/svg-credit-card-payment-icons/main/logo/visa.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.safeid.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"228ca07b117b8fecc04578f9b7b5280b98d49d04c686c4c2afdb953a22b6445b\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 33F4:3BC021:3D51F:8867C:6ABB0C47\r\nx-github-edge-region: swedencentral\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Tue, 29 Sep 2026 16:10:21 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270025-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1790698221.425443,VS0,VE148\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: f1b6314aa26756d5a49eb383d211bd093d2f4c73\r\nexpires: Tue, 29 Sep 2026 16:15:21 GMT\r\nsource-age: 0\r\ncontent-length: 610\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1204,"size_decoded":1548,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1170e846efc35f50a41fc10cf37d5c4f","sha1":"ee6657741ec8fed7d9ebd361b5de2593397c59ae","sha256":"8d837bb887be5ac1a959c8bfc8874dc35d1571d5953efa560b1f317ed6f56bb4","sha512":"88a7a6ac917560efbe30ba89038b95199be369f60781f32613cbb1612b03d6abd6f5423f0051219c05806365b5492ebd266f45c9ef5e27d6d1740d4ecca9b036","ssdeep":"","tlshash":"872167ed3f9428c9c4c24fd5b615150d3229d0f3ac455942ca003f0431c986161bebf2","first_seen":"2025-06-23T21:13:45.828877Z","last_seen":"2026-09-29T16:10:55.539791Z","times_seen":251,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":14,"connect":9,"send":0,"wait":158,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/support/getMessages","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:26.675Z","timestamp":1790698226675,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booking.safeid.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1790698220486.6506\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:26 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CrFrBtMIGECq8ELbixrZj6mY90I6b4xcF%2FhEUSw%2Fw4a4B%2FHSs5C5PiZHnWlfcfm3dNJ1nRLK8c4nbFzDVWLEt2ojTetBIMURniQSo%2F%2Bi5ecYGE48ULNbLWuVH%2FnSmA8xRYYnK2s%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c420ccefbb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":859,"size_decoded":1152,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7258b7795a56b0fb2579922707a5565c","sha1":"05c75fa3357de556cd1fd14c3f39181ddc5c30c1","sha256":"b4217fa75664166a1f8fbf10356ea61889de9fd1c33aa993b8d12684ad3d3750","sha512":"8bbec0f7cc684e1b3e1fb1355a810a6b330f3955011679332c4e655e2c144d7bdc73aa416f8b5a82ef9b70eedfc6aa483bb10fdf3c7017334e77b72f22adbf80","ssdeep":"","tlshash":"52112301ed16aabf52ea1318b2027ddb516f942dc0a4599baa48ca1f18839f8631e107","first_seen":"2026-09-29T16:10:55.52979Z","last_seen":"2026-09-29T16:10:55.52979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/support/getMessages","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:27.676Z","timestamp":1790698227676,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booking.safeid.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1790698220486.6506\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:27 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o5tIBxm6MKikIfbdq24JRIQs9kM70um42zO30T9DwuuaqZ861Xjm2JDBR1%2F2A7jeSRqjzorue%2FHSrT4BIMoIUZwiPeDDc1VecUYpTkuk2mPfwsTyJd4g%2B63Hvm0INl5764WpXeY%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c42130f8eb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":859,"size_decoded":1146,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7258b7795a56b0fb2579922707a5565c","sha1":"05c75fa3357de556cd1fd14c3f39181ddc5c30c1","sha256":"b4217fa75664166a1f8fbf10356ea61889de9fd1c33aa993b8d12684ad3d3750","sha512":"8bbec0f7cc684e1b3e1fb1355a810a6b330f3955011679332c4e655e2c144d7bdc73aa416f8b5a82ef9b70eedfc6aa483bb10fdf3c7017334e77b72f22adbf80","ssdeep":"","tlshash":"52112301ed16aabf52ea1318b2027ddb516f942dc0a4599baa48ca1f18839f8631e107","first_seen":"2026-09-29T16:10:55.52979Z","last_seen":"2026-09-29T16:10:55.52979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/support/getMessages","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:42.850Z","timestamp":1790698242850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booking.safeid.