{"report_id":"809ea827-d7dc-4bb0-af94-22d9da741a6c","version":0,"status":"done","tags":[],"date":"2026-09-11T09:55:28Z","url":{"schema":"http","addr":"safepaa.xyz/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"title":"CME Group: A decentralized trading platform with low fees and high liquidity","dom":{"size":28489,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9690)","md5":"f0d846240fe49e2cabc0cc885a5e3fa0","sha1":"b2732562077b621e32d20f00f295d98eb03be496","sha256":"63b57e582bc79e25377eca05ae9316e733869539f482a21606f58d2c7e0cb5d7","sha512":"865c7b93e867fadba68958adaf9d917bd5bc339994a92bea40c4e609cb85da1c48b2182733983da5460c4def0e04b7a03c6f1cdfaf6b0ad41c7843c10f6889a3","ssdeep":"384:Ww6LIX62urNZCxP2hFYcJiMLVCEtYFAjHK98ErLvQGuC:DurNQxP27YcJiMLVCEtcAjHK98qLvQGz","tlshash":"a3d267225581402b52b7c4c0eab7bf0ca5a3e31fc90994807aed81ed4fd7eb1a46757d","dom_hash":"domhashdd748ddc7c103f9cef996d5b40c39f5c","first_seen":"2026-09-11T09:55:41.493336Z","last_seen":"2026-09-11T09:55:41.493336Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"safepaa.xyz/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-16T09:55:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-03-27T06:51:42.839831Z","last_seen":"2026-09-07T19:11:08.191132Z","alert_count":0,"request_count":15,"received_data":815663,"sent_data":8610,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"safepaa.xyz","ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":44,"request_count":45,"received_data":6814782,"sent_data":20770,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b1e6506abda1ffa5b9ab2721a0fee13f","sha1":"cc64d89d747a4c6f5293b262055d3cb8e175b738","sha256":"848a05dd565ed4ad22c665530b61473e4437ca86f8bd027a8c952177f73b5269","sha512":"ac564a39d053f7c5f6e636296207458bae1d069f50356ee85ac23a8045617ebbe8cb5f26870d5a19f2d3cf834bc578918ad2b9f46bb68e3d0961c68841bb6e17","ssdeep":"","tlshash":"ecc08cc4a0c32d001643641050af34e490348026b0481b428c94d8492e230b08233e98","size":139,"data":"","first_seen":"2023-06-07T05:45:46Z","last_seen":"2026-09-11T09:55:41.568255Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"806d250a08b73bd9858f19cfe1f983b2","sha1":"2ed650f52d0de0de36b360e20742d09db9d5c4c0","sha256":"ad0cc4bbc7e9bf449e781a6c13a53643ff5d64012e227913c47eba697c3b41a8","sha512":"faa069eb12d14006ff1633ac2bb7bf6c20103f9948786dbef073395f93440be62fbb529b7254e8d5650992f2be643721a6d08e9564a1b96aacea89b873a96107","ssdeep":"","tlshash":"c0c08cc4a0d72d102603641410af24e8a0244026b0482b038c94dc682e220b08233ea8","size":142,"data":"","first_seen":"2025-09-10T08:17:47.334802Z","last_seen":"2026-09-11T09:55:41.569115Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ed178a1c6a5362dc25ffbc3d45931da6","sha1":"b562c589b10e6842ff6d966fa4c8dbc097743059","sha256":"a3ce8bd3c7517c646d80b8256a1e49274b3938004ea7b7908e202a9525d7ca32","sha512":"1386fc6a9fc025970af8c9a3f1bbc814c4414d0cf0b2a1a82f4d347b7cbc636e90e2d259a3e29bcb30fa9d8ef7d1affc0b7b47bbcf0e0449e6e03c5c64a806f3","ssdeep":"","tlshash":"36c08cc4a0d32e005602691020af25e890244026704c9b02cc94d8592e220b08233f98","size":139,"data":"","first_seen":"2025-02-10T17:00:01.441195Z","last_seen":"2026-09-11T09:55:41.569986Z","times_seen":6088,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/assets/vendor-i18n-86676d52.js","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbbf3355be1aee426259cbdfc05615a2","sha1":"1450c3c015a99313abded6937d964975c52a264e","sha256":"34c11e6ded74b53477fad0899ef7d91132c3ca3bf3c097e8924b1a7b77e8748a","sha512":"1f4f9784c83ac3e27d8b0a5180619da44f47eda4459abda693ab3104dbf2fac808d12893e17391a18e4d82f48ba8debda6e841f52e377e5f210f094981047df2","ssdeep":"768:xMPpyGrecKPUVO8pYJtRmUqdIVojB0TZXM/oM5lqz4WUpjc6gWoamZw9SV1FqEhU:jsCVw0TZXBwl5FG6gWf4xSzdgo","tlshash":"a043e7d635d7b016977a56e620b31101ab3e1b59380e9884f1bdda873e33c5a83b7f18","size":60532,"data":"","first_seen":"2026-09-11T09:48:23.91623Z","last_seen":"2026-09-11T09:55:41.539883Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"72e9542910f68aa195de90f6364ed2d1","sha1":"4ad02c93ce344c2094c6153ad9958ba3e1c5ec19","sha256":"80621ce50d6feaafc1e4854bee624133e8677a4f21db32249a26c4d0cfc332e2","sha512":"c54ddc6fcd7c337ceed96b05a159af2147f2b5291ef341e39c4f8a8ecc3db591f76c20592cb339beeb6eaf1e2b639c71babe2d64020b9ab98810aef8b96cb8ae","ssdeep":"","tlshash":"a1c08cc4a0c62d001602642050af24e490288026b0481b028c94d8592e230b08237e98","size":139,"data":"","first_seen":"2025-09-10T08:17:47.3911Z","last_seen":"2026-09-11T09:55:41.570788Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"299816b3eb819c5cc0ccdeb20c9748eb","sha1":"ce9836b567b3974a76642c092ace2c7cd5bba830","sha256":"228385a8d32c5793d407aeca2e9f528e0f05dac7f3ad1a7329b51cd420353ed4","sha512":"6d8c5c18efc6da29dc29e932d0d946f514030b048e04349ac1ea407dd138783c4424138349fdc4433939cceded862dd71b1d5d3a4ed914e97f0f4f3a8802bcf9","ssdeep":"","tlshash":"6721efbdc50b61b21e5b2116cbdabc88f39710a9444af5517e9c81900bf497c07bbaee","size":1239,"data":"","first_seen":"2026-09-11T09:48:24.017745Z","last_seen":"2026-09-11T09:55:41.571577Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc3be43f70287b1d8e26bf7ae7c613a4","sha1":"45dc6c0bded0d63bf9404701eaab52e75fc187a2","sha256":"468e127017f3ddeed82014e48f85a9db0753e4256832fb8aef69cf37878dc7ff","sha512":"b2b3f62776f0966aa9121c585369c363d0b63e092ff6b0dbe84a1cd9a91a3d485dda86409c157dd6553937b2021733b47d58a2d555eadc6263d90ce8fa14a287","ssdeep":"","tlshash":"3511abfe191ab0296303804e976b7801642250b9000a184173ccab9dbb9ab6de0cfb8d","size":1034,"data":"","first_seen":"2026-09-11T09:48:24.019335Z","last_seen":"2026-09-11T09:55:41.572911Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-09-11T13:07:26.557313Z","times_seen":42553,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-09-11T13:07:26.559169Z","times_seen":43910,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"69c836debf18a3634df8f278c49d9aea","sha1":"086e288ae65a6ec183004e2fbe63bcbab7ed98f8","sha256":"863f785e9fb53701eb71ffc548cf8362a7f2bcd3d230a4af447d416a225a7ab1","sha512":"038e1620af40474e0b5755b4794e46069174a6d595eda5ee4671578baee3681dd89a1514a97cc56292c2bb7ae527eea8177d05d9926d367d4116da215334b238","ssdeep":"","tlshash":"9cc08cc4a0c32d001602641010bf28e4a0244026b04c2b028c94ec783e220f08233e98","size":139,"data":"","first_seen":"2025-09-10T08:17:47.381426Z","last_seen":"2026-09-11T09:55:41.575352Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"62b4203ff4654a9b6b9e21e901bd3c68","sha1":"701428d124fcbc1cd8064d9489dfd5116b6e140f","sha256":"3a5c02e31c99935e438fc014043a7c12369b6d010e9301ca0c683be998050789","sha512":"0b384d2cb09ecc2fbab6b21b6a31eee3e3fe94983a88e12d2d0320b0886e9f1b35be632b5c07f0e8e174fb5322cf71600c607804c1d7881fc3542dc8f1a49439","ssdeep":"","tlshash":"c9c08cc4a1c22d005602681060af25e4a0254427704c5b028ca4e8482e220f08233f98","size":139,"data":"","first_seen":"2025-09-10T08:17:47.394976Z","last_seen":"2026-09-11T09:55:41.576174Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bb48891ae79c177efd20f4673ad5daaf","sha1":"7d9142d8205e7c22d8e02799d24fc0cf6a94163d","sha256":"5bb18e51e1d7966d45a233478b73034ad2177d75fd2ebc56149f029995a73a60","sha512":"63bbfd25218bc56c2986cb67d09e2f96a0fdc0b01722fb4591e186258074a565cb0ed9e25e6b3f4e9f70afb675c322c1b677a42f797d94dfd1658a2ffe04d174","ssdeep":"","tlshash":"6bc08cc8a0c23e005612641110af28e89024442a70881b12dc94d8482f220b08237ed8","size":139,"data":"","first_seen":"2025-03-06T21:41:52.87466Z","last_seen":"2026-09-11T09:55:41.576988Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/imtoken-early-detect.js","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb1d9bd2e56f1eec2c68da7e0e3aa5cc","sha1":"e9002788eab7183ff408bd7ed2658f0a5a022538","sha256":"ad86db347b0a576fde6078c4645935933dd45bc82ef7da793711936e502baf1f","sha512":"deb9bcfad93f3e71ee25376b5c87fd3775b45419eb45b4a2a8c841c9d63296081f69f5a8f09deb701c9618c1fdcd42774b1495f10422d3a0048a7f1d5667f803","ssdeep":"","tlshash":"6d31cc5c6db781918713a37d83ab5a00b527902b5c0dce40b4ec49f45fb076b5727eac","size":1729,"data":"","first_seen":"2026-09-11T09:48:23.975407Z","last_seen":"2026-09-11T09:55:41.507666Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/assets/vendor-vue-652c4c09.js","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ec2d556e8326b430340d0d1674f40ae","sha1":"38a294e16182004597d59758c07919b02e661c9e","sha256":"67d3f9714818fdc4aa4e6258a360092c1fd3601f293c11ac34cea45e0cdfb7b1","sha512":"fb15acd744251e42a88583c5b1405dd7ed81966a16c70b2e544bee16e46153b5025949d14d72266dcec7c51a9dc60d7998a2d90242ada69e542a7e65f350cb51","ssdeep":"1536:XbjlFKTYsg6AkAK88LLgEOXSBKLc6HptntXAZE8ldPJJA7WaTC9/E:rMg6AkAK8AgEFBKPHptpAZL5A7WEC1E","tlshash":"24c308e93282b46163fa19e600770111f3392959380ed4d4f16daddb3d3789a91fbe2d","size":128940,"data":"","first_seen":"2026-09-11T09:48:23.905268Z","last_seen":"2026-09-11T09:55:41.539256Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/assets/vendor-html2canvas-48421fba.js","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a2f11dc19d860c02c69687b77c757b5","sha1":"23ef12c74f30f83e59916a8ccd2be8ea4a5e3da5","sha256":"bea97db64c99b63623128ceadbe7bf7c0419b3a82b6807c7aa5499f43df6d178","sha512":"2d880e04595d2f0ecbb9a5edd548462535069cfc65082732ca0b676c16b9974c33c6f9fdcd46f66f5573eae13942de127cb52e8a0cf1d91084009ac3c8e33aaf","ssdeep":"1536:3weKEs0+RipH52fREkQk3NS5pU9VjKgFA0oS9BlV7Rf+jJFpwwHiKGFdv+:3xtn+Ri65xr9pn7Rf2CtFE","tlshash":"091446b46ba72cde0b7eb49b001b3d438d981b67117fd1a8f24a6da22d70706ceb1574","size":198453,"data":"","first_seen":"2026-09-11T09:48:23.948628Z","last_seen":"2026-09-11T09:55:41.553746Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/assets/vendor-web3-be73c185.js","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9a595bcc015bc8dbcc388332b1f836a","sha1":"969f8f6e7b7fb0d926b2f69e3a4d9b40d31dc9f0","sha256":"3400a7db1b1f812e1b1c9de83085b3af33212044d5f8a234ce036ad96195a3d8","sha512":"17e9d51a359ba4e5a7a159755922479f5ae697424bba64a12f3d494830b70731f48432d13ae97fcf10b2bfb55897e66f5bc5a95a93d33f203bf2d3beb2c6e70d","ssdeep":"3072:ydkJu93WuKIfml5iKmAFh+MuFvmMpatfCs:yKJuWuTAXHuFuMpah","tlshash":"bc54f985b592f1600a8a50e0d4f71203f338bd59705bc0a4f6b998eb79bde89d177b38","size":286879,"data":"","first_seen":"2026-09-11T09:48:23.964018Z","last_seen":"2026-09-11T09:55:41.553061Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cf91b633dd7aa3a910f7203ae8fe6e17","sha1":"45d58e726a623b9e8f470e616bb21e0d79b921b9","sha256":"aa19bcc17f77cb209b91962de32d71b2d5dcb71dd7c34ce623ea6bed117e3eb1","sha512":"0fee27821ca07b1d1334a207806b1d1b49a8fdd98737f499c880ca9e835ceb36c18607e7072ee36e642bfefd2ba7186545b7fc04d2f07c9fb17dde2c806355ab","ssdeep":"","tlshash":"41c080c470e27d44165565b5207f74d45034441ff459db52dcd4ec593d225b4d337db8","size":172,"data":"","first_seen":"2024-12-08T15:39:09.836814Z","last_seen":"2026-09-11T09:55:41.577806Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5ddcf000fe640727c37a007add885f01","sha1":"c03cacf1f7fa18c439f4df83c545efdc7947979a","sha256":"1002ce8702b1ab8819bbaaa1107fcac63cc383b1ac134849914669ea3a821780","sha512":"16d0825adacbef5b34caf9e925d789b63afba408f7b8f9cf8ea2cd4de1bf92c21d1edb4a5f233fb755c7a9df1d0bdd22a86bfaac106e69457cd2832ace015a7d","ssdeep":"","tlshash":"bcc08cc8a1c26d001a06641010bf28e49034802674481b029d94d8482e320b08233ea8","size":139,"data":"","first_seen":"2024-11-12T13:07:34.2755Z","last_seen":"2026-09-11T09:55:41.578602Z","times_seen":149,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"99914ced1ac3c7f66ecb2789ed72ce2e","sha1":"cb16c6932a574774b6176c62d6779cafb839a8e6","sha256":"243a82637723559debd3403a06bc78972168b4c4b77ee2c34036102807b8ced2","sha512":"95d7719004e495cf3139c4056b807ef169228799069ec85a29c9b11b19b6dd3b7f5beed2920e64b65a55cb24711dce24dc89080c919a2e002bce98e008f21504","ssdeep":"","tlshash":"d4c08cc4a0d33d001a02645065af29f49028482a70481b129c94d8982e220b09233e98","size":145,"data":"","first_seen":"2025-09-10T08:17:47.389736Z","last_seen":"2026-09-11T09:55:41.579288Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"54e1f523628ec53aa6c9da2e21fe589a","sha1":"319e573f5e9d1cc8004cf42c57492b69b5ebb5f1","sha256":"8ced5be06de5a60d12eccac3b91edcf119a4a8efc0d271f23f6f47a850cb35cc","sha512":"9cc183665bbd9f3471d103faf58c9b637745715bafcb35c6f3f2a7032c277c27a8426682daf7a8afa23942ca6d1f3951a654115b6a2a0e63e4789d6f42d1a5fb","ssdeep":"","tlshash":"cdc08cc8b0c32d102602a81015af24e89038542a704c6b029c94d8582e220b0c333ed8","size":145,"data":"","first_seen":"2025-09-10T08:17:47.331589Z","last_seen":"2026-09-11T09:55:41.580478Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6f6515cf6ae8b8b6e7ff8f1d62280c4e","sha1":"a789878b8073d795d74c0be9bd92c2bbf5f4c6b1","sha256":"228b90c73f608a1a43ad053c62df1a8e512db8cd6aefaad49e3f2e1a602c7398","sha512":"104baf40ad35784adafb3476cee6e5dae7ae02db4312259801916224654dce31ef9788862200bb4e06790b42021f8d087f04aa548232a3eb201b54aeb7fecd70","ssdeep":"","tlshash":"bdc08cc8a0c22d101a06691020af24e4a0258027b0586b828c98d8582e620f0823bea8","size":145,"data":"","first_seen":"2024-12-08T15:39:09.845355Z","last_seen":"2026-09-11T09:55:41.581596Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"62082b8f6348c541efb31432fc0245cd","sha1":"68a9d03fad2eb32cb093da78d6ecb8a62bc79bca","sha256":"91af6b2f67b7f04bccd8e5cbc4450b4fb3bb1ebc7e77f60da85a03426beaef5b","sha512":"eee66ce2a155f67ab969d402ff5bb8e2004f4c8b02b89d6fb8a9ca95f3697d2fec7decbea3bdabb63195125f872c0922c1dbf1bc8e2b3ee32cc853aea66ecc79","ssdeep":"","tlshash":"5ec08cc8a0d22d101602651020af24e89034442670481b429da4d8482e230b08233f98","size":139,"data":"","first_seen":"2023-05-23T14:47:18Z","last_seen":"2026-09-11T09:55:41.582776Z","times_seen":5319,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3e305c76f1af41368fd6bac1d3232bf3","sha1":"cd489168607fa0abcc5a4dbfc874fece85a4ec57","sha256":"487f403c5d61bfb6900aeeaf2635e0b1b1e79b7972cc0c3fbd6d33f6540867f9","sha512":"7d2e0f811670556b702ba1a4d121e840af1dad9c37b529ecd8c35b6695a8a4cdad9764090657891b098aadaad10fee0494c9c1cf28350da07a70b9158ede5000","ssdeep":"","tlshash":"c3c08cc9a0c22e002606681011af24e49028402a74481b42cde8d8982e220f49233ea8","size":145,"data":"","first_seen":"2024-11-01T12:54:56.038953Z","last_seen":"2026-09-11T09:55:41.583903Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5a741ae792e6cf3866098824f6425908","sha1":"03325689d6904c2310c938c2baeadb8f83577843","sha256":"728d9906e1733c43a3fd936d49ea82a3d58157dabdfec06666ac6d562b768f40","sha512":"f8a1c341da352f259ffe15464d069f264214769a077c2939845aa04dcee844323c63efebd6663aacc7f22f2744e6ff143e75bc8ddaf09096c2cfea6025258c08","ssdeep":"","tlshash":"5bc08cc4b0d62d002602652010af24e4a026842ab0482b129cd4d8482e630f08237e98","size":145,"data":"","first_seen":"2025-09-10T08:17:47.419365Z","last_seen":"2026-09-11T09:55:41.584886Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/imtoken-optimize.js","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b12816fb8813cda7044dbc67cd195a45","sha1":"da52d3feaede4c9f4093573a98ff75beb3cecb9b","sha256":"6c67c9545e8b426384447e8208e2e0c6926c31ffa82f00e8eb893119a0b3b6f9","sha512":"f6d9d3e9616362ae5bef3af6649def266960cdb79914653a2319c19005ed997ef769796a35d5291c4cd23aad67e7ff67d02366b97666ddc2ade6e7b90cfd48f9","ssdeep":"192:XCnGdutiZsHmibiZGHmS8YFyBB+2DWquC5:9uUyh2MiluG","tlshash":"70e1206f15f20130077320bd0bdb6645f523e25b6a1dee29b69c43981fe0a1756d32ee","size":7365,"data":"","first_seen":"2026-09-11T09:48:23.919886Z","last_seen":"2026-09-11T09:55:41.531924Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0b48a69b3dbf0bf2046c242d50bcb8f5","sha1":"cfa9102a0876374a86ef020802b6a1be7dfc7e33","sha256":"c80e33c1ae32a391fd9eb854137e1e59ac6fed826ac111e8552baf841781cd5d","sha512":"d72ef1401baf59e17fed232b7d8088bc76bcf0fa6605f38ec5520dc1bb04fb97b4f9485916cd7350350b9b88a045a4a56f26003b8900f8a0df2de9011c909ca5","ssdeep":"","tlshash":"5fc08cc8b0c73d001602651051af24e4a025802b70485f829c94dc582e6a0b88237ed8","size":145,"data":"","first_seen":"2025-09-10T08:17:47.339938Z","last_seen":"2026-09-11T09:55:41.585812Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"33c61675d0ff5fde66e94e64ce012595","sha1":"4a083e0cf13432af831fbd7b1f4cf8819963dd71","sha256":"62fbf84f9caaf03a2032f215fcd18b7dc3bd8b8960379428c79c92057e5cc226","sha512":"93ae56cd8ff761b3d2415edd4846e58fb85e2c5004f5db1ef70491a97c320b5e366ceea17036fe6ac28b089322ffee8c05eac17ad0acd9a6a633e7cff0835c96","ssdeep":"","tlshash":"88c08cc4a0c6be001a02a92114ff28e89024402bb1481b438c94d8883e230f08237e9c","size":145,"data":"","first_seen":"2025-09-10T08:17:47.383303Z","last_seen":"2026-09-11T09:55:41.586735Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/assets/vendor-lodash-28d24e41.js","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"775961b61fe54f3cd7cb34ace73df330","sha1":"374b22f53109e697104f8d19dbdd15ecd5c860fe","sha256":"2143787f24eca88a15ec431ae6aebf29ec70a5c95eac5b4523bdfb5ade10bd3e","sha512":"438129baa041f8d12d425e71d83027a487f22e7e24ca3b3468205d01f1ceefb1ebf98a3c336c47189958b6dfbedf3e76f689f796a68ed51ab8ffdbd183aca233","ssdeep":"1536:H8LyadU0JIMfObIq5oe7HQ8K3sUt3W1DCpxVpJycTqDZbQFFKouA2BX:oauy2e7ItGD8xQ8+BX","tlshash":"92935fc83ad2f05a87a370b5007f088bf13e6ea4a89ca504d1a1f4ed7db954ed537e19","size":97263,"data":"","first_seen":"2026-09-11T09:48:23.935659Z","last_seen":"2026-09-11T09:55:41.567393Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/assets/vendor-vant-3e081598.js","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"774e6400289e3742a2c92b8724a6adcb","sha1":"3fe8d0fce34c7be04022a500ad279ab6dcfcda12","sha256":"4c229efb866afd0869a54bcd6b76f69411fb18922100efe6969a05bf8380a2dd","sha512":"0ab52fab5ef8f13b792d659b43ceedf53ab65716f2880ad8457e96f290cfc27087198aca0bd153c30bfc32eeb44d5cece592c802ec875a087230542347e19560","ssdeep":"3072:V3MW8Js2EAhRfDtZngW6OzJJT4wWhEf2JPsLZJLz6bm7QqVwUyE6BWqZoVYhN:V34EAhRfbzT4wWiDV7VwUkZo+T","tlshash":"76c32ad1b8c6f538977b94e5406b0510b6391b48b009c5e0f07ead8a2f69dd4b2bbf2d","size":124175,"data":"","first_seen":"2026-09-11T09:48:23.958638Z","last_seen":"2026-09-11T09:55:41.50904Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9b7ed545c19e9370f1e69c09941133d6","sha1":"a693618104635f9520131c2f67f566d1ebccd00f","sha256":"1cc70f6eaaed8f473436124f9a7aaacb0205b0307fedfdaa0e76de645ad5fb28","sha512":"d773b328fb356a21ac8235ee87bc8ef6a42bf5dd7ef898bd16d76fcefca2cabe26e6000afb6265dcc1a9d20777428d7b0debfdd4ee8f946d45638f210ed317c9","ssdeep":"","tlshash":"19c080c9f0d62d3057025565547f24e8d0264477744c6b53ccd4dc862d520b44233d9c","size":165,"data":"","first_seen":"2025-09-10T08:17:47.355661Z","last_seen":"2026-09-11T09:55:41.587836Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/assets/vendor-echarts-ac6706e5.js","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0f68316ae5d0bb7ce326fc86f3322ab","sha1":"a8f671dc104753a02466b8101b29bc0d825b1471","sha256":"47f7e12f4386fb530d2d22d8b8f45c9be73c593130c359cd62c067f8e2d15ea7","sha512":"aa7f12a99dad5208015a905190545d7abcfd2128e0c8200e558ce280cb7ab6bc9139e84288925829402dfd73e4298c4ce519f97281c7b3ad4c579ace3ce07b8f","ssdeep":"12288:kFHycAbfS+3O4urBgaBjgLDfhQWBIqr3s96v16xLxsWw8ilNH9G2uIgd8Q:iWf8BcDf1BFr3sLbsL8ilNH02uIgdX","tlshash":"1025099cb654743543a73174066f050f933a680db50b86a8fb69e4ea6cbd44f223bf78","size":1023313,"data":"","first_seen":"2026-09-11T09:48:23.917363Z","last_seen":"2026-09-11T09:55:41.510064Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bb8b1b57541c4ee360af205c72b6ef15","sha1":"a7990a3bbb8f1e2e24cef649613ad7cd910209fd","sha256":"2abe382b98ff32a5b6361bb13f82618ddae27a6a3154fbf9aa648ce99b33bc38","sha512":"e8d1c94b953cf21eebcfa2f7896637a2b7edd504864c21b4b3510c6b850175b8f0c649b37026404f38858c67a2e8a71dc3877fcd34a9f27b8b9bafce4fea8cc0","ssdeep":"","tlshash":"35c08cc4a0c32d001a02651010bf64e890284026b0482b02cc94d8483e220b08233e98","size":139,"data":"","first_seen":"2023-08-02T21:25:38Z","last_seen":"2026-09-11T09:55:41.588815Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"70cd611e4f9dcf3eb412e803168e805c","sha1":"a4a6e5bb9c5725cf453971a2b0b34d47c5c67417","sha256":"3739e77f9fd2485887db918f74fc0139962f6b2606a595ab0474d57f296d70bd","sha512":"d6297390397556a7a26955051a61d5891de3c273d47a3138e1c9196e422d16a85ab711610b447b904fd4b53ca8af54d584529e5e9fc7d2f0c27337fc8b15daab","ssdeep":"","tlshash":"56c012c9b0c22d10160a641459af38e49024502a74885b668d98d8883f220b0c22bee8","size":161,"data":"","first_seen":"2025-09-10T08:17:47.358343Z","last_seen":"2026-09-11T09:55:41.589709Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0c989ec0e3aa71422941125d41590718","sha1":"68c300d731c44d97ba00e4f957fce7d1fb2ebc12","sha256":"2bdfc0bda288d1bfe35558845be3a512d17e611978c4820ae97e98989689c8b6","sha512":"54337ec3c3811ecde687d1313ecd69ce85c5e3e712a4f4b46d4a5df9a26bea9e908263222988014dca0381bd1173e7b37ebf4a3c906c93ce98d8f66112827e95","ssdeep":"","tlshash":"37c012caa4d72d0019156525586f25e85024541660486662dd98d89d3e530f0d633dd8","size":175,"data":"","first_seen":"2025-09-10T08:17:47.384722Z","last_seen":"2026-09-11T09:55:41.590888Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/assets/index-862a306c.js","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2ff67743d550067413bc3b7cf4c2074","sha1":"495611432092d3f83dc1360d0e8a28e21080b3b9","sha256":"2de24957065516cf761b6086c92500a1ded2636a4ad9f6d790a9ca0012f26184","sha512":"3d94883837fe04eb8c58f70fb2a2b223fe4458c509661938f962bfb74125baf8b8a8af1db49bd8526c89f1f93dff8a71c9430eae3d7650653a9dd63a285e1d74","ssdeep":"384:IwEpqX65Q+r+54KENftdTWeubJMF1/Pnri1C/hhvLW2KI5zBcx+AWDR+jl1phfw2:98qX65+jgTWeubJO1/ji1s5NBcbWDR+/","tlshash":"27920a15b40a9934e2f39595642e0640f1182fdee05394b37afcaf1227e8ca5a35a73e","size":19624,"data":"","first_seen":"2026-09-11T09:48:23.947455Z","last_seen":"2026-09-11T09:55:41.54598Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/assets/views-9ebe03f4.js","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d34481cd41bc0f6546fd7c9a309d21a","sha1":"2502ac888f029cc01707a04b0618bc069bb0b04f","sha256":"2a5b3cd7de6c311eb63956f51a3c655b2a07432f2b0680ed1d9f21a363fb67a8","sha512":"efbba1a7ba90c2c61cfd05201308a2edf89191a16fdd0ea3dc001125fef8ffd92c8e57d3e13bc96f9974687a6e33415ba1ee7dfea27a998dfc6b6065e4604fb8","ssdeep":"12288:AA2vu/UO3j3XBdtLdzk23NMMCx0M8VXlPjDycrM:Jx/Ui3XntLdz93NMMg/8tYcrM","tlshash":"72e40884f94478b6eab794d0954912c032486fcfd00988a0b5fd5d6a2fffcb5736ab24","size":698368,"data":"","first_seen":"2026-09-11T09:48:23.978167Z","last_seen":"2026-09-11T09:55:41.547987Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"873ce4e211a88d98497b688349e36d46","sha1":"2c78861041bdcdb602a757959318113f28796c89","sha256":"058a2163683a368fbb309ca0f53de27a5eb9069cf497a45b1f5c6aa212c6dbd0","sha512":"eb0b25bf8fd0b2ddaa5587d5c351c57acdaa483f20706846d32172544c0e1c21cd657c5dceb0df398d36108c98d09ddf5234133cb0a73203cbbdf2ec80f1751d","ssdeep":"","tlshash":"8cc08cc5a0c22d105a02651021af24e49034402670482b129cd4e8482f270f0c237e98","size":145,"data":"","first_seen":"2025-09-10T08:17:47.415922Z","last_seen":"2026-09-11T09:55:41.591776Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"12efadf3f9248bab80364405fc6ae50d","sha1":"95ac4f0ef1e6bf697c9e6dfc689de967c060b138","sha256":"586f247f55a59cb0eec7862f7a32c5c3d41b4ea73e3f6a87b1b7af6d71be8336","sha512":"f89afec5e1dbcdb369f715e801688fd4a45a7a9df9a27513179aeabee8fead806f727089d15a2079fe72e40ce9ac5165dce2564cb8fa91766e6b6622ad5db429","ssdeep":"","tlshash":"95c08cc5a0c32d411612641120af25e89028442670881b028c98d8492e220b08233e98","size":139,"data":"","first_seen":"2023-08-02T21:25:39Z","last_seen":"2026-09-11T09:55:41.592537Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ba5d595ef4b52558187a9bbbb2beafb4","sha1":"d3e3c6014f6d6ce793cadf2ec046944a95df534f","sha256":"0f88c4ff7b0d233b0baa04ebb62a01833800d8573a0dbd1aa31bc36b9686c280","sha512":"f8e7dc85c79d137045c1a7f4f61da98885b443de9b1f6606c9a038ce1ef1f17a776534705132acaab8b9df0434f3431bd270dad5cc5d77db032eb021aec473ed","ssdeep":"","tlshash":"90c08cc4b0d72d102a02645010af24e490248026b1485b62cd94e8482e620b0823be98","size":145,"data":"","first_seen":"2025-09-10T08:17:47.364339Z","last_seen":"2026-09-11T09:55:41.593328Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7342d694359f6501f1a37ab724ae4026","sha1":"626f4d5031895f2a3fcf2a567c1594d15aa92ea1","sha256":"7b7d3ea99fe9d0e649809d2e75383e09456d68384c5eebbfb88635556b3333d0","sha512":"78405995edae3d53f49d3d33fc4290464b1cafefec05c56d3ba376cb60f93499674bbc61e28ea159e24c7264674407a09212f869f54c8cabb3d1ea2faa98cd0d","ssdeep":"","tlshash":"6bc08cd4a0c32e205602645490bf29e89028402674489b228ca4dc883e220f0933bed8","size":145,"data":"","first_seen":"2026-01-12T06:59:54.831599Z","last_seen":"2026-09-11T09:55:41.594554Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d67dbca54364441d541ce6c0570aee99","sha1":"3ffb50acd72025b062febdee78273c778aa5dfda","sha256":"fc18ce1279a466cf095600c7a95639d57fd5fd498b727a62d2adbde66cf093f9","sha512":"2859f9e0e151426a61ff695ddf1efb34b0a6809036149457b74b5b6cf5f3675453776408e5ec0a035237dca19087307464987c3cd553e3200d2bd5bce7d9b18d","ssdeep":"","tlshash":"f8c022c8a0d63a000205580468ef28d494300416b14826268dd0e8882e230b0823bd98","size":169,"data":"","first_seen":"2025-09-10T08:17:47.396455Z","last_seen":"2026-09-11T09:55:41.595804Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5febe8d2633d5282468730c324915ac4","sha1":"5f67c959b7f66605a59b93afffa9d6df117b3dda","sha256":"97e463b3f8268760c7e9c35c2bc2e5f69558ae3d46603330211266ab98f8647f","sha512":"b2b7d8dab316539c57168c78e1ca61f96c135df0f43a578ad8eba36f8d2001721d983c309d6fa9100bb49ebe34d304f06655a29ad3c927c7bc095be982d753cc","ssdeep":"","tlshash":"15c08cc4b0e73e602a46641618af34e4903a4427b48c2b03ace8dc583f2a4b48233eac","size":160,"data":"","first_seen":"2025-09-10T08:17:47.36588Z","last_seen":"2026-09-11T09:55:41.597073Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fbdc4f602b1d8f5a0c5b4017bd03554f","sha1":"7db7e6ff4e4f7783d47018e96a641a3b38180070","sha256":"4c0c5663ac52fc214041ca71fcc319c12cfbd22b56266bec08bfacd2d7b4d6da","sha512":"b3920adadd26fd351018d3ca507bae361591632d8919e1075c481a001a6d0d766dc9fd338c110bc7d7bf3538ec70527436ee803553a8fedfaaab340b13dcb095","ssdeep":"","tlshash":"79c08cc4a0c23d102a02651160ef28e49025406a70886b028d94d8482e220b48233e98","size":139,"data":"","first_seen":"2023-08-02T21:25:38Z","last_seen":"2026-09-11T09:55:41.598062Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"da8870e8f91c100d1289b5d674d79719","sha1":"bab07e63954180edc7b17bb56f2388e0909adf50","sha256":"dcc9b3c574a45f128bdb702399164352e0ae6395538f842b5db4d7392f8435a5","sha512":"c61471f7631b78733e7558c48063a9970bd9322da50a5cfdf03c348dd35835943b3daf4bf9e8719b4538a7b478e209ac117ded132df3267d59ccb8324ba7b957","ssdeep":"","tlshash":"cac08cc8a0d22d101a16651010bf24e890244027708c2b128d95d8582e220b09233e98","size":139,"data":"","first_seen":"2024-09-19T22:02:28.524757Z","last_seen":"2026-09-11T09:55:41.59941Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9b0b0948a68ede956d4f76d6d274d38c","sha1":"d4aa9568d29a33280812b2ca2d7a1dd10b3ed62c","sha256":"7c16dff39f8a6c6dc76ad206f32576e4e4711deb9a6e0ad0e3234972a4d85159","sha512":"76cee0ba5ddb468f379eba2dce3e9a426587207e86a52c5a072acd7892c61871b24a007cab438b304505724e5ce1a98243e6de6702ab75ff903b476aa1bea892","ssdeep":"","tlshash":"a2c08cc8a0d23d102606781010af24e4a024502670485b529c94d8682e261b48333e9c","size":145,"data":"","first_seen":"2023-08-02T21:25:38Z","last_seen":"2026-09-11T09:55:41.600535Z","times_seen":183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9de360927f595df662fc2e5d01541cc8","sha1":"f70c054c038de4221d28367f5f859323d910c0c9","sha256":"ff03315a46977ac5b3a2c46ff43c957cd8079ac1b309ea959ae833f897456124","sha512":"2d1e1f311c664eec828d73e51508c28ca0399c89811f89808b8fdcb6294753853734362e6712388da4c081224df6e6770c3e1c84a3f6c8fee7741c057fcbb723","ssdeep":"","tlshash":"f2c08cc4a0e27d111a12665010af28e4a0284426704c1b028c94dc483e220b48233ed8","size":145,"data":"","first_seen":"2025-09-10T08:17:47.367854Z","last_seen":"2026-09-11T09:55:41.601248Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/assets/vendor-element-634158bf.js","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"212f26699824fbeacf6d480320066d2a","sha1":"0ff1b83b9666d520f197501e2669b879a51327c8","sha256":"01037f79cccd6be630d2ed9bb10ccd0fc02d2363a8193262b0f91201b6f7bbbc","sha512":"c7480c42a9cf44f1393ffffdbdfb7cfec65adcb41dbdee68068c0a252d6314d4666c7047f4f75a20c78c55410b30f12fe3ff805b7f4aa51733c0889ff9b6898f","ssdeep":"12288:wglOOmshG4unXAZFM1LRbTvbFZE4s1fqEmM4a6:wglOOvhG4uXAZmhR/bFZE4sVqEmq6","tlshash":"baf44b95b855f436dbfa94c980990500b72d174db028c8f1f5bf8d2a229fd50b2afb39","size":794706,"data":"","first_seen":"2026-09-11T09:48:23.926287Z","last_seen":"2026-09-11T09:55:41.548726Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"93e3c5b527337811bf62a0aea30b8f99","sha1":"a00de82fb5c057bb4ba20585addacca24653ce65","sha256":"90a15406690dab9a6720e588ac625a89b080a077283f39ceee08d411abf8d3c2","sha512":"9ed4eb02b64d514f8eb280a09947c1075b40dce5a467332b5099518a13234fc95de9c72509032570b44caf4ee3a5b694508ac64a852e6a46c0f099d9b20941e1","ssdeep":"","tlshash":"3fe0abf9a9e650e61e918aaa2eed196590150b73881c3c2d2c457112bedf8243234e20","size":416,"data":"","first_seen":"2026-01-12T06:59:54.859678Z","last_seen":"2026-09-11T09:55:41.601943Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8cbcbedac33f0cafecbe67b053728199","sha1":"64c49c9b7075be6804dfb62b6787eca117efc172","sha256":"8d4839f2f6359f36b660cca9fc64ed9328af59af8f527f249103ebf97cf8539b","sha512":"aeff1d1f0290a7cbce15c5d49f2c8784f9b057a2c1315954e6fa667cfde7a392e72ffbe39f6ff93eec2e08028ce497856d503d39b0e37383226c5c3033196107","ssdeep":"","tlshash":"b2c08ccaa0c27d011602691154af28e89024402770485b429cd4ec482e720b48233e98","size":145,"data":"","first_seen":"2025-09-10T08:17:47.36284Z","last_seen":"2026-09-11T09:55:41.60253Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f2d1ff31fd40359cdcd82389f1eca94c","sha1":"1759a2cf03866883962b4ca68d96d31e40360eca","sha256":"26a765a0037404e5b2dda3294755a4e204cfc262d25ccd1774fee3465d2402b7","sha512":"27dedd721313792721f299d58e60080e1daa8f4b544e15a9fe8d685a2ae5deb78b8777d6a14ef2c34693c069368d14736511251bc5739cfd8990c32cd3c29823","ssdeep":"","tlshash":"90c08cc6a0e23d101602651025af34e49024802770486b23cd98e8482e230b09233ed8","size":145,"data":"","first_seen":"2025-09-10T08:17:47.374532Z","last_seen":"2026-09-11T09:55:41.603157Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e3f70b3a5c03a5638a90c0ea213eb9e3","sha1":"1ea453799d850e2f239ca0e74dffa849c133ca42","sha256":"e9653d5a4b545e32d7c189be8946108e7434c6c366d711066e2b2673c07c4e88","sha512":"a780c503c707632df3fd72c2c57096fe2156f4a2aa63ae780f7b89ee08c0ab1b4edf30d0e20d4025db0dc7106f3b0de0a391d955c7c3d0a1e7446f12bc606658","ssdeep":"","tlshash":"e3c08cc4a0c27e002603651060af34e4a028802ab0485b42ada4de492e220b08233ed8","size":145,"data":"","first_seen":"2025-09-10T08:17:47.349507Z","last_seen":"2026-09-11T09:55:41.603709Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"129463649cfe1e6da2601ba0b4fb5c02","sha1":"57c96d43497844b234a8dec63b89ab010f172282","sha256":"172b8c198bb5f9a5bc608b93009af24d284b14b79d4431d66b742528c1a56ca5","sha512":"d1c7d8e20c2119b51600d20d1fd269605a61f71aa86ab069d9363ec2f47bb2d694746c833a8612e60c1c3d4011b6bf43c73c0067330e1b051b413bec0765dcf4","ssdeep":"","tlshash":"c9c080c870d63e1055137621587f7dd45025845770cc2b13add5e9963d130f05237de8","size":166,"data":"","first_seen":"2025-09-10T08:17:47.397918Z","last_seen":"2026-09-11T09:55:41.604276Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/charting_library/charting_library.min.js","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-09-11T10:05:44.627817Z","times_seen":1430,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/assets/tw-d57cb3d2.js","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"590d162bceb17266fd18901dc70dfec9","sha1":"266f8ad69b5b70ca63e0175cbfd9e917053896bb","sha256":"eaa6e97312f99706ceaab43748e80c130d09c0ed084fffc77b1c2469ce9d6512","sha512":"b9bf65aea6d6afed7db03c9c18c3122f7a7d2f47ee27d50452eaf352b2982500359587defb61aab3f9ed306c0b6036b3343087cd11dcc108c2449d497d66fde3","ssdeep":"768:8bgu4TgSnNvog65OyTFwjaPfvn+2vaFRt5eQ4Xt0U2CwMkP0WCX9VP773:XUS9HaOBja3lXtR2TpCX9VPX3","tlshash":"87534bd55cfe9ead44e3962b704f5803a0e78ac9c271c9655fec69f92288b43c393621","size":64230,"data":"","first_seen":"2026-09-11T09:48:23.950744Z","last_seen":"2026-09-11T09:55:41.544641Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"65cc32c48c6ca2b8b2fd44c1670ae667","sha1":"f2a116897b02c9bf0bb31247024703d913d0cd13","sha256":"83e989e9718ddc6751b336792e962c10faa616a9f3feaffc90f9c430e4c6d221","sha512":"bd8ce0e0a56f50ef5d499026d682702cf4fc60698a0152097cad28c8b889fcd4bdad15f87af7f14437f9cba7bac5e26d80af6bbc49249f7efbdc468ef39be9f4","ssdeep":"","tlshash":"11c08cc4a0c22d001602681110bf24e890244427704c5b028c98dc583e220b49237ed8","size":139,"data":"","first_seen":"2024-12-08T15:39:09.862859Z","last_seen":"2026-09-11T09:55:41.60485Z","times_seen":194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f02ffcfbde7b0afe29639198c8137cac","sha1":"9daf59294380c8be478844674d1b14b2ab42c5fb","sha256":"24ce4bd7ea58074683fccedf514c4762d6158f8f5d771b13c28be886db279435","sha512":"a124ddc942e46c2aecfd7afe8749354031f513c621d746cd422197f4244a4cb12a0faca8d587600c27412f1b0affe8658fdd3d7eb8ebf642be682174919f69e9","ssdeep":"","tlshash":"aec08cc4a0c22d101a02a41410af24e49028802674482b438c98e8a82e220b08233e98","size":139,"data":"","first_seen":"2024-12-08T15:39:09.853482Z","last_seen":"2026-09-11T09:55:41.605443Z","times_seen":156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9faf97934e43fad21bbff41ac16c29da","sha1":"59c8dc1d4e1fa181a49d2ef547edfaa6d2da939c","sha256":"20a386b35237dc6c32b4b306ae6f476d8b0043253f0607a1a30c0a4f878d37f9","sha512":"6247a1e05a4141821528f2784eede90d71432449dee39c1e66a021dddad6fcf147dfb515dd3add4916029e03810e453c5b80f54bd2f70966b3addc4756c34708","ssdeep":"","tlshash":"8ec08cc4a0d36e045a02a42161bf29e4a0244426b04c3b128cd4ec683e230f08233e98","size":151,"data":"","first_seen":"2025-09-10T08:17:47.343238Z","last_seen":"2026-09-11T09:55:41.606233Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7ba0c33ab9924b69e90373dddaacc5d8","sha1":"82db78c3a3cbfd25cd3bd1fc3b52bdc0f2dddf0f","sha256":"bbec2ef96cdbd9d3a7aa5437e4bcfc268d904a3f23ff830d6b3f1d0fbeced55c","sha512":"34b012ab6d7fe19edd936b8a2f398a305ee628d8e38b0977a3d9c4e9b319aa1f66dff44a5a6c3ea4ab7455a1a05b131f3da4ec95b649b5e8bcfcbb2c2d70deef","ssdeep":"","tlshash":"8ac08cc4a0c62e042602661114af24e49024402670482b228c94e8482e660f08277e98","size":139,"data":"","first_seen":"2025-09-10T08:17:47.403752Z","last_seen":"2026-09-11T09:55:41.607949Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f64d92e54aca57ded23ef9ff8e8372bd","sha1":"1b6cd4aec9ee45ebe0f9a7957817e939cdfcd516","sha256":"e699a73471d8b1e609e682dffe8115f74c9d3b239c7277f2d0b4a9ff412cfdcd","sha512":"12803177be75d90347d75a799671815a890967deed2676bae0ffd2cdbe8e19fd594628a54d3f3fe96aa3a5b8bb22573492d93ad4555b1374ebae1bd1f0d6fc58","ssdeep":"","tlshash":"30c08cc4a0c26d201a02682060bf39e490388027704c1b228c98d8692f220b08237ea8","size":145,"data":"","first_seen":"2025-09-10T08:17:47.348063Z","last_seen":"2026-09-11T09:55:41.610699Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3dc9372c0a86b3e08715295e8a171a9c","sha1":"db1de60b6110300390d5971bb281bec79431d903","sha256":"c4ab2a9236985d34344ae0e03cb2a48741e5ea7e65085c3d574b9fa8bd8c2c1c","sha512":"64c769bfd47a7ba93611c012a6e69cce2a783b77617c5a1cb77d058f66da3aaa45eae386997391ea5bbba4ca02f2bf6abf5469e1c7baf679fdd2e7db422992bf","ssdeep":"","tlshash":"33c08cc4a0c22d405602642410af28e49026402678482b028c94d8883e220b48233e98","size":139,"data":"","first_seen":"2024-08-19T22:08:48.259555Z","last_seen":"2026-09-11T09:55:41.611616Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b2b3ea37e2b36bf6f6262c1d4ff4c280","sha1":"fb13f38483f3bae7d9939b0f40dc51727e70d179","sha256":"566b00f7251a423fca57149536787725157e6a2328900bf3281a3c47b9fe346d","sha512":"ff736e35d86ab390958ddfef64b8fc4aecdce87b4546a67f44bfb8ba3f0945736fa417ef987b37451d4ceb7de84fb6cd2f933deeb2a6f33e2b773c958d440b2a","ssdeep":"","tlshash":"48c08cc4a0e37e001602a46050bf29e494248027b0481b12cca4e8493e220b48233e98","size":145,"data":"","first_seen":"2025-09-10T08:17:47.387248Z","last_seen":"2026-09-11T09:55:41.612337Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"23492bb3f3e87d81d74d83e57c7d4519","sha1":"6e4b41aa90374d5008e9114d63bdea75ca4db552","sha256":"6ffd89c45a0b690780f11a43391e1c7525b680f49355a2799c6b6a9377f3ba36","sha512":"41b5145b76b57773444743892b7bb3d0cbc1aea7bc8c50ccdf3c548b018f28f209b76ff2cf6d9a81a3f1e06c89afa865d46625bb9fdeb1e14c8f0307884f633d","ssdeep":"","tlshash":"f5d02bc5b0d63d6812031a9d181b75d49010807aa8a90b11d860cc643f256f05327d98","size":253,"data":"","first_seen":"2026-01-12T06:59:54.870499Z","last_seen":"2026-09-11T09:55:41.613094Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/assets/vendor-8b17b1ad.js","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a90c3bb9218fa39c61e0ac6d0fa26dee","sha1":"bbada750b5f4d3fea6b015274492bda260294df7","sha256":"dd6762d8953c0c42df2aace97e2a2fba74350c5153e0dcc229f4c311b8254722","sha512":"abe59a77e5c87529133b8c33e2af0db6784b8c0b6cddc77f4d4b434d59f52e791fb4a87baacce2f1ad03b516a3ed82fb09b03f47b8c21b6cfa757cf70c56f620","ssdeep":"6144:mfdoSQtdewgc8ABGGe13cujrWDwzWSF7wVJu6o/ZaAFDBl7TA/V4MrCtHZgw0edl:mKKwf8GZ8zW/Vsztl7U94MrCkw0eDn","tlshash":"ed843ac93291b06543ab15f2007b0007f37aad69744d8464f2add8eb7db998a9277f3c","size":378960,"data":"","first_seen":"2026-09-11T09:48:23.976509Z","last_seen":"2026-09-11T09:55:41.558427Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3f7e637b7082a00b8216289bc627d697","sha1":"f9f5a52d26fc2e046b3b93ed879e390d293b8315","sha256":"f7630250b912686d0497527de278a399c3fdd6335e8651150aede32379eab0bf","sha512":"3e23680f4170283774a57857fdbce5e4bd0f568f68c346a613e864df88bf088afc98ac8c39fd1154b9a2364abd79b5e9a434111e2d0da0b2d053134bd541aef6","ssdeep":"","tlshash":"efc08cc4a0c23e001a02681524af28e490244027708c1b1a9d94e8482f220b08237e98","size":145,"data":"","first_seen":"2025-09-10T08:17:47.333207Z","last_seen":"2026-09-11T09:55:41.613778Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f92cd56df0fe3c30a562a8b6003eecd0","sha1":"e4e20f513728065c7ea5f81ddbbce97ddd61e815","sha256":"8acd75e1589a65a8035809036a7a673ba9fec685f18fdc7ff6c1c831f8cd51ac","sha512":"899305f7a9ba086a29565d8afe55506525ea0f986fa0dc52b4a30fc56cb9fd72e3d1a30f7265a3cc444b597f9d0235f695ad4802524b2d959b91ce3ba29e3c7e","ssdeep":"","tlshash":"2bc08cc4a0e32e101602681020af2ae4a024806a70485b129c94d8482e220b09237e98","size":139,"data":"","first_seen":"2025-09-10T08:17:47.346619Z","last_seen":"2026-09-11T09:55:41.614508Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/#/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"309287485a31847b5bfdb4bb870c8242","sha1":"c37ea45c969898fafd41685a4b9a58fe3c18ad01","sha256":"2f8b71a2f87e0438ad72b295d0fa79521ec527d52a3163ec22632c11b4f01d7e","sha512":"b076ebb10ac1acee6a1850a57a7ad65b54886d8826d51e537706e7b9ad7b2f2ad2722675f45e3cbc047f2d5ece5e80fb3c80bc0e98f8e66a6172952a34069091","ssdeep":"","tlshash":"54c08cc9a0c23e005612692154bf29ec9028402a70881b42cca4dc492e320b48233ed8","size":151,"data":"","first_seen":"2025-09-10T08:17:47.408886Z","last_seen":"2026-09-11T09:55:41.615371Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"safepaa.xyz/api/common/getMt5Amount?coin=lead","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:53.924Z","timestamp":1789120493924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=lead HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://safepaa.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:54 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TLIFq7GKr987FCi0zkzS%2BM4LoeCt5F3hcErKTnUoMX%2B09mpEsCYZNt0OlUSbSLWsYbQLfN6rEQDugRHwouoj07xK7zHSFrzGypZ%2FPbFEHVlpmiiuaEYmRjgf%2B8boYw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://safepaa.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb2f0994b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":900,"mime_type":"application/json","magic":"JSON text data","md5":"429813604c546d0427cc096f22756df9","sha1":"71817b90dafd550299246b20a007705586775c0d","sha256":"3196fe625c3b0cfe80cad1abaf8e5090c70488b77790e24a1f01481c19ba7a1e","sha512":"65d8e7d6ccc152b38258eb46642f971d0ce26ad63142b0af8ff5c48a8e49c3c7b6a18d2ca2cb74f3e3e88eccfda5aeef815de8edc81c7b47179c4eadf11e37ef","ssdeep":"","tlshash":"849002553c188242e88700a595061304042431603625934ccc6d516580881722041d5c","first_seen":"2026-09-11T09:55:41.498875Z","last_seen":"2026-09-11T09:55:41.498875Z","times_seen":1,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/favicon-v2.ico","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:56.551Z","timestamp":1789120496551,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"GET /favicon-v2.ico HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:56 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iuh0XTzAuAKHzRw64s1RPUnU1BzKoDfAjigInCAQV1deXCQ2KQ8RszWCCrXbtuFMUeRajCSMHNjD0Whpqpiex%2Bmfo98NkCJ4FCu%2FDGjj4hhIMXxGbip4l0%2BqEBXxqw%3D%3D\"}]}\r\nlast-modified: Fri, 21 Aug 2026 09:32:06 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a881b16-175a5\"\r\nage: 461\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a395cb3f6c83b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95653,"size_decoded":91378,"mime_type":"image/x-icon","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 384x384, components 3","md5":"1889637e405cc1b4c0e908fd94a8b049","sha1":"1a2629f01f18fc8a4d27526accae0448ebd3f78d","sha256":"5c4fb1b4c01a3c3ff81ce19fad97004f134997c8ecb2886f2588d18985ba19fd","sha512":"07dd7f0cdc8e3e49588eb2b0f66cfa5eb579cdb015ddd0efda2f3f617f2195e93ff23a56bc87de21485d848b2a6dd18be5ffe36434f3d3c989c78b0f3e2bad80","ssdeep":"1536:hkHRse9SMKc1seIjdhXE2ev+te2f4xOFxYyOD2hZnY/JuPaT+3AKqUVsq8i+vJ:OxsSSSatEV+EoaD2hKJWAKTcRJ","tlshash":"e993f1b5b7e7f785130bea2d1abc2d22575027c16cc49653319fae24eb8db3109a3036","first_seen":"2026-09-11T09:48:23.908315Z","last_seen":"2026-09-11T09:55:41.502563Z","times_seen":7,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/assets/fa-solid-900-aa759986.woff2","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:54.287Z","timestamp":1789120494287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"GET /assets/fa-solid-900-aa759986.woff2 HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepaa.xyz/assets/vendor-fa-67efed7e.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:54 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\npriority: u=3,i=?0\r\netag: \"6a881b5a-26a0c\"\r\naccept-ranges: bytes\r\nage: 305\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=40WLoBKXwXWg5zUGpRY44O6xbR%2FaU5CAR6rEIN1eDu%2BC44fVgBlnwBXRvlgg0ldGwMs%2FtJMFWWvC6e0ffk5wX0aNVwRPPxOQNU5CWWQJXw4lPgY4%2B1RFb%2BTpSypiAA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb314a14b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 158220\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":158220,"size_decoded":158926,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 158220, version 775.1280","md5":"4a6591ab5460ae5cbff1ecbd6e52193a","sha1":"7cd8afd6501962fda35d66f0e4c3b8815ac471d8","sha256":"aa75998623a391e61c6901794ace832e3ecdd288b56d608f21bea0411acc0b8e","sha512":"96c5d3283b71613b595b6b0420333bef5d64451af05c59dde27ec5b3e7cfe6e9549c604cddfbcb79cbc0fd4cd6f2e22a130c9a220b1b7ef933ac9df8c8e695d6","ssdeep":"3072:RauSB5FANIRLpsBaBrJGNG3ECNQztRvHHqkqLrlF:guSqN6ptrJGo3POh9KT9F","tlshash":"0ef312a710c6b95684a3a51b336adeb52c3ed363fcb6cd73be340114689da9c2e4d190","first_seen":"2024-12-19T10:41:23.153533Z","last_seen":"2026-09-11T13:42:19.450091Z","times_seen":35946,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.081bf9bb101254f56bb0a9a5cb796522c.png?2.0.1787304794119","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:54.501Z","timestamp":1789120494501,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.081bf9bb101254f56bb0a9a5cb796522c.png?2.0.1787304794119 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 11 Sep 2026 09:54:55 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5509\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA3CFEFD5B2A23830E81CFA\r\nAccept-Ranges: bytes\r\nETag: \"49BB8806BB89E59DAD478A199103D401\"\r\nLast-Modified: Wed, 25 Dec 2024 07:16:50 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 278986811476547567\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=81bf9bb101254f56bb0a9a5cb796522c.png\r\nCache-Control: no-cache\r\nContent-MD5: SbuIBruJ5Z2tR4oZkQPUAQ==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5509,"size_decoded":6071,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"49bb8806bb89e59dad478a199103d401","sha1":"7c7e04c23ecacd45cd9597384f454520b46372c3","sha256":"d4a994da74aff6dd29824839619894faff7dac1d1efa4678c40db74d8b886462","sha512":"f470c807c20ffd6b29d2c5cf48337af618a4dd82a18f6e86ab41d514ea25c8db4766bc1eda49059681f7f02d150ee391bc8ea1a59c6449b57fc5fa8c736348fe","ssdeep":"96:DxjC1uhQMQvUW79i7SSK0QBJe2+q/Scnu3t+89gy3MjBKTbWdl7RvUtONQZe:12BMkd5iGF04JRz9OtGccAsPce","tlshash":"b8b18d1db8418b30c3fcc2add48d96a0a3276c8f1a212c145f9ad3126dc999ce19f8e5","first_seen":"2025-03-27T06:51:59.173807Z","last_seen":"2026-09-11T09:55:41.504908Z","times_seen":64,"resource_available":false,"data":null}},"time_used":1371,"timings":{"blocked":1097,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/imtoken-early-detect.js","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:53.297Z","timestamp":1789120493297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"GET /imtoken-early-detect.js HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Aug 2026 09:32:06 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x0ojlpyp5O0Sej5v6mQQpSWwkaPjmiVkYw7HdlUHq%2BQF2agsd%2BtQTSPjrg9yxGomfEyyXHM8RArYT6Wn7tdQOkHrBjCyzUZ%2BotIT4MQ9yB36FMSB3XUpSMqWQ0uVZg%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b16-6c1\"\r\nexpires: Fri, 11 Sep 2026 10:34:16 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 40836\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb2b189fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1729,"size_decoded":1524,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"bb1d9bd2e56f1eec2c68da7e0e3aa5cc","sha1":"e9002788eab7183ff408bd7ed2658f0a5a022538","sha256":"ad86db347b0a576fde6078c4645935933dd45bc82ef7da793711936e502baf1f","sha512":"deb9bcfad93f3e71ee25376b5c87fd3775b45419eb45b4a2a8c841c9d63296081f69f5a8f09deb701c9618c1fdcd42774b1495f10422d3a0048a7f1d5667f803","ssdeep":"","tlshash":"6d31cc5c6db781918713a37d83ab5a00b527902b5c0dce40b4ec49f45fb076b5727eac","first_seen":"2026-09-11T09:48:23.975407Z","last_seen":"2026-09-11T09:55:41.507666Z","times_seen":7,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/assets/vendor-vant-3e081598.js","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:53.305Z","timestamp":1789120493305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"GET /assets/vendor-vant-3e081598.js HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QMwNwMm%2Ft0ff5%2BAh7oqlxNjJsaHBdpZ%2BkUNsS6ud2xBcASmnR77FHujlv%2B42qDUh3Rdb9Zc0K41FzRvM%2Flcf%2FBtT3iqI9%2FYmj3kc1L4QAKG2Zde%2FQF0gakKuht8lOw%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-1e50f\"\r\nexpires: Fri, 11 Sep 2026 14:21:18 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 27215\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb2b28a5b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124175,"size_decoded":43934,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65244), with no line terminators","md5":"774e6400289e3742a2c92b8724a6adcb","sha1":"3fe8d0fce34c7be04022a500ad279ab6dcfcda12","sha256":"4c229efb866afd0869a54bcd6b76f69411fb18922100efe6969a05bf8380a2dd","sha512":"0ab52fab5ef8f13b792d659b43ceedf53ab65716f2880ad8457e96f290cfc27087198aca0bd153c30bfc32eeb44d5cece592c802ec875a087230542347e19560","ssdeep":"3072:V3MW8Js2EAhRfDtZngW6OzJJT4wWhEf2JPsLZJLz6bm7QqVwUyE6BWqZoVYhN:V34EAhRfbzT4wWiDV7VwUkZo+T","tlshash":"76c32ad1b8c6f538977b94e5406b0510b6391b48b009c5e0f07ead8a2f69dd4b2bbf2d","first_seen":"2026-09-11T09:48:23.958638Z","last_seen":"2026-09-11T09:55:41.50904Z","times_seen":7,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/assets/vendor-echarts-ac6706e5.js","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:53.312Z","timestamp":1789120493312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"GET /assets/vendor-echarts-ac6706e5.js HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U294RwIwAiA3rCfDHxrMrEh2yAG1GSS5fhdKIPMlMR4%2BNbMld4y42ZwIuDCUYFGCt69902Glv9Dnx0CpjLalUJfH5EME4wkdN3SX6Qek%2FezCxKPJ5T86U4A77FdYEw%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-f9d51\"\r\nexpires: Fri, 11 Sep 2026 14:21:18 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 27214\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb2b38a9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1023313,"size_decoded":336232,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d0f68316ae5d0bb7ce326fc86f3322ab","sha1":"a8f671dc104753a02466b8101b29bc0d825b1471","sha256":"47f7e12f4386fb530d2d22d8b8f45c9be73c593130c359cd62c067f8e2d15ea7","sha512":"aa7f12a99dad5208015a905190545d7abcfd2128e0c8200e558ce280cb7ab6bc9139e84288925829402dfd73e4298c4ce519f97281c7b3ad4c579ace3ce07b8f","ssdeep":"12288:kFHycAbfS+3O4urBgaBjgLDfhQWBIqr3s96v16xLxsWw8ilNH9G2uIgd8Q:iWf8BcDf1BFr3sLbsL8ilNH02uIgdX","tlshash":"1025099cb654743543a73174066f050f933a680db50b86a8fb69e4ea6cbd44f223bf78","first_seen":"2026-09-11T09:48:23.917363Z","last_seen":"2026-09-11T09:55:41.510064Z","times_seen":7,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.0b08dbb888c1b42e5a859b6010539087d.png?2.0.1787304794119","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:54.499Z","timestamp":1789120494499,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0b08dbb888c1b42e5a859b6010539087d.png?2.0.1787304794119 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 11 Sep 2026 09:54:55 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 65000\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA3CFEF337D7937387EC377\r\nAccept-Ranges: bytes\r\nETag: \"1FDB2BE7D275D08F83B3AC6BC65B916E\"\r\nLast-Modified: Mon, 17 Mar 2025 16:33:08 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5334343635132864268\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=b08dbb888c1b42e5a859b6010539087d.png\r\nCache-Control: no-cache\r\nContent-MD5: H9sr59J10I+Ds6xrxluRbg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":65000,"size_decoded":65564,"mime_type":"image/png","magic":"PNG image data, 618 x 615, 8-bit/color RGBA, non-interlaced","md5":"1fdb2be7d275d08f83b3ac6bc65b916e","sha1":"abe293534a51525a4ee55c38804652a4864d2bfb","sha256":"672534ad183f8a670f6ea316c1c2860d5bd796337172489870d07a03eb9d5fc5","sha512":"7ef85915f3209b5f087f354f3c633b313d88f9aec6ae12a47f45b0f872ff921e375f9bf8965acc30ae050849557d856d26a31557241e4a43ae3e66c63ba5641a","ssdeep":"1536:HA/qKDvL1sHT2HATx/rkWuTkhrAIcf7b/g0bOhmSbE0mnKXq:kVTOz2HAXSTbYlhm/gXq","tlshash":"2653025d38aeb676c541bf381be90c88e422867164d8716f64c17e4cab3f471ef2a90d","first_seen":"2025-09-13T09:49:49.925307Z","last_seen":"2026-09-11T09:55:41.511006Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1352,"timings":{"blocked":-1,"dns":0,"connect":268,"send":0,"wait":279,"receive":264,"ssl":541},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-11T09:54:52.604Z","timestamp":1789120492604,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:53 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a3b4e%2FrXasKmhJJPWqz32Fsw%2BR0eaUOZ8ES7Plf1lo1GQ0GBACVr0sCN1hFwNBT5HaBAwynzX4uVhgIZDZocZ80VKszHTi9MvVfF15SCbJH6wweG%2FCSQtapUMF0%2F%2BQ%3D%3D\"}]}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a395cb27380ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11268,"size_decoded":3847,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2209)","md5":"c12da69ceea46e3bcc6455b250e2114b","sha1":"ade2ba0cc30710dca8bdc136cfcb35e753c99a47","sha256":"8190960a9585dd098a80ec59ae7869433f054b53e9f9055b863fb258164520bd","sha512":"3af34a2834c4038944593e60abe6920bd552ad818da74de30769dab883dd304a9a9ae9fb8dc0ccc4d6fb0b902a6b3217a300f38d6877a0b3952f5e9290809c2c","ssdeep":"192:nPy6CQ4BdcxwX52C4JVFuwy9XwZCxfc2nfD3bTuB1ni7iJfw:nPgd9X52urCZCx02ci2Jo","tlshash":"8d3265636aa0c856137681159adbf008de13918bce299c54f1dd00ed5fd5fe08ae37be","first_seen":"2026-09-11T09:48:23.9741Z","last_seen":"2026-09-11T09:55:41.513014Z","times_seen":7,"resource_available":false,"data":null}},"time_used":518,"timings":{"blocked":-1,"dns":54,"connect":19,"send":0,"wait":445,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/assets/vendor-fa-67efed7e.css","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:53.324Z","timestamp":1789120493324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"GET /assets/vendor-fa-67efed7e.css HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HMILBy00bTlym%2BKAmEKNsxzZBICR4xXv9df%2FgtyhhXWntYIRFPqe3P15pEyarXf4RQLfMhY6MO1wzZOD%2FYonnSqtkhQ2e%2BbPP7lD8HAU9muetpQOB1NHcs3cn3nfYg%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-11b41\"\r\nexpires: Fri, 11 Sep 2026 10:34:16 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 40836\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb2b48b5b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72513,"size_decoded":23123,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (61941)","md5":"75a70d108a98a6d2fc02ea23d4684fdc","sha1":"40c45536f02f27bbdbabda2dc3f2699f61e53140","sha256":"67efed7e1c238439780e3699bd926674415afc6cf3bab1adacc41632706a3cee","sha512":"ed85fc0cedd6eb09816d57d9971ea34fc092bf7e6e4752434e97a66dc5d70166c1fc313446fd99cc503e382c7b4aed4c6107f561cc8e21f7df9aba3d75af29f2","ssdeep":"1536:/WMnMOMgMwMtMFMHQ19O48KR5AgBtGZeoE9dH2kn9ZO:hN8KPpGZePx2kn9o","tlshash":"7e632cd590b0016bb1a6cd7f75a4bd34a632ebe4bd9d5486e1314ec0bd829ad324f332","first_seen":"2026-09-11T09:48:23.960215Z","last_seen":"2026-09-11T09:55:41.514085Z","times_seen":7,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/api/common/getMt5Amount?coin=palladium","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:53.928Z","timestamp":1789120493928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=palladium HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://safepaa.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:54 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wVPI07bZGx8wUgx5xbEfREl3fKPc%2BPdBwIpupWhpm9jaaxaURT2aU06DPVcdxvLuvt8R5lKBOvDpOdxNfxMVNQU2WDe6M6jXeOawSVisGxpaWO2gGlcqxky5Q%2Bk0XQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://safepaa.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb2f09abb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":896,"mime_type":"application/json","magic":"JSON text data","md5":"9e16303f6cb4975c227eb7495c11ce18","sha1":"9dc372af454bfc4139e151ecaf37df5e0f52bacb","sha256":"da327e9935d0e2471a9a5aaeda5838b60fa807d95203fb9000da963141b35053","sha512":"913771fc98a32e4214df392bde5b15c5ce6b8bad52a2d8a447558155d644bbe318823df222bb2b1fe9da14478c4556c3ae845809dfccfba8a57e1787ff390f62","ssdeep":"","tlshash":"b39002552c188642e88300a595461204012431602e25d34ccc5d512980981623440868","first_seen":"2026-09-11T09:55:41.515028Z","last_seen":"2026-09-11T09:55:41.515028Z","times_seen":1,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/resource/svg/dark/gou-yuyan.svg?2.0.1787304794119","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:54.518Z","timestamp":1789120494518,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"GET /resource/svg/dark/gou-yuyan.svg?2.0.1787304794119 HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:54 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=su%2Brj%2FdRJVQ%2BcVT7tkYnqi8Oi8OVn3cngv4qktQU%2Bq1F2YCtFiKEdQyamyooIdnojLCnKWybTjZsfBbqOI7%2BnX6SaY9rJNp%2BrVX%2FvO7ql22q%2F7mgYODAC8Mc9x%2BZFQ%3D%3D\"}]}\r\nlast-modified: Fri, 21 Aug 2026 09:32:07 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a881b17-105\"\r\nage: 3334\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a395cb32ba4ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":261,"size_decoded":915,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9be08682406830b20d26c7d6ea6497a9","sha1":"726e8e49fcef32c83adf41278a0b0d81d64cedc9","sha256":"6f1072b132109de71d9ceb899c1b0d2e5af12901cfc5e79d048301f455ed9ad3","sha512":"3d78093203c31f9573becde02ec2c29e819e33b8be59adbf2562561e14da84f201fd93198aeba1dfbd73ee4a0ecd5c3a8e3efbe4faa3e58fef610cb34b70a3e2","ssdeep":"","tlshash":"53d0951fe85f400c605bcd5009e03d44916ef05557d605fdf9d258bbc1224513479d58","first_seen":"2025-04-25T08:37:00.52435Z","last_seen":"2026-09-11T09:55:41.517197Z","times_seen":107,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.01b5d52e77b984c1582c5e6d357027788.png?2.0.1787304794119","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:54.516Z","timestamp":1789120494516,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.01b5d52e77b984c1582c5e6d357027788.png?2.0.1787304794119 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 11 Sep 2026 09:54:56 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 51487\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA3CFF060F7333639F3C9B4\r\nAccept-Ranges: bytes\r\nETag: \"75292C064DF52B22550F1510C40D725F\"\r\nLast-Modified: Mon, 17 Mar 2025 12:55:29 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16056638951013891537\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=1b5d52e77b984c1582c5e6d357027788.png\r\nCache-Control: no-cache\r\nContent-MD5: dSksBk31KyJVDxUQxA1yXw==\r\nx-oss-server-time: 6\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":51487,"size_decoded":52052,"mime_type":"image/png","magic":"PNG image data, 308 x 308, 8-bit/color RGBA, non-interlaced","md5":"75292c064df52b22550f1510c40d725f","sha1":"d9b106d551435f324a94ff8f3757fdc84fb3c50c","sha256":"4f607f213dcf0244743e2a1d80e348d3eed9021189c848b163f34d47a804b25d","sha512":"43fc2fd887c4aff5aac32d66b0dee77e8455c7de5910ddb85ec4553e29a71b00cc72edece3a83081664a51c9312ead0767fdc74a4a9f839b04bb3a3668085e61","ssdeep":"768:da2f8AuiJprGsKMhEDJGrTugTNK7APom7T3Og15xkX3gd6ui96QZyRSmNdxUh+9:dFf/ut4EDsT5Ph/3OpXwdxUG3qC","tlshash":"5d33012ff94f46fbe3d78c4b91da91485e2284039467f5c80f83c2ca35549b6ba64637","first_seen":"2025-09-13T09:49:50.009841Z","last_seen":"2026-09-11T09:55:41.518066Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1908,"timings":{"blocked":1588,"dns":0,"connect":0,"send":0,"wait":287,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/assets/views-731a7d5f.css","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:53.321Z","timestamp":1789120493321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"GET /assets/views-731a7d5f.css HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y9lPvPzPR6FNpkz4KgwONv5c99%2BEnfrTo1ijG9heXOxpkFRMSegEtNR6orMvSNtZDVWNZ4ksUq%2BqBJhsPIHG4jkL7Lnwz6ALhRp97XJd9mmUI12NlVQ1uJTa6LX3bg%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-5cc98\"\r\nexpires: Fri, 11 Sep 2026 10:34:16 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 40836\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb2b48b0b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":380056,"size_decoded":52032,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9f4a4a6a8327418a1765218294d985a9","sha1":"c757d0204b102cf9f347f62f7e5564bd5ae41ab7","sha256":"731a7d5fda6524290e39769cc39fb8a0fedbddc4c7db52e9a1631db1aa3d0757","sha512":"9fa99d1bcbe5f6e477e9212c07696ebc91a6746f38c9fc10d25a52dccbce1de834001a870eaefbc5ea8b363f3b7753a3b40757eaf626aded8e026afb36b45289","ssdeep":"6144:vCXtzt4r/19Q5qEhSP4tDX8AsxDnCytn08DR8Tfe+gYcnxFp5:ag8TfexFn","tlshash":"a184c7a9b35c1539bc7bd59a3da4e68cd014be52e0439ee4e61756260ccbbe33b2070d","first_seen":"2026-09-11T09:48:23.921905Z","last_seen":"2026-09-11T09:55:41.518907Z","times_seen":7,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/api/common/getAllSetting","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:53.638Z","timestamp":1789120493638,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://safepaa.