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1790698220486.6506\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:42 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9fbmFBYmOD%2FV6XsLztZSpVNi2QtdCpUzMvpEs3b0i%2FGaksDlLyQ7RswyJIDrjGCOO1Z3aQHTD0afpYDQ%2BvyzYAQOq8%2B3MBLiHoO3t%2BIeQbxUj3Ls0PeqzPD8T1p6j8DW3ANleQY%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c4271dbb9b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":859,"size_decoded":1150,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7258b7795a56b0fb2579922707a5565c","sha1":"05c75fa3357de556cd1fd14c3f39181ddc5c30c1","sha256":"b4217fa75664166a1f8fbf10356ea61889de9fd1c33aa993b8d12684ad3d3750","sha512":"8bbec0f7cc684e1b3e1fb1355a810a6b330f3955011679332c4e655e2c144d7bdc73aa416f8b5a82ef9b70eedfc6aa483bb10fdf3c7017334e77b72f22adbf80","ssdeep":"","tlshash":"52112301ed16aabf52ea1318b2027ddb516f942dc0a4599baa48ca1f18839f8631e107","first_seen":"2026-09-29T16:10:55.52979Z","last_seen":"2026-09-29T16:10:55.52979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/poll/196188778","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:41.119Z","timestamp":1790698241119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"GET /api/poll/196188778 HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:41 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ObUbQkGfcomfS0ipHmG3DCK69acVhDd61qs2z8AlDGAemetV1L1A2q8pFfHh3mhldnPNDA1WI0JRtXhO6JlrMKtiiyyFGkHIclvY1z1firoXtBvdtfxeuVosqqFOtTlBxAg8wsk%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c426709f0b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":658,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-29T16:10:55.535271Z","times_seen":28,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/support/getMessages","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:24.617Z","timestamp":1790698224617,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booking.safeid.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1790698220486.6506\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:24 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5E0pjQ24wbGMT1gUeAUzZWBh9RnjdthwoX8ItzSDoNvKXLTQH7e7ghfrT5ijmzrQaXWMcHY8kIHcUnCwZaIJgL4VRLDQWsZcqmP1W068R4plVBxqGmrOoZmTBjL%2BM2O7zsGhNbU%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c41ffed2db521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":859,"size_decoded":1142,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7258b7795a56b0fb2579922707a5565c","sha1":"05c75fa3357de556cd1fd14c3f39181ddc5c30c1","sha256":"b4217fa75664166a1f8fbf10356ea61889de9fd1c33aa993b8d12684ad3d3750","sha512":"8bbec0f7cc684e1b3e1fb1355a810a6b330f3955011679332c4e655e2c144d7bdc73aa416f8b5a82ef9b70eedfc6aa483bb10fdf3c7017334e77b72f22adbf80","ssdeep":"","tlshash":"52112301ed16aabf52ea1318b2027ddb516f942dc0a4599baa48ca1f18839f8631e107","first_seen":"2026-09-29T16:10:55.52979Z","last_seen":"2026-09-29T16:10:55.52979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/support/getMessages","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:25.675Z","timestamp":1790698225675,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booking.safeid.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1790698220486.6506\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:25 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ern2CulBKFuT0%2BMLp7vgtW4hUm0rfFyxRqgExnGswR58i%2BHs7Vy04yotdQeq6USpvyeak4GyHd2F%2BfhxN6boYMpAfEznOFWgwaInJuKkhE0W8aTEWHgygl4Dd%2B7CXqJoNcqgxA%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c42068e54b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":859,"size_decoded":1148,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7258b7795a56b0fb2579922707a5565c","sha1":"05c75fa3357de556cd1fd14c3f39181ddc5c30c1","sha256":"b4217fa75664166a1f8fbf10356ea61889de9fd1c33aa993b8d12684ad3d3750","sha512":"8bbec0f7cc684e1b3e1fb1355a810a6b330f3955011679332c4e655e2c144d7bdc73aa416f8b5a82ef9b70eedfc6aa483bb10fdf3c7017334e77b72f22adbf80","ssdeep":"","tlshash":"52112301ed16aabf52ea1318b2027ddb516f942dc0a4599baa48ca1f18839f8631e107","first_seen":"2026-09-29T16:10:55.52979Z","last_seen":"2026-09-29T16:10:55.52979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/poll/196188778","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:29.091Z","timestamp":1790698229091,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"GET /api/poll/196188778 HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nm7XSaC%2BEsBKzaf7I4ktHuiqbU9FoSC2u4AmnWEuaSjoE3RZbFXaBmD5RKiYgKiYwrwv9EcZwgwjTlEcsyh3Rmxcq8vHnmA9%2BEzEYLluWvz%2BlC0%2BD9%2F%2FTofBucnkMuKOy25Tzt4%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c421bd8d3b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":670,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-29T16:10:55.535271Z","times_seen":28,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/js/payment-modal.js?v=8f3c471b","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:21.346Z","timestamp":1790698221346,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"GET /js/payment-modal.js?v=8f3c471b HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.safeid.icu/196188778\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:21 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jzTIDdIJarr7ox4SbFM%2FOPmDvj1X7P5JvRjORNsTSWbw5vaNWZrNBrhNVoIhBYg7mqO6h%2B1KXrhd57z5OGaCKYkCxdV41ZWf3GIHlxIasJR9vWyDCFqRVpRKuoZmbPVnb8%2FKH9w%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 29 Sep 2026 13:27:10 GMT\r\netag: W/\"1a63e-1a0ed59096c\"\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a42c41eb7b4ab521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108094,"size_decoded":30054,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c1d288fc070c04524fdefcebffe85e7e","sha1":"0ffe65d77067d45b0e7507baa9548a054eba35a2","sha256":"8f3c471b173b1cf71cff55084f73f9b92681575d76852fca5a82c592a79376d8","sha512":"2ab9a817d15023e49b317d24f6ae92ea56912474d20b4b664eb4758db9b5c4ec0214ca67d5341e873c3985d81f364e7f497888bd0b9aecdecffa809d1a78eed2","ssdeep":"1536:iEuWqAjNCxMM4L7t0m74ccNStwqE9IJBjVhhW:iEujAjNCxMM4L7tX743NSawJBjFW","tlshash":"dfb3c9817fa069ba2ba78ff7723b71d9f0a90c5a7c00154bc405bc512fe1b66dab1874","first_seen":"2026-09-29T16:10:55.540539Z","last_seen":"2026-09-29T16:10:55.540539Z","times_seen":1,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/glincker/thesvg@main/public/icons/bookingdotcom/default.svg","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:21.359Z","timestamp":1790698221359,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /gh/glincker/thesvg@main/public/icons/bookingdotcom/default.svg HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.safeid.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/svg+xml\r\nx-jsd-version: main\r\nx-jsd-version-type: branch\r\netag: W/\"2b1-/mCO1j9uoKsE40NYvlj5SpoI22c\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 23361\r\ndate: Tue, 29 Sep 2026 16:10:21 GMT\r\nx-served-by: cache-fra-etou8220192-FRA, cache-bma-essb1270064-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 385\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":689,"size_decoded":1132,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"09120c7de80580796273588a9bdca498","sha1":"fe608ed63f6ea0ab04e34358be58f94a9a08db67","sha256":"9e5e4af371bca447a049a00351529b46ba17e4c2a11b203b3de8cf0bcae3dfcf","sha512":"9d6230cd2ed412a28ff9de8dbfe9b17a85e59342eebbec34acb3791f5d12d62e080bc8b4ee48d83fa4aa18457a15d2d3d4b6a17e932872af251c5b1701b0bbfc","ssdeep":"","tlshash":"59019ee66b18deac58eb4444df2437596528d0b1809b99e4e76646286c8fdc9e407510","first_seen":"2026-04-06T13:10:52.058416Z","last_seen":"2026-09-29T16:10:55.541932Z","times_seen":4,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":11,"connect":9,"send":0,"wait":11,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cf2.bstatic.com/static/img/favicon/9ca83ba2a5a3293ff07452cb24949a5843af4592.svg","fqdn":"cf2.