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:54 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sweuK795jpdQtyZc%2FFh7np1ZVWpzP6iIXCEDWbrAx7Qd4Zxy%2B6cYaTtTechSmMOKAWnkshhvUolrOt9R97YOcIYvti24xB7N09b4zI4l2UzZY9MXAugGEqbfkped6w%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://safepaa.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb2d38f1b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30340,"size_decoded":6753,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (29816), with no line terminators","md5":"40a44620465ddc50e51fb9e0b9c8c9de","sha1":"883886686846642319f50d84b444934109560db8","sha256":"529fa672d28ef8372ba4e46aa00ff2f7d7b25d481a9fb63c1178434e546ed428","sha512":"78e8c4361fb1a2b9c1e8760fbfb257aeb9da95c393337e6f7ab841f9fa081edb009fa7936c833452a378416da5bd3c0dc9f2ae1af8e9e5d4600db11f81b991a7","ssdeep":"384:Re9gViwJzLMnYE2hBlXcAMU9rgk3jMbSrO:Re9gViAUYEIQbz","tlshash":"fcd22f5776c9c87956f20cc9c47b6d4ef9cc386faa80888df896ad4cd059df7884b04a","first_seen":"2026-09-11T09:48:23.943476Z","last_seen":"2026-09-11T09:55:41.519707Z","times_seen":7,"resource_available":false,"data":null}},"time_used":469,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.0a1ec85f52f324ca98f7e9af631aadc43.png?2.0.1787304794119","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:54.515Z","timestamp":1789120494515,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0a1ec85f52f324ca98f7e9af631aadc43.png?2.0.1787304794119 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 11 Sep 2026 09:54:56 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 177710\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA3CFEFD5B2A23830B41EFA\r\nAccept-Ranges: bytes\r\nETag: \"6C74B01A03506E414F4F7BCF092133F5\"\r\nLast-Modified: Mon, 17 Mar 2025 12:54:31 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17403262481213564219\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=a1ec85f52f324ca98f7e9af631aadc43.png\r\nCache-Control: no-cache\r\nContent-MD5: bHSwGgNQbkFPT3vPCSEz9Q==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":177710,"size_decoded":178276,"mime_type":"image/png","magic":"PNG image data, 615 x 615, 8-bit/color RGBA, non-interlaced","md5":"6c74b01a03506e414f4f7bcf092133f5","sha1":"b34d08131374e90fba43714f92b9d9316cc573e0","sha256":"eb2a5d7804d1557bb66d678faeab6eb957b1f21d914d21b48a8e1f63693847f5","sha512":"72db7cde8f27114df83063abc212eb05518c7a2fa7f8f49a445ff6c49d428481fc90e4fb50e2c50f687dbfcb1b780cab19aa9158e9ac417b965c40600b58a976","ssdeep":"3072:1Ip0S96ICr8xnSKLTURLe11B0FTIphvtdeckaD6BQzG3QAb/CJfPQ5Z4A0TI/6u9:1x7r8oKLBcTIphb57z4qRGZ4pHAg2","tlshash":"0d041252d5a64bfde11a38066fce14198d6fb070c203eeae41fa69ee1356cc8c8752dd","first_seen":"2025-09-13T09:49:49.948418Z","last_seen":"2026-09-11T09:55:41.520521Z","times_seen":17,"resource_available":false,"data":null}},"time_used":2202,"timings":{"blocked":1366,"dns":0,"connect":0,"send":0,"wait":282,"receive":554,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/platform/yongzhe/logo.png?2.0.1787304794119","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:54.519Z","timestamp":1789120494519,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"GET /platform/yongzhe/logo.png?2.0.1787304794119 HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:54 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 21 Aug 2026 09:32:06 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=20P%2FIiTdmPFpT6W%2FiPu6zgGOwDSlKkE%2BzNFTeR77P2%2Fpx3JmMIl6qJFS7Bv1F7OqEqrQYVQ3omENWRPW0d1DmhIMeBaioA5T08HEFi7y0%2BwFuOwqmsjRTkSQytgBeQ%3D%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a881b16-be37\"\r\nexpires: Sat, 10 Oct 2026 10:27:25 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 84449\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb32ba4bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48695,"size_decoded":49172,"mime_type":"image/png","magic":"PNG image data, 157 x 191, 8-bit/color RGBA, non-interlaced","md5":"817c35aeb6dc54aa67038959ae22bd0d","sha1":"28f7beab938e080e75c9d42aa005099a7f5512a5","sha256":"5f153f71d00bf571b7955e25e9de6c9fff2cef5d51e57a622df136c644e827bb","sha512":"655014d0f22686237f29793ffa8930a11ed36e2f91bbbe7a4701d0c29c4cb3262e9c7d806712861dcdaff30f2d5dc725bcbd09b9ef6074b0f7e1cca7fc1a47ee","ssdeep":"768:wVYvt1U+btsGQY7Ns/V2moMGxjBLkU7stRR0pZlGrEb8JiQgsq8CZh:wVAo+JHQ0NkVpOxkUqaZlG4b0gs6b","tlshash":"db23f1a968eee832cf40eda1559208107f8d10f3d6c7018ecb55a6e7ad6c105563faee","first_seen":"2026-01-12T06:59:54.775123Z","last_seen":"2026-09-11T09:55:41.52138Z","times_seen":12,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/api/common/getMt5Amount?coin=zinc","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:53.922Z","timestamp":1789120493922,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=zinc HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://safepaa.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:54 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4o1vdtLXSjnPMO%2F7%2BoAS6FWv01TFrU5YLk5AYq%2BjQWlubnbLBxx3NP%2BtBuWjb3dNInSHzl6f7H2Vj1nF%2B53Ep2huBIW1dfdjNG8MEqETp0JMG3Feg9rugxOnuuwb0w%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://safepaa.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb2f0987b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":902,"mime_type":"application/json","magic":"JSON text data","md5":"3b89fef9fa1ec8479e09035f1a305074","sha1":"54c54f586372432e5948ee906a643be8ee021e72","sha256":"2c145553705ebf9079ea407a45d5817a7a6e76c03f44d266001d788166b82491","sha512":"0943386a1ea297a32d46fc0cbab3e4ff5962080d3721016cc3ebe314ab28a51bcdbcec63d08302add6c43cc84df0502c851ce8f39ae7401d80eb83050115c478","ssdeep":"","tlshash":"ff9002553c188243a88310a5950612044124316027699b88cc5e51298098163604089c","first_seen":"2026-09-11T09:55:41.522169Z","last_seen":"2026-09-11T09:55:41.522169Z","times_seen":1,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.0aed821d9d40f4452991d4c6a8e6fa3a3.png?2.0.1787304794119","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:54.498Z","timestamp":1789120494498,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0aed821d9d40f4452991d4c6a8e6fa3a3.png?2.0.1787304794119 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 11 Sep 2026 09:54:55 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 12556\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA3CFEFD5B2A23830A81AFA\r\nAccept-Ranges: bytes\r\nETag: \"14B415ED0A3655B62E78EC234990BC12\"\r\nLast-Modified: Wed, 25 Dec 2024 07:15:54 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12852473166245111393\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=aed821d9d40f4452991d4c6a8e6fa3a3.png\r\nCache-Control: no-cache\r\nContent-MD5: FLQV7Qo2VbYueOwjSZC8Eg==\r\nx-oss-server-time: 11\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":12556,"size_decoded":13122,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"14b415ed0a3655b62e78ec234990bc12","sha1":"b0a80be4c4f8e4c9f9d00711fcf8656fb020cc85","sha256":"0beea878c1ea5844b65a4686696654fe5adba210beea0489c45b40ab5b652499","sha512":"61a935ea01c21844355ebc98bf23d65c35cdb3c7c9759c6ad80883d184244813396cb8c6d98bcc58e3504642cc490610560faf8f0eac81039eace1f3cc6a8434","ssdeep":"192:3b9K1tLI4BayVPpEgg9/+Ufcn+wA4DRsf/eLs8j1lLgr2Jlk9eLk8htD281++UFa:rc1t5YmGc1AeI8ux8Lk8ht91+/Fa","tlshash":"8c42c0abb48f4c2a90adc0719d4974abe3f21cd41d64e2291ed0bf1c7114663299678b","first_seen":"2025-03-27T06:51:59.252862Z","last_seen":"2026-09-11T09:55:41.524802Z","times_seen":84,"resource_available":false,"data":null}},"time_used":1090,"timings":{"blocked":-1,"dns":0,"connect":268,"send":0,"wait":281,"receive":0,"ssl":541},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.0cfc948157ce44f538a6aeadeed2c7ea4.png?2.0.1787304794119","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:54.502Z","timestamp":1789120494502,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0cfc948157ce44f538a6aeadeed2c7ea4.png?2.0.1787304794119 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 11 Sep 2026 09:54:55 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 184574\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA3CFEFFC567C35397F87A4\r\nAccept-Ranges: bytes\r\nETag: \"F7126EEA8DB336AAFA1B10DD2C32E690\"\r\nLast-Modified: Mon, 17 Mar 2025 16:33:31 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1166810706192653567\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=cfc948157ce44f538a6aeadeed2c7ea4.png\r\nCache-Control: no-cache\r\nContent-MD5: 9xJu6o2zNqr6GxDdLDLmkA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":184574,"size_decoded":185139,"mime_type":"image/png","magic":"PNG image data, 615 x 615, 8-bit/color RGBA, non-interlaced","md5":"f7126eea8db336aafa1b10dd2c32e690","sha1":"1d80f400ac3555bd897f88bef49b8d6866604a17","sha256":"e2378c56eacb12fd2ad199d129f580ddb3e9dfb737d3a2588e5b3f1339d5c12d","sha512":"9015001f580d69832847d29436233df1e8b2f8b79fd1a5f5ab2f5f0fd5f43709006a05532b63a9693edd2d59b238379e955e531c508f1c2b5dc779be07f233cd","ssdeep":"3072:aTlpVVxo1WBkGJ8AMYiTaTqp4ikAG/o77v/TkvMS4hK//axmbjimZ:epfa1mkRAMPWqp4i9Gu3AvxcK/SxsjlZ","tlshash":"680412500fc9945c37fb881a05812a49f73eb59551bac1c6def490bed4a3ba224db3f0","first_seen":"2025-09-13T09:49:50.015639Z","last_seen":"2026-09-11T09:55:41.525606Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1887,"timings":{"blocked":1296,"dns":0,"connect":0,"send":0,"wait":276,"receive":315,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/charting_library/charting_library.min.js","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:53.300Z","timestamp":1789120493300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Aug 2026 09:32:06 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XUy3ninROAuS9P%2BDhTAJTulrqSfKTNNVeyrINr6DGl63lqrPmPcdsdymxQdG6%2Fyw2D4gv9El5X8BRA3U5V399%2FzM61%2FaqK6baAllS9mWENUbS6px6XbB5Ec1HvLLYg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b16-2a6a\"\r\nexpires: Fri, 11 Sep 2026 10:34:16 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 40836\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb2b18a1b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10858,"size_decoded":3934,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-09-11T10:05:44.627817Z","times_seen":1430,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/api/common/getMt5Amount?coin=copper","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:53.921Z","timestamp":1789120493921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=copper HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://safepaa.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:54 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vHtRrrVL7B6JmNbVZt8I7EC8q0FJV%2FMBag3qiRtJJqmXbrV2INSvrI%2Fj2lxDPqO2JLRQRyt4WGSr20b3Rgsf3aHPfXsomZnf6ZoQlKiqTP0YN6rBrT62FkiWw%2B4msQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://safepaa.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb2f0970b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":898,"mime_type":"application/json","magic":"JSON text data","md5":"e8ae2e7bba504ac38e749f43d4e047e8","sha1":"09fe46c389547de6fac4252395281ba714881a3e","sha256":"c1b461ebd83ef6b25a96de1e58022d98573efcdcc2bd01195eea8c19a68b2b47","sha512":"36eda7dcbaf634f61e0d0106941f61a273eb2fd414dd9a5d08d58af349ccba591e9f29a64e55d6226bdb458a75d76d55a52f3400d1af260d7ad41289bb219c59","ssdeep":"","tlshash":"5b9002552c188242a88350a5994612040024316426269248cc595225d2c81762041958","first_seen":"2026-09-11T09:55:41.527421Z","last_seen":"2026-09-11T09:55:41.527421Z","times_seen":1,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":442,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/api/common/getMt5Amount?coin=platinum","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:53.929Z","timestamp":1789120493929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=platinum HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://safepaa.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:54 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yr2CCo94bXRsV3I4wF6mqSKJUczDxea9juM0TgVruSE6TeuehyrDKCuH7DyBlyCfadA%2BKWSOfQzKOhglPvIV3d4qs1N6oDUqJFmZtrdv7EZNXBuP2HEx6tK%2Bk9UUSw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://safepaa.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb2f09acb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":896,"mime_type":"application/json","magic":"JSON text data","md5":"1b458a64337fabd73d98df425fe1c869","sha1":"23ea503d4f32bb8481543fec9e0321e0612a42ea","sha256":"53840fcea3819933b8d96a75798b143d75c0d1c8c10ac8a719f3801aca6ba381","sha512":"67bcaaf646eb776038c0a658748a407a6b3ab38a8b6212736bc1333510e7ddf0ee367d2732c940d3ef18d83c5287a733cfff4494a462a34a53243cacc4598ec0","ssdeep":"","tlshash":"719002962c188242a88700a5e5061204112432642625d34ccc6d552580881622440d58","first_seen":"2026-09-11T09:55:41.529494Z","last_seen":"2026-09-11T09:55:41.529494Z","times_seen":1,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.0c6585e6f9b184811b02fcd64531780d0.png?2.0.1787304794119","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:54.514Z","timestamp":1789120494514,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0c6585e6f9b184811b02fcd64531780d0.png?2.0.1787304794119 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 11 Sep 2026 09:54:55 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 101468\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA3CFEFCA8B1C3031830AE2\r\nAccept-Ranges: bytes\r\nETag: \"DC27ADB9DAAC87CD6BE8BBE99F037C5F\"\r\nLast-Modified: Mon, 17 Mar 2025 12:54:15 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6812464773390086848\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=c6585e6f9b184811b02fcd64531780d0.png\r\nCache-Control: no-cache\r\nContent-MD5: 3Cetudqsh81r6LvpnwN8Xw==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":101468,"size_decoded":102033,"mime_type":"image/png","magic":"PNG image data, 615 x 615, 8-bit/color RGBA, non-interlaced","md5":"dc27adb9daac87cd6be8bbe99f037c5f","sha1":"50097e44ced6105a3573b0b311d3c26d3c86f621","sha256":"b68d7021c6c4601a665d054c50831b782f4706b5a0665b40a48a2e0123d52d31","sha512":"424d6505b442eea1bbc35dcd29027e0b5731aa7d8311379f5a6967d11bf4b4a76c4056032ded273ad054241cb40044d0ef75a137b636177bbb2f0b8dfb15fbd4","ssdeep":"1536:3SBiwz3bh6g2OtjrB7a8fjvypyOOC/QnhUJIvWgnMBBbNa4C6lf/cr7q8GKvvmnw:CBv9I8fjvygvC/Qhg8MbLF/ldwuj0","tlshash":"45a302a704e61abf03d3c68e99c898c81543040adb799c7ee478d8d6ce8b5c6d841b2f","first_seen":"2025-09-13T09:49:49.917363Z","last_seen":"2026-09-11T09:55:41.531148Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1909,"timings":{"blocked":1343,"dns":0,"connect":0,"send":0,"wait":282,"receive":284,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/imtoken-optimize.js","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:53.299Z","timestamp":1789120493299,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"GET /imtoken-optimize.js HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Aug 2026 09:32:06 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gcIYWPRuX6sGVw9pHJfGGlKphJ5PKRXBOaO%2Bz9J8HBMBuc2PSLRqbnMUg4dRz3ITrBs1FkT8EqObnB6oCedv8D7oEaXDSNJjvWizXhfQPcgH5XfJEwNvKLRNCD%2F2gA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b16-1cc5\"\r\nexpires: Fri, 11 Sep 2026 10:34:16 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 40836\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb2b18a0b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7365,"size_decoded":2778,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"b12816fb8813cda7044dbc67cd195a45","sha1":"da52d3feaede4c9f4093573a98ff75beb3cecb9b","sha256":"6c67c9545e8b426384447e8208e2e0c6926c31ffa82f00e8eb893119a0b3b6f9","sha512":"f6d9d3e9616362ae5bef3af6649def266960cdb79914653a2319c19005ed997ef769796a35d5291c4cd23aad67e7ff67d02366b97666ddc2ade6e7b90cfd48f9","ssdeep":"192:XCnGdutiZsHmibiZGHmS8YFyBB+2DWquC5:9uUyh2MiluG","tlshash":"70e1206f15f20130077320bd0bdb6645f523e25b6a1dee29b69c43981fe0a1756d32ee","first_seen":"2026-09-11T09:48:23.919886Z","last_seen":"2026-09-11T09:55:41.531924Z","times_seen":7,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/api/common/getMt5Amount?coin=xag","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:53.918Z","timestamp":1789120493918,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://safepaa.