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"3.174.2.31","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:21.861Z","timestamp":1790698221861,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /static/img/favicon/9ca83ba2a5a3293ff07452cb24949a5843af4592.svg HTTP/1.1\r\nHost: cf2.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.safeid.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 14 Apr 2025 14:47:42 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: K.RUmcLgTg4Yzp_3WN0bDmyYrMHCVsdX\r\ncontent-encoding: gzip\r\ndate: Tue, 29 Sep 2026 08:28:56 GMT\r\ncache-control: public,max-age=604800\r\netag: W/\"e8209d74ad093f151954a3820c12e5d8\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d402fbbc76d7eed9f899ad99e9ef2d4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P3\r\nx-amz-cf-id: vHiNl4PFCHakzMORcgLMTsxyOVCP0qsSYp99rchyWteIAjaqquNknQ==\r\nage: 27686\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1197,"size_decoded":1343,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e8209d74ad093f151954a3820c12e5d8","sha1":"12fbf39039f0182026abaf8b0a22e75c9bb316f7","sha256":"c80b9838465a2c5aa19e06c25631cd22d81dd8c76563875ebfb4d35304dfba47","sha512":"4dc04bf54e06a26d78c6d71eaa392059b21ea8a01bf6c6b1eb808f9a01758c18db18a28a9d74a841b3d5f2249787890944ec94ee0a6d4b2f99042138534800f2","ssdeep":"","tlshash":"222154208244e0359f67c730d3e1104178e3b8a5b6b6b6d8bac72013f10c8d0579d7d5","first_seen":"2023-04-17T15:07:43Z","last_seen":"2026-09-29T16:10:55.543369Z","times_seen":1548,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":0,"dns":40,"connect":37,"send":0,"wait":9,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/support/getMessages","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:30.676Z","timestamp":1790698230676,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booking.safeid.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1790698220486.6506\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:30 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IspNWomReDuZJEkFmYNgM4cwqnnM90SetUXH8M1QtmDPP0V2uKata%2BI1PoyjPMRxL3jPNf95JyAYp%2F8vBwSNqq3UZ5LlgS8zbBAOoMsy%2BBouSgxTFPksHrXk9iid%2FlARcWXVNn0%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c4225c9c0b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":859,"size_decoded":1148,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7258b7795a56b0fb2579922707a5565c","sha1":"05c75fa3357de556cd1fd14c3f39181ddc5c30c1","sha256":"b4217fa75664166a1f8fbf10356ea61889de9fd1c33aa993b8d12684ad3d3750","sha512":"8bbec0f7cc684e1b3e1fb1355a810a6b330f3955011679332c4e655e2c144d7bdc73aa416f8b5a82ef9b70eedfc6aa483bb10fdf3c7017334e77b72f22adbf80","ssdeep":"","tlshash":"52112301ed16aabf52ea1318b2027ddb516f942dc0a4599baa48ca1f18839f8631e107","first_seen":"2026-09-29T16:10:55.52979Z","last_seen":"2026-09-29T16:10:55.52979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/poll/196188778","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:45.619Z","timestamp":1790698245619,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"GET /api/poll/196188778 HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TMujXKRO1g4XJ6y8MSTCURsXa9kJXp44IYuXzay17cAc5BiEIUKpuUomNT18cT2h%2BFTjqyNwnNFlAp9Xk%2Bd4b%2FqJxPWQtwqIeQXAhoVPrKLIi0%2FYNWEjjwKCK6SXy5sgsdDse8c%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c42832db4b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":666,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-29T16:10:55.535271Z","times_seen":28,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/support/getMessages","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:45.949Z","timestamp":1790698245949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booking.safeid.