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:54 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MBXbXfycTj%2FhQIQUbCC4gR7Flm5jTSjXM36V8PrjQTlYLlmtE1uP%2Fvk3PdHBI5evh%2F%2BaCBXolJGUJcV2YKa%2FzuruK5y3qRGW%2FIJsehWiJZoCt2NRO%2B9BuGv2fHQ%2FOg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://safepaa.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb2ef96db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":908,"mime_type":"application/json","magic":"JSON text data","md5":"09a440895ca6763c74f25cdb4572abd1","sha1":"6c97e97f17f836df574138589d246e62c14cfc3b","sha256":"2214b5032f54df08449cb2b343f80166f4cfc5ea39cc6c6c987ed7774ee05019","sha512":"d23dde6de6214ce787457de7687619638f80eb45798d842df4f003d7add5de8de03c10eb5de0c7abab51de88e79af047fca8792cd954db7f392b97ea10b456d4","ssdeep":"","tlshash":"6d9002952c188252a88300a5d5071204006431642e259348dcad5165c0881622044858","first_seen":"2026-09-11T09:55:41.532606Z","last_seen":"2026-09-11T09:55:41.532606Z","times_seen":1,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/api/common/getMt5Amount?coin=nickel","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:53.925Z","timestamp":1789120493925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=nickel HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://safepaa.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:54 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zHIaWo08%2FGBD9kDDbAXvTvDoqmvUsOq7wZyLRUu8nqNRkjHaMNJ1Qs%2BSBx1BtDa81dNs7TxdKKJFGTl%2BWR6VXfamoeLt1844FYRZFlic3t6bAeSlVXIxmquh4Y2DOQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://safepaa.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb2f0996b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":898,"mime_type":"application/json","magic":"JSON text data","md5":"9fd1468e618f577c0877e286640220e0","sha1":"d7c05bfc3ba42b78e1986718cf5bf6d3634575b8","sha256":"2c50de78e35722f3099a1be627a6efc62623364150a6df823b57674d010b0263","sha512":"674b08fdd5770694c8d0902fdda4ec4c647d4f4931eabb9cce92b10245152796cc1cbf7585333443ab9b8bb28d30ffbbdafd5523b9533e7ed4272403aeda7332","ssdeep":"","tlshash":"389002553c188292a88300b5d50622040024327036299348cd5e552690c8162204086c","first_seen":"2026-09-11T09:55:41.534201Z","last_seen":"2026-09-11T09:55:41.534201Z","times_seen":1,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.08806df71d3394f95858ddbea3a50ae7d.png?2.0.1787304794119","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:54.494Z","timestamp":1789120494494,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.08806df71d3394f95858ddbea3a50ae7d.png?2.0.1787304794119 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 11 Sep 2026 09:54:55 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4741\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA3CFEF60F733363962C4B4\r\nAccept-Ranges: bytes\r\nETag: \"0D3CC761EBF53DFD01A767973B166C3F\"\r\nLast-Modified: Wed, 25 Dec 2024 07:22:46 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10212476019059771858\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=8806df71d3394f95858ddbea3a50ae7d.png\r\nCache-Control: no-cache\r\nContent-MD5: DTzHYev1Pf0Bp2eXOxZsPw==\r\nx-oss-server-time: 11\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4741,"size_decoded":5306,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"0d3cc761ebf53dfd01a767973b166c3f","sha1":"ea63beee2c5d24534147b351a9b631aaa8c8a4ce","sha256":"854dce1a493d669fef9179d178af206dd2bdd9c7863a0bd18d0777d24b135527","sha512":"4642936fb3a4794952bd4086b452a2f1366f50278de0764fd0f1f2f486d67ce10b51783df9eb1394ae871a30b7031fb9a59ac7419293ae0622e94e0d1198740b","ssdeep":"96:HwoMkyqrtz9MoMFXQhJlR/RQSmvTik24XsKe3JI+abyX5vpwdy8NypD:HwoMk7hugrLRQSmvJ2qI3y+5XJpwdygG","tlshash":"62a16cd1ce007bf9b4addc53e1cf928441ea6c4a8926c25d2b95d63c6e6283391d2ccd","first_seen":"2023-07-05T14:45:43Z","last_seen":"2026-09-11T09:55:41.536559Z","times_seen":96,"resource_available":false,"data":null}},"time_used":1108,"timings":{"blocked":-1,"dns":2,"connect":272,"send":0,"wait":285,"receive":0,"ssl":549},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.0adaa377b44144ca680337c2c5f19ef1b.png?2.0.1787304794119","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:54.510Z","timestamp":1789120494510,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0adaa377b44144ca680337c2c5f19ef1b.png?2.0.1787304794119 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 11 Sep 2026 09:54:55 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 72557\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA3CFEF9B1BC9333850F6EC\r\nAccept-Ranges: bytes\r\nETag: \"76810544597D9AEC321A8EDF7DDE427A\"\r\nLast-Modified: Mon, 17 Mar 2025 12:55:04 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16528432458784396012\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=adaa377b44144ca680337c2c5f19ef1b.png\r\nCache-Control: no-cache\r\nContent-MD5: doEFRFl9muwyGo7ffd5Ceg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":72557,"size_decoded":73122,"mime_type":"image/png","magic":"PNG image data, 308 x 308, 8-bit/color RGBA, non-interlaced","md5":"76810544597d9aec321a8edf7dde427a","sha1":"929cb18c84495549d0b82d132f9670185554e364","sha256":"95bc0bc20182a680acbbe883c3a99d84394e00a64a0327d7247a3e9f117b6f58","sha512":"5c818ac44d26d2d92ff2f71fb4c8ccf284840756165eff8e0ecf5a56164332d4f89d8a9147869ce76ea5681e187e64ca1c1386a07b74c1c443d43b4ce16fcc5e","ssdeep":"1536:Zv6XRVimk6gv72NHRGhafmzY++sTu4yeT0nv+iaVznd/r6TXZYVL7:J6XRVhkVD2NohafmzvlTuiT0Gia3/+Ta","tlshash":"ea631202bf5598f1a8fc5dad6c8452b5cad59503eb0652fccb900691250e82cbbe7be3","first_seen":"2025-09-13T09:49:49.994323Z","last_seen":"2026-09-11T09:55:41.537289Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1858,"timings":{"blocked":1295,"dns":0,"connect":0,"send":0,"wait":290,"receive":273,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.0b4a7d1d25b004d4fa34d7d9c33ebd66b.jpg?2.0.1787304794119","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:54.512Z","timestamp":1789120494512,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0b4a7d1d25b004d4fa34d7d9c33ebd66b.jpg?2.0.1787304794119 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 11 Sep 2026 09:54:55 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 21348\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA3CFEF337D79373808C777\r\nAccept-Ranges: bytes\r\nETag: \"F9D607ADCC57A8457AEEEB513275A9E9\"\r\nLast-Modified: Fri, 09 Aug 2024 13:01:53 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7654332070385894571\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=b4a7d1d25b004d4fa34d7d9c33ebd66b.jpg\r\nCache-Control: no-cache\r\nContent-MD5: +dYHrcxXqEV67utRMnWp6Q==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":21348,"size_decoded":21912,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 534x352, components 3","md5":"f9d607adcc57a8457aeeeb513275a9e9","sha1":"1ad026a013b978aba6b0ca3a53ebfaea03b7f51d","sha256":"351c23b49140e41d9ce8262afad9f36219c0f2293fb1d4fd205707951f06b802","sha512":"aa9950337f11db2b7d53fca4bb58782eb8e48a6198ea0dab101d1daeeb983b514fca169316eb97f8c1efc3c802f7e408820b459cb4753ee7833a26c14dfb627a","ssdeep":"384:P6npvsCMrYNg7800vwP8JmPg7hX5YseE0iJcf9BtUb7K+G/ZPyIfrDf0:wpEbYyA0CeE5lcBf9Ba3XOI3","tlshash":"e7a219239a59eb93f02587f0be031e995b2ba32ce58135ed10571e9f1e507318dcd26e","first_seen":"2025-03-27T06:51:59.193814Z","last_seen":"2026-09-11T09:55:41.538524Z","times_seen":60,"resource_available":false,"data":null}},"time_used":1618,"timings":{"blocked":1329,"dns":0,"connect":0,"send":0,"wait":281,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/assets/vendor-vue-652c4c09.js","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:53.304Z","timestamp":1789120493304,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"GET /assets/vendor-vue-652c4c09.js HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mY%2BUdCNmWWkQKCD6Y0eXw%2FDAZmt9OV7yoMbotW4U0TyZ7cFc4%2BO9qHpi%2BjSh%2Fpb%2BKJL6Asg3z3O1o2pj2I44hio6qGw2H9fubBNuDuEJZO7%2Fcry9%2FodsRLfaGSZTIQ%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-1f7ac\"\r\nexpires: Fri, 11 Sep 2026 14:21:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 27215\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb2b28a4b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":128940,"size_decoded":49002,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0ec2d556e8326b430340d0d1674f40ae","sha1":"38a294e16182004597d59758c07919b02e661c9e","sha256":"67d3f9714818fdc4aa4e6258a360092c1fd3601f293c11ac34cea45e0cdfb7b1","sha512":"fb15acd744251e42a88583c5b1405dd7ed81966a16c70b2e544bee16e46153b5025949d14d72266dcec7c51a9dc60d7998a2d90242ada69e542a7e65f350cb51","ssdeep":"1536:XbjlFKTYsg6AkAK88LLgEOXSBKLc6HptntXAZE8ldPJJA7WaTC9/E:rMg6AkAK8AgEFBKPHptpAZL5A7WEC1E","tlshash":"24c308e93282b46163fa19e600770111f3392959380ed4d4f16daddb3d3789a91fbe2d","first_seen":"2026-09-11T09:48:23.905268Z","last_seen":"2026-09-11T09:55:41.539256Z","times_seen":7,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/assets/vendor-i18n-86676d52.js","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:53.311Z","timestamp":1789120493311,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"GET /assets/vendor-i18n-86676d52.js HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FQpk2YsZ8fatXnSiKWm7gNd0TqprOFAcNYDGkTrfSMPHGmmFbiY2RnjBF9vTpju6u8lORjsxC1E3qH9XVZBqwoIhHawFEkzWixZ0UUsIzkNHWdKT4a2GTz0p%2Fz7YQw%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-ec74\"\r\nexpires: Fri, 11 Sep 2026 14:21:18 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 27215\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb2b38a8b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60532,"size_decoded":19790,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60528), with no line terminators","md5":"fbbf3355be1aee426259cbdfc05615a2","sha1":"1450c3c015a99313abded6937d964975c52a264e","sha256":"34c11e6ded74b53477fad0899ef7d91132c3ca3bf3c097e8924b1a7b77e8748a","sha512":"1f4f9784c83ac3e27d8b0a5180619da44f47eda4459abda693ab3104dbf2fac808d12893e17391a18e4d82f48ba8debda6e841f52e377e5f210f094981047df2","ssdeep":"768:xMPpyGrecKPUVO8pYJtRmUqdIVojB0TZXM/oM5lqz4WUpjc6gWoamZw9SV1FqEhU:jsCVw0TZXBwl5FG6gWf4xSzdgo","tlshash":"a043e7d635d7b016977a56e620b31101ab3e1b59380e9884f1bdda873e33c5a83b7f18","first_seen":"2026-09-11T09:48:23.91623Z","last_seen":"2026-09-11T09:55:41.539883Z","times_seen":7,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.07ddc6e3d7eab4fbe9e222f6c8c2d6c28.png?2.0.1787304794119","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:54.500Z","timestamp":1789120494500,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.07ddc6e3d7eab4fbe9e222f6c8c2d6c28.png?2.0.1787304794119 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 11 Sep 2026 09:54:55 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 21548\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA3CFEFCA8B1C3031CF08E2\r\nAccept-Ranges: bytes\r\nETag: \"639A47EA6A31FE26285F5049327ADB50\"\r\nLast-Modified: Wed, 25 Dec 2024 07:16:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10454958790141642359\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=7ddc6e3d7eab4fbe9e222f6c8c2d6c28.png\r\nCache-Control: no-cache\r\nContent-MD5: Y5pH6mox/iYoX1BJMnrbUA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":21548,"size_decoded":22113,"mime_type":"image/png","magic":"PNG image data, 308 x 308, 8-bit/color RGBA, non-interlaced","md5":"639a47ea6a31fe26285f5049327adb50","sha1":"2da11d21169d23092e66b45e8c0ec670f2395687","sha256":"40eb4529da9bda72a54499c1d25c92cc255995ac1f5b4c832cf13c39432749ff","sha512":"c29363480661629fb25eb0736d7e4926b4a82f4a3a5d2b8ad7e75114fb8c30c9eb7c18f51991488aa8b047004f75404e206d9597daff9f60671f7027d08f0512","ssdeep":"384:c4UIzEU8WE5GmcfxFsHJ1skpxnJOUFiWMO1bs8rBH+UbV94KaVlQB4hiB:J7eWE5sfzahpxnJJiW5Q294KqG0W","tlshash":"5ca2d1491b2757d4a73c3f038c4c3d690537ec758aa5f248beaaeca25c21520feb9243","first_seen":"2025-03-27T06:51:59.248956Z","last_seen":"2026-09-11T09:55:41.540644Z","times_seen":76,"resource_available":false,"data":null}},"time_used":1365,"timings":{"blocked":-1,"dns":0,"connect":269,"send":0,"wait":279,"receive":7,"ssl":810},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.0ac9ebacba6d54f1386c416d93be5ed52.png?2.0.1787304794119","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:54.517Z","timestamp":1789120494517,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0ac9ebacba6d54f1386c416d93be5ed52.png?2.0.1787304794119 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 11 Sep 2026 09:54:56 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 45187\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA3CFF0337D793738FFC877\r\nAccept-Ranges: bytes\r\nETag: \"C5B918AC7A843A55DDEF3215A49817EF\"\r\nLast-Modified: Mon, 17 Mar 2025 12:55:42 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2948587673896117930\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=ac9ebacba6d54f1386c416d93be5ed52.png\r\nCache-Control: no-cache\r\nContent-MD5: xbkYrHqEOlXd7zIVpJgX7w==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":45187,"size_decoded":45751,"mime_type":"image/png","magic":"PNG image data, 308 x 308, 8-bit/color RGBA, non-interlaced","md5":"c5b918ac7a843a55ddef3215a49817ef","sha1":"fba48d3ffa1b630bf4059dbb9de0af46f2e4188d","sha256":"eab878a5754e7920e8fc81a8e75543ea2db10cb7acbf0cb602d30aa4c1be0718","sha512":"07c937a9f75df34879ceb2ee382365c1be972ec0d57e0fa7c150957da8b134932efb3ff835c2edc0ecb00037c8d09509525bc0785c37053471f9a70fcf2fee84","ssdeep":"768:ozo9wYNLVa0dueiUGmsNIYai6t1nlPK2eCLhugO+rfQv61l+dAanD+UDS/:o09wqcqhiOsKPicxtXhugtrc610yanDM","tlshash":"b713f1a53ec60af179699307f1cb2b09025f25b53f015e8a9d6fcc9b8f01055eb3aa74","first_seen":"2025-09-13T09:49:49.911773Z","last_seen":"2026-09-11T09:55:41.541707Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1926,"timings":{"blocked":1617,"dns":0,"connect":0,"send":0,"wait":282,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/resource/fonts/Arial.ttf","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:53.432Z","timestamp":1789120493432,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepaa.xyz/assets/index-65cf50bc.