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1790698220486.6506\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WM9hCQUEwmVCiOvgWZcWIPDtvyU%2BadKjsWRJ%2B4dmIwAgtpbk%2FX2P9u%2BRNcX3u6YAo0HQ2WhJF9m9K3rSt8yioxH34hD6ECVfOzQsCUjUkxULrFfLmGQugM78XTF8Dw2fADQtCHY%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c42853de6b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":859,"size_decoded":1148,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7258b7795a56b0fb2579922707a5565c","sha1":"05c75fa3357de556cd1fd14c3f39181ddc5c30c1","sha256":"b4217fa75664166a1f8fbf10356ea61889de9fd1c33aa993b8d12684ad3d3750","sha512":"8bbec0f7cc684e1b3e1fb1355a810a6b330f3955011679332c4e655e2c144d7bdc73aa416f8b5a82ef9b70eedfc6aa483bb10fdf3c7017334e77b72f22adbf80","ssdeep":"","tlshash":"52112301ed16aabf52ea1318b2027ddb516f942dc0a4599baa48ca1f18839f8631e107","first_seen":"2026-09-29T16:10:55.52979Z","last_seen":"2026-09-29T16:10:55.52979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aaronfagan/svg-credit-card-payment-icons@main/logo/mastercard.svg","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:21.363Z","timestamp":1790698221363,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /gh/aaronfagan/svg-credit-card-payment-icons@main/logo/mastercard.svg HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.safeid.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 363\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/svg+xml\r\nx-jsd-version: main\r\nx-jsd-version-type: branch\r\netag: W/\"32d-apC49IIEJ8jR/Xc+fTuiKr0GFEU\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 10304\r\ndate: Tue, 29 Sep 2026 16:10:21 GMT\r\nx-served-by: cache-fra-eddf8230145-FRA, cache-bma-essb1270044-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":813,"size_decoded":1090,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"05c5498a6ca3ca61f6452d7d88843e35","sha1":"6a90b8f4820427c8d1fd773e7d3ba22abd061445","sha256":"1c8f56fb410ec06e8467423cec0fb9fe54d6b18eba703591548d3159e744496b","sha512":"865d660fce4df17306d34901ca420e7e8430561a0a85840b2e2df7bd0a00a0cd14c210ad5189ee91008041d25051cbdaea0469b39900d104759823f52e56b96f","ssdeep":"","tlshash":"3b0189e5a7988451c9e503af6f3638804e1bd0a40189923ddf262f17658195f6d99ec1","first_seen":"2025-06-23T21:13:45.862706Z","last_seen":"2026-09-29T16:10:55.538398Z","times_seen":251,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":7,"connect":10,"send":0,"wait":12,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/poll/196188778","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:26.091Z","timestamp":1790698226091,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"GET /api/poll/196188778 HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:26 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xzs77h7t6ZdL6p%2Fr1e%2ByrWSXdLkrcLe52v7d%2FDhw36Q1Vpz5rsbe3Wu5NMalVJTDJfr6ukkS9UJjmpVc95OzF20dlqFcjI7WXZRqarMrnGavDTlLWbpEJQLij8EDHcPCfok5Kx8%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c42091eb9b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":664,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-29T16:10:55.535271Z","times_seen":28,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/poll/196188778","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:36.619Z","timestamp":1790698236619,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"GET /api/poll/196188778 HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:36 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pryV4LxlIXIXKEWBqT9S%2Frk1pED%2BE6eYJlSGI5OoYRHcjw9TvZc6VRA46V2C1twIEb6CgdDso2Fs80hM4nStC0BuOsxGx418FzJltaIvbhS4Qmmos5RE6Q70jvYcRGWFqHbv9Gg%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c424aee08b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":662,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-29T16:10:55.535271Z","times_seen":28,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/support/getMessages","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:37.849Z","timestamp":1790698237849,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booking.safeid.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1790698220486.6506\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=54X4QpPYKju4HGx%2BJOziN8G9e5680le8sZyJHB%2F0b6UM860Tg8LnrwGusIDzLDWtEmhLw%2F%2B%2BOaU%2BYrs%2BwJ197itN5NS3zkp8LQpwoZezOqsoIVcMO2Lo3T5FvXquvrK3tV5P%2Bls%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c42529f40b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":859,"size_decoded":1156,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7258b7795a56b0fb2579922707a5565c","sha1":"05c75fa3357de556cd1fd14c3f39181ddc5c30c1","sha256":"b4217fa75664166a1f8fbf10356ea61889de9fd1c33aa993b8d12684ad3d3750","sha512":"8bbec0f7cc684e1b3e1fb1355a810a6b330f3955011679332c4e655e2c144d7bdc73aa416f8b5a82ef9b70eedfc6aa483bb10fdf3c7017334e77b72f22adbf80","ssdeep":"","tlshash":"52112301ed16aabf52ea1318b2027ddb516f942dc0a4599baa48ca1f18839f8631e107","first_seen":"2026-09-29T16:10:55.52979Z","last_seen":"2026-09-29T16:10:55.52979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/poll/196188778","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:44.119Z","timestamp":1790698244119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"GET /api/poll/196188778 HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uczre2Wp8GvfB9rCeGZbodFxzFCW0oL1A0fPWvTIgGf7aEtZ4U0yuMOnjDuwqqwm2Rdd2F8Ykso518eztUCW9HVBN75XORlDsKnaHKs7P6gEp6L2Xp150qylT5AVXjFMXi5MsX8%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c4279cc91b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":658,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-29T16:10:55.535271Z","times_seen":28,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/support/getMessages","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:21.444Z","timestamp":1790698221444,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nContent-Type: application/json\r\nContent-Length: 69\r\nOrigin: https://booking.safeid.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"POST","post_data":{"size":69,"data":"{\"supportToken\":\"1790698220486.6506\",\"chatVisible\":false,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:21 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H046EzFwPw0%2ByAL3XvcZUa7HJywARLsUem%2FKLfI6yKky88a6Zl8nMGss15C%2FUaC3%2B5FpFczhUxgLCm%2FsyujwjvTOatZgzpKBkbULjcv6m1aWJQEDxjW6vwxo4E9HqjqN%2BkG60NA%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c41ec0b53b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":860,"size_decoded":1153,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d3a48d695cff67efc7171df9abe20032","sha1":"523d57c483b29ca470e419ef72cb4bafaaf21151","sha256":"6179153cd5af2e70874c73f8fcbd0b08d2cb586210516b2a49d20b38525b7ea2","sha512":"894fbf949bdfa1982c101d84d82d8b0bb12aa9dd15058876986f73b80b9ba715cbb5eaf37a3390855e2441b90424472ab0e2717c632fdc413c9739c046756cdc","ssdeep":"","tlshash":"a4112301ed16aabf52ea1318b20279db515f942dc0a4599b9a44ca1f18839f8631e107","first_seen":"2026-09-29T16:10:55.544117Z","last_seen":"2026-09-29T16:10:55.544117Z","times_seen":1,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/poll/196188778","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:30.592Z","timestamp":1790698230592,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"GET /api/poll/196188778 HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:30 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L2%2BNhPZugsTtNXmg7dXNO2fxjz3j2xAt4cZF%2BqE7Vd4S3NW7Eq45EDtgEBmtD49dxO03IRn2Bm7ovJIel5onXPbT9VGyxbuftzAnuUbixrQ5Ft%2F5Vj%2FCjbzL1bJ1T850lpYuvDE%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c422539adb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":666,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-29T16:10:55.535271Z","times_seen":28,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/support/getMessages","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:35.850Z","timestamp":1790698235850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booking.safeid.