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:53 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 21 Aug 2026 09:32:06 GMT\r\npriority: u=3,i=?0\r\netag: \"6a881b16-ff9e4\"\r\naccept-ranges: bytes\r\nage: 306\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qOZVL9%2FP3yZZNUk9lvaGbB2ac2gFXCs8pydcOAkw5cPNOc77vsGJ3NyO38fVR1LV7v4jARerK8LC73KBk3ZQT7EN8u5k%2BgSfrsLOCckwLtBiVFeDJI6TosaX5gjQ8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb2bf8cdb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1047012\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1047012,"size_decoded":1047727,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-09-11T10:07:28.331701Z","times_seen":2390,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/platform/yongzhe/config.js?1789120493631","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:53.634Z","timestamp":1789120493634,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"GET /platform/yongzhe/config.js?1789120493631 HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:53 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tF40HExjSGDu1P%2F%2B9Bx8T32zibX2acQpoeLm%2FwJZQvadw9FqYxvypQ%2FrQ0AV%2BVTGNeStR30QNrxJP5ohCirLF4Vf%2FhnWqFt9U6ILGTwVjLnM%2BckQrlMzgdcLsAe2JQ%3D%3D\"}]}\r\nlast-modified: Fri, 21 Aug 2026 09:32:06 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 11 Sep 2026 21:54:53 GMT\r\ncache-control: max-age=43200\r\netag: W/\"6a881b16-186\"\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a395cb2d38eeb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":390,"size_decoded":1011,"mime_type":"application/javascript","magic":"ASCII text","md5":"4757f08507b67b8b1ca59675a34d216a","sha1":"45892d0b26e6e81a819f1e3cd275a7b8a64a976b","sha256":"aac662f5951e95c1a5e270699c08d900c25fcddc2f35b0598a237a950e8ab5a4","sha512":"0d0bc6963bcfab8dfb1577b26f19943f7c07ffdc11e470bcd219f3aa300f21d2e794a2eac0b56eeee9edb0f817c39b09567f4bbb5e80227f4da837bc45446d54","ssdeep":"","tlshash":"cfe061f9a9e650d61e9189aa2fed5535d0051b73881c3c2d2c453112bfdf9153634e21","first_seen":"2026-01-12T06:59:54.726149Z","last_seen":"2026-09-11T09:55:41.543282Z","times_seen":12,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://safepaa.xyz/ws/c9d63ebe-6b40-41d7-b046-b6bf7f4c5884","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:53.636Z","timestamp":1789120493636,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"GET /ws/c9d63ebe-6b40-41d7-b046-b6bf7f4c5884 HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://safepaa.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: CsnzdrB/jNLNcqx6axknwQ==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 11 Sep 2026 09:54:54 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://safepaa.xyz\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: Y74csy9BicHtCIMfbE4qP/Tk2dk=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9wCsTbLGWZ2%2Bxzzf4ijgcqDE3V1A8cTfisqHoZMp0fvcvEE%2Fi6b79%2BelgPf7lb2ZSbizqa8v66bjz2kZ8dl5hXmLaI9KDATRwyfXdlb6aRXbYmvUweQJLhX5cTcSeg%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a395cb2d5a49b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":872,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":11,"connect":13,"send":0,"wait":480,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/assets/tw-d57cb3d2.js","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:54.135Z","timestamp":1789120494135,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"GET /assets/tw-d57cb3d2.js HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iauKy%2BPjYWyFcETmTqyMRampuiF%2BAzLnHu%2Bw22qzgD1bLEmWQG2PraS96%2BtQcG8FAmXfY03dG%2FIWLEc5eTzie6OdUf39dYtPhoQ%2BRRd0xFdz8RvnR2JbVVmy1EqFfA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-fd40\"\r\nexpires: Fri, 11 Sep 2026 14:21:30 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 27203\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb3059dcb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64832,"size_decoded":26021,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (43652), with no line terminators","md5":"590d162bceb17266fd18901dc70dfec9","sha1":"266f8ad69b5b70ca63e0175cbfd9e917053896bb","sha256":"eaa6e97312f99706ceaab43748e80c130d09c0ed084fffc77b1c2469ce9d6512","sha512":"b9bf65aea6d6afed7db03c9c18c3122f7a7d2f47ee27d50452eaf352b2982500359587defb61aab3f9ed306c0b6036b3343087cd11dcc108c2449d497d66fde3","ssdeep":"768:8bgu4TgSnNvog65OyTFwjaPfvn+2vaFRt5eQ4Xt0U2CwMkP0WCX9VP773:XUS9HaOBja3lXtR2TpCX9VPX3","tlshash":"87534bd55cfe9ead44e3962b704f5803a0e78ac9c271c9655fec69f92288b43c393621","first_seen":"2026-09-11T09:48:23.950744Z","last_seen":"2026-09-11T09:55:41.544641Z","times_seen":7,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.0789afc5021e94d70980b9be5428acfc9.png?2.0.1787304794119","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:54.496Z","timestamp":1789120494496,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0789afc5021e94d70980b9be5428acfc9.png?2.0.1787304794119 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 11 Sep 2026 09:54:55 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 8763\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA3CFEF9B1BC9333844F3EC\r\nAccept-Ranges: bytes\r\nETag: \"955C77D1B75E882FD817D2DAA9BF3510\"\r\nLast-Modified: Wed, 25 Dec 2024 07:15:41 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8653684933170171035\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=789afc5021e94d70980b9be5428acfc9.png\r\nCache-Control: no-cache\r\nContent-MD5: lVx30bdeiC/YF9Laqb81EA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":8763,"size_decoded":9326,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"955c77d1b75e882fd817d2daa9bf3510","sha1":"84d52c0542a4a053289a7067722b1a1d75f6b6d5","sha256":"db34976089ba1ff54b519082e7bcf59345e4cf4754f950130a2270e814f800f7","sha512":"3ac8c65e0c95edd0cc0840d488057156df615f4c06ac356970a016c71a8729ed97cece07b71c733df4674b9cd1a46d3ef196956c372447d0b815224e624472d5","ssdeep":"192:QfZuDTDVztOYX+T5QEY4j23UQt8nHRndW4gXSTDR:QKHtkK+qI2UA8nxnYPqR","tlshash":"5602c0d89302a1e8d95eb8eede30e072401d554bc7cee94092e5e5790c592b8f5bb1f4","first_seen":"2025-03-27T06:51:59.223327Z","last_seen":"2026-09-11T09:55:41.545289Z","times_seen":84,"resource_available":false,"data":null}},"time_used":1118,"timings":{"blocked":-1,"dns":0,"connect":278,"send":0,"wait":280,"receive":0,"ssl":560},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/assets/index-862a306c.js","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:53.301Z","timestamp":1789120493301,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"GET /assets/index-862a306c.js HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wX6MVmxMcXvy3cGRAiIY79UkfXdRNubLSFFQ8HxJzuZoaZqcNOtpRu2qHBExEGX35wP7iSzDEnzF6fe8UwCC3U%2FXWcENQkmex0H1vLihB7n6ay921sRjVtwgzjX1rg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-4ca8\"\r\nexpires: Fri, 11 Sep 2026 12:24:10 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34242\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb2b28a2b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19624,"size_decoded":7693,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19568), with no line terminators","md5":"a2ff67743d550067413bc3b7cf4c2074","sha1":"495611432092d3f83dc1360d0e8a28e21080b3b9","sha256":"2de24957065516cf761b6086c92500a1ded2636a4ad9f6d790a9ca0012f26184","sha512":"3d94883837fe04eb8c58f70fb2a2b223fe4458c509661938f962bfb74125baf8b8a8af1db49bd8526c89f1f93dff8a71c9430eae3d7650653a9dd63a285e1d74","ssdeep":"384:IwEpqX65Q+r+54KENftdTWeubJMF1/Pnri1C/hhvLW2KI5zBcx+AWDR+jl1phfw2:98qX65+jgTWeubJO1/ji1s5NBcbWDR+/","tlshash":"27920a15b40a9934e2f39595642e0640f1182fdee05394b37afcaf1227e8ca5a35a73e","first_seen":"2026-09-11T09:48:23.947455Z","last_seen":"2026-09-11T09:55:41.54598Z","times_seen":7,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.09646585f0aea4bf4bb3dcf376cc954b6.jpg?2.0.1787304794119","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:54.511Z","timestamp":1789120494511,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.09646585f0aea4bf4bb3dcf376cc954b6.jpg?2.0.1787304794119 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 11 Sep 2026 09:54:55 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 10965\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA3CFEF60F7333639D9C7B4\r\nAccept-Ranges: bytes\r\nETag: \"327647608D0424763F3893F6AD655EB3\"\r\nLast-Modified: Fri, 09 Aug 2024 12:59:24 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10790596113790497685\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=9646585f0aea4bf4bb3dcf376cc954b6.jpg\r\nCache-Control: no-cache\r\nContent-MD5: MnZHYI0EJHY/OJP2rWVesw==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":10965,"size_decoded":11530,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 526x310, components 3","md5":"327647608d0424763f3893f6ad655eb3","sha1":"8316a606efedb29bf60e70cf1167c2ec730df6d2","sha256":"53501f8bd3de06a3fb840b97946c08d0cdde89bdac92ee33a28e158b2277951f","sha512":"34cd2625b7ad284975ed4ae6cb3df8f173a525dd4eda65436607111feb5d2eb4397e7bff749a2dfe200d5c83c548e62eff366ba6168ef1902364cd25e339f43b","ssdeep":"192:RsvynUKUv/UCMrYNMtKwQvtM/jWpeivuTR00bxdxreFSlI:R6npvsCMrYNg7qtPgLeFuI","tlshash":"6b3270278b59ef43f525d3f4bf031ea9935ba714a5623aeb42201edb2f104019cca75e","first_seen":"2025-03-27T06:51:59.245266Z","last_seen":"2026-09-11T09:55:41.546653Z","times_seen":60,"resource_available":false,"data":null}},"time_used":1589,"timings":{"blocked":1304,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/assets/views-9ebe03f4.js","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:53.315Z","timestamp":1789120493315,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"GET /assets/views-9ebe03f4.js HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BqgbfdlI3XRIDRdPN35P2H7oTceJQBXVKCieIXo8KNM2TQebF9opXQ%2BLwaTpQKE7c19GxLt9ItvtuuyMoWYOlAVvKfhxP1pA%2BacA6CR94kfNqERzyaKkCPMsbYSclA%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-aa800\"\r\nexpires: Fri, 11 Sep 2026 14:21:19 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 27213\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb2b38abb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":698368,"size_decoded":175808,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65482), with no line terminators","md5":"0d34481cd41bc0f6546fd7c9a309d21a","sha1":"2502ac888f029cc01707a04b0618bc069bb0b04f","sha256":"2a5b3cd7de6c311eb63956f51a3c655b2a07432f2b0680ed1d9f21a363fb67a8","sha512":"efbba1a7ba90c2c61cfd05201308a2edf89191a16fdd0ea3dc001125fef8ffd92c8e57d3e13bc96f9974687a6e33415ba1ee7dfea27a998dfc6b6065e4604fb8","ssdeep":"12288:AA2vu/UO3j3XBdtLdzk23NMMCx0M8VXlPjDycrM:Jx/Ui3XntLdz93NMMg/8tYcrM","tlshash":"72e40884f94478b6eab794d0954912c032486fcfd00988a0b5fd5d6a2fffcb5736ab24","first_seen":"2026-09-11T09:48:23.978167Z","last_seen":"2026-09-11T09:55:41.547987Z","times_seen":7,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/assets/vendor-element-634158bf.js","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:53.316Z","timestamp":1789120493316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"GET /assets/vendor-element-634158bf.js HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7SRJc%2B8X5WE7dwiPzZf%2BRQAszKAfF3YpGlJxtd0JNn72wNX4ksj%2BVR9foDcH0o8ltksHE9w9W9CzSXwske4RPXPTG6GiF3b84vCj06Z7YaKkK2zlObJwwbLcWXkAow%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-c2052\"\r\nexpires: Fri, 11 Sep 2026 14:21:19 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 27213\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb2b38acb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":794706,"size_decoded":242320,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"212f26699824fbeacf6d480320066d2a","sha1":"0ff1b83b9666d520f197501e2669b879a51327c8","sha256":"01037f79cccd6be630d2ed9bb10ccd0fc02d2363a8193262b0f91201b6f7bbbc","sha512":"c7480c42a9cf44f1393ffffdbdfb7cfec65adcb41dbdee68068c0a252d6314d4666c7047f4f75a20c78c55410b30f12fe3ff805b7f4aa51733c0889ff9b6898f","ssdeep":"12288:wglOOmshG4unXAZFM1LRbTvbFZE4s1fqEmM4a6:wglOOvhG4uXAZmhR/bFZE4sVqEmq6","tlshash":"baf44b95b855f436dbfa94c980990500b72d174db028c8f1f5bf8d2a229fd50b2afb39","first_seen":"2026-09-11T09:48:23.926287Z","last_seen":"2026-09-11T09:55:41.548726Z","times_seen":7,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/assets/vendor-vant-5032c3e5.css","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:53.319Z","timestamp":1789120493319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"GET /assets/vendor-vant-5032c3e5.css HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W5WdEGReoRipl0QamlMi%2FGyANKbPN51iCOfT6kMOk7qqKijqg0pH7cws4h6%2FoHXVFE3hlMnYA3h9AO8CzPpQgIGwKU%2FxtOE5lnIZ4FTxoCx9XKf2nINf%2BQ0zAOg%2BNQ%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-39122\"\r\nexpires: Fri, 11 Sep 2026 10:34:16 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 40836\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb2b38afb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":233762,"size_decoded":80295,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"18980102b6833b61f136a4c4be10f013","sha1":"cff35410b7a69158395a91fe5355885935e31205","sha256":"5032c3e5716b18eb91ab679f388ae5ccb073ea50623b0aa1bcd11970b089b77d","sha512":"1a1960ad5af1ab98a8ce62cd35923bbe945ffcca7fe9e698b5b1621af6afbbd980d7abc14976fa1b14ed6876e1ab5ec6e86be1451ef6484cb89f2b5c5f2448d7","ssdeep":"1536:+CwsBlDOFIxuVoxHtIyNBi3MFYaQj7FCwsBlDOFIxuVoxieT/BiFVmV6L71Ah5aG:+ClDsIxuVSHnNIClDsIxuVSR+835","tlshash":"dc34d795e69091bcaf2bf175ab8b56dcf23cf570ed01daa4f10091580ec7bf50623a1a","first_seen":"2026-09-11T09:48:23.97977Z","last_seen":"2026-09-11T09:55:41.54942Z","times_seen":7,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/assets/vendor-element-9776febe.css","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:53.322Z","timestamp":1789120493322,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"GET /assets/vendor-element-9776febe.css HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KBDND9MZ0DMn6yeXtmUcNUrtXxeIckIPQXe%2B4DkXZyl6%2BB8c45Cs4Qu8AcDlICzNmZJPKKKkvd0lfphKfSNEQvL3hYXLtUJHm%2FVVRNd0yNXY4fouUnAK42roApARag%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-57671\"\r\nexpires: Fri, 11 Sep 2026 10:34:16 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 40836\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb2b48b2b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":358001,"size_decoded":50014,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"61e374f1a46e8345a72644dade9a3858","sha1":"2d31c46099c6692bdb9489201600c0e3261cf645","sha256":"db823ac06120c2ab19c5d7200f4310b840ebc2839c644497f4bf34babe77572f","sha512":"16ddc9620d3c11aba8f3867e18711b0f426547a9df3375839ae4ee1b832f53728540dc63ef107b06d556c248c6ee04f3d236a5cf9519a911e1d712dfcfecf99e","ssdeep":"6144:N6xbnFSaBMa8R8S9kXQW3KjhfsDpNTTA2lwIuLi+54DcIxW/z7g3WagMXZyfTfuD:rhKXyl3oVd","tlshash":"9074d654fb23653b2817ea7c6ac0ea995f14cf91c92257b6fb40a00895c7de112e3d3e","first_seen":"2026-09-11T09:48:23.923138Z","last_seen":"2026-09-11T09:55:41.550194Z","times_seen":7,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/api/common/getCoinList","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:53.639Z","timestamp":1789120493639,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://safepaa.