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1790698220486.6506\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:35 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9dp5pRbB6duhJhxEytvz59N1F1vfQiGz%2Fzn53ToWDsZMTav%2Bhf%2BBo3xk4B7L0H%2BMyOVfavxCgjHUvhOBnrkWnCBKcz9l5lHnEJUoT3jucbHOBUMEDIF5RhEBOxV1TjtcmyvHheA%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c42461da1b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":859,"size_decoded":1148,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7258b7795a56b0fb2579922707a5565c","sha1":"05c75fa3357de556cd1fd14c3f39181ddc5c30c1","sha256":"b4217fa75664166a1f8fbf10356ea61889de9fd1c33aa993b8d12684ad3d3750","sha512":"8bbec0f7cc684e1b3e1fb1355a810a6b330f3955011679332c4e655e2c144d7bdc73aa416f8b5a82ef9b70eedfc6aa483bb10fdf3c7017334e77b72f22adbf80","ssdeep":"","tlshash":"52112301ed16aabf52ea1318b2027ddb516f942dc0a4599baa48ca1f18839f8631e107","first_seen":"2026-09-29T16:10:55.52979Z","last_seen":"2026-09-29T16:10:55.52979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/poll/196188778","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:27.592Z","timestamp":1790698227592,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"GET /api/poll/196188778 HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:27 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KPQegjD5pdW8zzbNCQHX%2Btw6x1hOwLzs8PQ7A59mJxADOjEordKyIkPiHsGq4Y8BZNn62mtLuWpegPg8T%2ByyUILu%2F5vQW8IsWpFW6Kj%2BJWcZ%2BVd25nTzgoiKUAsQVpzAam7VZP4%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c42127f7fb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":668,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-29T16:10:55.535271Z","times_seen":28,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/poll/196188778","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:38.119Z","timestamp":1790698238119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"GET /api/poll/196188778 HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:38 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DK7wId4NCHPo7MwEDM%2F%2BSlhLq0Vl%2BinO9miL3hEAsis1eJULxzyi7Og6bfaQGUChMygbL2kWZ%2BxS1WFN7O4G18Yz11UzrBLtu6jeJvrdyV1TupA0jq1%2FRSX3e9gQNzYKitB6V48%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c42544fc2b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":668,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-29T16:10:55.535271Z","times_seen":28,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/poll/196188778","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:47.119Z","timestamp":1790698247119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"GET /api/poll/196188778 HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:47 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q1sA8Ymv9GG5aEgMrKMlgy5Kx5UndZiewJaZ1GtnsvbMpZQD%2Fgi0%2FyK8FifKVwEIgbRGBLgrFgOhpfCUXsBaxCIjuNB%2FJFATAPIiwarXBjab3LAQrACLoMoFdM52WZ9V%2B9jwTxo%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c428c8e81b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":666,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-29T16:10:55.535271Z","times_seen":28,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aaronfagan/svg-credit-card-payment-icons@main/logo/visa.svg","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:21.361Z","timestamp":1790698221361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /gh/aaronfagan/svg-credit-card-payment-icons@main/logo/visa.svg HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.safeid.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 581\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/svg+xml\r\nx-jsd-version: main\r\nx-jsd-version-type: branch\r\netag: W/\"4b4-7mZXdB7I/tfZ69Nhtd4lkzl8Wa4\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 28868\r\ndate: Tue, 29 Sep 2026 16:10:21 GMT\r\nx-served-by: cache-fra-etou8220193-FRA, cache-bma-essb1270044-BMA\r\nx-cache: MISS, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1204,"size_decoded":1309,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1170e846efc35f50a41fc10cf37d5c4f","sha1":"ee6657741ec8fed7d9ebd361b5de2593397c59ae","sha256":"8d837bb887be5ac1a959c8bfc8874dc35d1571d5953efa560b1f317ed6f56bb4","sha512":"88a7a6ac917560efbe30ba89038b95199be369f60781f32613cbb1612b03d6abd6f5423f0051219c05806365b5492ebd266f45c9ef5e27d6d1740d4ecca9b036","ssdeep":"","tlshash":"872167ed3f9428c9c4c24fd5b615150d3229d0f3ac455942ca003f0431c986161bebf2","first_seen":"2025-06-23T21:13:45.828877Z","last_seen":"2026-09-29T16:10:55.539791Z","times_seen":251,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":9,"connect":10,"send":0,"wait":12,"receive":0,"ssl":244},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/js/material-icons.woff2","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:21.569Z","timestamp":1790698221569,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"GET /js/material-icons.woff2 HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.safeid.icu/196188778\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:21 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 16 Sep 2026 19:44:08 GMT\r\netag: W/\"1f560-1a0abbf7eca\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pIDMImDTgrVmTNGtMDcMVvj%2FgxThtNo5I4CygOfcn8GK2EwZiVVXeucpOmQyc%2FXwgnuqPguh7kXbs2MuXb2M4D71C0zX246QlwjPvBtpmXDSIKJBpkyAHMoih1%2BeNbF5DOcIu50%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a42c41ecdb5eb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 128352\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":128352,"size_decoded":129064,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 128352, version 1.0","md5":"53436aca8627a49f4deaaa44dc9e3c05","sha1":"0bc0c675480d94ec7e8609dda6227f88c5d08d2c","sha256":"8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1","sha512":"6655e0426eb0c78a7cb4d4216a3af7a6edd50aba8c92316608b1f79b8fc15f895cba9314beb7a35400228786e2a78a33e8c03322da04e0da94c2f109241547e8","ssdeep":"3072:b4XkN5u3RbAR2r4lJ8FBnP7fNblbKBRvqy:fGdA8FBP7fNb5y","tlshash":"91c3231efc32af9a2e1724ec288521809c1e92fbe0b3512cf565f437e76517d999ca09","first_seen":"2023-04-05T13:19:11Z","last_seen":"2026-09-29T22:56:24.622694Z","times_seen":92460,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":52,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.safeid.icu/api/poll/196188778","fqdn":"booking.safeid.icu","domain":"safeid.icu","tld":"icu"},"ip":{"addr":"104.21.40.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.safeid.icu/196188778","date":"2026-09-29T16:10:33.593Z","timestamp":1790698233593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeid.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 07:41:54 GMT","end":"Sat, 26 Dec 2026 07:41:53 GMT"},"fingerprint":{"sha1":"86:34:3D:34:96:06:B7:57:A0:45:B2:BE:1F:A2:8C:39:4A:B9:7F:0E","sha256":"3C:F1:DC:D8:CA:D2:17:7C:9A:74:A1:BB:67:A5:B1:0E:21:A6:4F:7B:F4:81:12:37:D2:E9:C6:1A:8F:71:70:E2"}}},"request":{"raw":"GET /api/poll/196188778 HTTP/1.1\r\nHost: booking.safeid.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.safeid.icu/196188778\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: vid=aa0a3327-9ed8-4485-9735-4ff2054e5c92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"aa0a3327-9ed8-4485-9735-4ff2054e5c92"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 16:10:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0spkFwywHq%2FK1JXXGf8XjFcn0Fcpct2dTLhUswkXnYi4FWi1MEiUUohSDd0LWUG7fT0jNwYqnRYpNAlbeHdmfx8eCx7NNNuAdZJqXcjM5WPIR32VWClN7001w%2BFVqMPDyaei%2FBw%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a42c4237fbaab521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":664,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-29T16:10:55.535271Z","times_seen":28,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"booking.safeid.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"booking.safeid.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}