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:53 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Y2%2F3wfRL66Hjyeha4Wa1ebf9crA%2BPr9c9F0%2B2o1PAbxmGCDtkZbZlbm5%2FT6%2Fk6%2F0GikyvGyTpr9DavJ6jg%2BqicKUeJsv3r8dLOiDT9SIx7YGN9xnPIr%2B4TSVyoGhA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://safepaa.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb2d38f2b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63299,"size_decoded":6797,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (63283), with no line terminators","md5":"ccb8cbf725968506f34ffff5cc77ec06","sha1":"e30e46a1c4b42e9bee818d988d68dd61409fc598","sha256":"59a15dc6c59e8e6e2d06e06ff4708ec9485763c8a998f66dae49cdef480df61a","sha512":"4090e74c120353ba5e87485040890a12b8835c2ffdf4a4ae43d055129906a90b2bcf8883a5976d183733ea73c6258d903fb5be8ca968f57b1694dda8aa705fd9","ssdeep":"192:VXfpXi0fXWaXnKWXfMXknSXXv0XKJtXXTmgrCQLw8EqY1co+fomaIAtgWnWRNAvE:wp/UPsIQdi50sgyk4923ZW6xj","tlshash":"5e53cd2aa294807dc16a84d20c6f7d23e1cd393fbdc94a1ad6de4995c8ede72510bf07","first_seen":"2026-09-11T09:55:41.550997Z","last_seen":"2026-09-11T09:55:41.550997Z","times_seen":1,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/assets/vendor-web3-be73c185.js","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:53.309Z","timestamp":1789120493309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"GET /assets/vendor-web3-be73c185.js HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8xSDFBQksb48NFMW2mpvDGUq20rF2ouVCySWrm1dHKIlm2xZtnhFfY%2BGzfSVSUSC3b%2FEuxJ8u2sgz7eme09ymXsD8CmHePXMmG8cDsfK7e1rRg76mUtOWxCdWy6iqA%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-4609f\"\r\nexpires: Fri, 11 Sep 2026 14:21:18 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 27215\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb2b28a7b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":286879,"size_decoded":70701,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c9a595bcc015bc8dbcc388332b1f836a","sha1":"969f8f6e7b7fb0d926b2f69e3a4d9b40d31dc9f0","sha256":"3400a7db1b1f812e1b1c9de83085b3af33212044d5f8a234ce036ad96195a3d8","sha512":"17e9d51a359ba4e5a7a159755922479f5ae697424bba64a12f3d494830b70731f48432d13ae97fcf10b2bfb55897e66f5bc5a95a93d33f203bf2d3beb2c6e70d","ssdeep":"3072:ydkJu93WuKIfml5iKmAFh+MuFvmMpatfCs:yKJuWuTAXHuFuMpah","tlshash":"bc54f985b592f1600a8a50e0d4f71203f338bd59705bc0a4f6b998eb79bde89d177b38","first_seen":"2026-09-11T09:48:23.964018Z","last_seen":"2026-09-11T09:55:41.553061Z","times_seen":7,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/assets/vendor-html2canvas-48421fba.js","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:53.313Z","timestamp":1789120493313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"GET /assets/vendor-html2canvas-48421fba.js HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y7qDNGDeU5qZygVWsPwKtw2dAtyZQeEqmdGQbCXu7Pv%2F%2BYHu%2B70g%2BsHLxlZz5aChuuFe5zO5PaSpyiBRsRpipzZrCcyHMJ3x%2F5zgf%2Bg%2FOsNcnu4YxcWGSzHRnQ3Wqw%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-30735\"\r\nexpires: Fri, 11 Sep 2026 14:21:19 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 27214\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb2b38aab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":198453,"size_decoded":47050,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"3a2f11dc19d860c02c69687b77c757b5","sha1":"23ef12c74f30f83e59916a8ccd2be8ea4a5e3da5","sha256":"bea97db64c99b63623128ceadbe7bf7c0419b3a82b6807c7aa5499f43df6d178","sha512":"2d880e04595d2f0ecbb9a5edd548462535069cfc65082732ca0b676c16b9974c33c6f9fdcd46f66f5573eae13942de127cb52e8a0cf1d91084009ac3c8e33aaf","ssdeep":"1536:3weKEs0+RipH52fREkQk3NS5pU9VjKgFA0oS9BlV7Rf+jJFpwwHiKGFdv+:3xtn+Ri65xr9pn7Rf2CtFE","tlshash":"091446b46ba72cde0b7eb49b001b3d438d981b67117fd1a8f24a6da22d70706ceb1574","first_seen":"2026-09-11T09:48:23.948628Z","last_seen":"2026-09-11T09:55:41.553746Z","times_seen":7,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/assets/vendor-2d4c25b0.css","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:53.318Z","timestamp":1789120493318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"GET /assets/vendor-2d4c25b0.css HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3fevLXi0cw0YHqXnvhMfl%2B9MV4dbU7XZkPE8kzRIT8xv%2Bwp9SDk8aWlio6A8RxWwdIqRhvLshUdZ5m8rcT5B3q%2FYLBm0YViMQBgOZIET9dIlaD8gPwnVfoRpDZRung%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-11eef\"\r\nexpires: Fri, 11 Sep 2026 10:34:16 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 40836\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb2b38aeb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73455,"size_decoded":6333,"mime_type":"text/css","magic":"ASCII text, with very long lines (65353)","md5":"b58107efd258752756eb13c3cb8e1f4d","sha1":"d1bcf46e3101d4ddff77070824c560007d3af2c0","sha256":"2d4c25b06c681d0ba8cef2c4bc42a9ed6a2646af4b35baa63e3cf8f9a4de966a","sha512":"e92eb3901e5bd238d5094fefb8aa42deb51ca9e9c89f22fa41f7c16e06eb6100d52f297629f3a9ce46a67f0c2db89c9f9fac485411ec1df3852f84279a1cbc18","ssdeep":"1536:v6uNQ3fdPwwanleMf72yMzkZUPhw71ZACkFDS3vyf58rBeV05Ta:4kZ8w71ZACkFDS3vyf58rBeV05Ta","tlshash":"e97338ae4891128991274f6287cd4ea84a3dc6b315621cde33552c4b8f87fee33de617","first_seen":"2023-11-12T16:46:43Z","last_seen":"2026-09-11T09:55:41.55448Z","times_seen":281,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/api/common/getMt5Amount?coin=aluminum","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:53.926Z","timestamp":1789120493926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=aluminum HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://safepaa.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:54 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WVDwvHavVmhX2mqjcBD8gEMgXbT3u1dmQsVz2nrvvIHOJgwT%2BzG1keZxaMt4cmEvcH0poE2ZpROJWVBZlbIRIlzuF2xO7dNCvzRffQoMZwZKKekBHpc0twBMqUj7Xg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://safepaa.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb2f09aab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":894,"mime_type":"application/json","magic":"JSON text data","md5":"8a905217ede0aad5336ad11734107fd5","sha1":"baac5de14b6b41675ce282c3ba0752988c8e7430","sha256":"bcc6f874bf58c544432e2de62dddd3eb7d3d73f3b6ed6401e4ab9279c5ea7e33","sha512":"f2b3f1a898d4dbdc7199cb537b3c8678b615562f907252568a6c4f213613e80f79e6f4527cf44bec9b7fb1fc455f863d6d04e20dd26cf46dd765a39a97b5c65d","ssdeep":"","tlshash":"379002552c188282ac9304bd990a62040028317066359348cc5d512588881622042859","first_seen":"2026-09-11T09:55:41.555053Z","last_seen":"2026-09-11T09:55:41.555053Z","times_seen":1,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":430,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/assets/index-65cf50bc.css","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:53.323Z","timestamp":1789120493323,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"GET /assets/index-65cf50bc.css HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ibeqvfrQ2T9HMZ3kfiLdWK1nEJ3uofUv%2FpCJJjpRZ6egO8ikpohe9vwrX%2B%2BqFLgjROlWL6yLxD14M1%2B297%2FFbK%2FttgAH6BIj3epuMLwCvWAutgoZZLFbN4GfuqeZjw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-8d05\"\r\nexpires: Fri, 11 Sep 2026 10:34:16 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 40836\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb2b48b3b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36101,"size_decoded":8078,"mime_type":"text/css","magic":"ASCII text, with very long lines (36100)","md5":"b7b368b6473dfd455bf57de7fd0a5777","sha1":"ac76b05f3bb8fb53648ebf1cbda8aa435b4ada8c","sha256":"65cf50bc4e30251962e198065e0095cb57f4532876d7880ce5c844ed545b6582","sha512":"efd62d9fc6cae3e1e6f8e378df94934105c058090c3b55c7d30394347b02d8ef58967f9a01277bb92b0b2c686c2645d7cd75cc019cee027e03bbda8fb169b5f0","ssdeep":"384:nOVmp4gxS+yznPMCL6YBGV69nnv+1aJmg1WioUzPxf4EQQac:nOVmp4f+ywGGVS+1a51WioUzPxf4EQNc","tlshash":"04f2b324f214143ba637cc5d3cc4b648c625f6a1c6026bd4f9ca55a8aadfe811eb437f","first_seen":"2026-09-11T09:48:23.941857Z","last_seen":"2026-09-11T09:55:41.556957Z","times_seen":7,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/api/common/type/defi_activity_type","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:54.503Z","timestamp":1789120494503,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: tw\r\nlang: tw\r\nOrigin: https://safepaa.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:54 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fko6%2BUQIoEercOfxVbIR4ohewDjMxjsJAm1236UQxMkVNdOaJ0iXEvG1NNZYWXc105myNsHTxawFnWZBk6DrGItKr0eXFRlfAquMT8uO2XSkiyv2KOlBUFJU%2Fr1Nbw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://safepaa.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb32aa49b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":635,"size_decoded":1103,"mime_type":"application/json","magic":"JSON text data","md5":"7a423e3451e474878191a0a7f1d323b9","sha1":"13312f533f380295131f6a1540f425d0c98a16ba","sha256":"49c938e0bb3a834cab9319575489cf6c1694cace3f1ceb9671570024328e2a35","sha512":"0522e47fc06c4329cee21e354b264c90ae4b0725941d75cf63af54bee4a307fbe91e7078a412bd9750f3856657159ffe5efff139a652ec0443368f7c146bfdbf","ssdeep":"","tlshash":"5af028143d3dcebf098f65e745ec7818399c152794a0fca058ab0f3c5ae4171088921c","first_seen":"2025-04-07T11:28:26.961944Z","last_seen":"2026-09-11T09:55:41.557732Z","times_seen":862,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/assets/vendor-8b17b1ad.js","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:53.303Z","timestamp":1789120493303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"GET /assets/vendor-8b17b1ad.js HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8LWIRsoywHrBTeMFkojj3e5hQsa9j1pFzjJy6ZCLxaCLlegMtBBD9OjihZIJZFmlGH66YYYfw0%2BFDG%2FJ4NWQAvMY0a19iQMGp4DjZsC3lxTF2%2BXa2%2FI4Q70IL6InYw%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-5c850\"\r\nexpires: Fri, 11 Sep 2026 14:21:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 27215\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb2b28a3b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":378960,"size_decoded":142043,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a90c3bb9218fa39c61e0ac6d0fa26dee","sha1":"bbada750b5f4d3fea6b015274492bda260294df7","sha256":"dd6762d8953c0c42df2aace97e2a2fba74350c5153e0dcc229f4c311b8254722","sha512":"abe59a77e5c87529133b8c33e2af0db6784b8c0b6cddc77f4d4b434d59f52e791fb4a87baacce2f1ad03b516a3ed82fb09b03f47b8c21b6cfa757cf70c56f620","ssdeep":"6144:mfdoSQtdewgc8ABGGe13cujrWDwzWSF7wVJu6o/ZaAFDBl7TA/V4MrCtHZgw0edl:mKKwf8GZ8zW/Vsztl7U94MrCkw0eDn","tlshash":"ed843ac93291b06543ab15f2007b0007f37aad69744d8464f2add8eb7db998a9277f3c","first_seen":"2026-09-11T09:48:23.976509Z","last_seen":"2026-09-11T09:55:41.558427Z","times_seen":7,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/api/common/getMt5Amount?coin=xau","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:53.917Z","timestamp":1789120493917,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://safepaa.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:54 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I%2ByE%2B3zclElRGlv%2BQG%2Bas1HjhUi3gEPGL0c3a1%2BPn4QemAz2Q8cEbOT5QH0y%2F2L9acJ%2FI8YHJpuyKJI0xlERIiC16XQu6MJPttYxeb%2FmZx1kp9npd6rPI83hAT8L1w%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://safepaa.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb2ef967b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":908,"mime_type":"application/json","magic":"JSON text data","md5":"f9da96669af39439c8e1b299d1439baa","sha1":"90e90c97d36a4e500a3641af4d30c7467fa40db9","sha256":"f72bdab579e1da6f0e5bfa3c978ec9ce101db58b87a0e3cb5b142a9abbb9d161","sha512":"438e9bf6a23384d1164f1c46c004f7aebc7372d1819da0737e20f762b88b423ffe3735b79d46b63451f96515f6cd4efa30d49be3ff3abefa5bbd08884f9af12b","ssdeep":"","tlshash":"ce9002662c188282a88340e5d50612051034326026259348cc5d512580ac1622140958","first_seen":"2026-09-11T09:55:41.559087Z","last_seen":"2026-09-11T09:55:41.559087Z","times_seen":1,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/resource/fonts/UrdTypeb.ttf","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:54.286Z","timestamp":1789120494286,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"GET /resource/fonts/UrdTypeb.ttf HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepaa.xyz/assets/index-65cf50bc.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:54 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 21 Aug 2026 09:32:06 GMT\r\npriority: u=3,i=?0\r\netag: \"6a881b16-2aeb4\"\r\naccept-ranges: bytes\r\nage: 305\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rg4l19H4%2FcQWlFav8uGS%2B9L3xKyDV5%2FvVDtpPfp%2B2PWup8ZxMlUxFefe2fnumPM%2BYrW945AdrXu1GlIxprzB0uqA4TySsu1bPTZe98YDasd4ty4ju1WN87WWG%2Fv%2BNw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb314a13b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 175796\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":175796,"size_decoded":176520,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 16 tables, 1st \"DSIG\", 74 names, Macintosh, � 2013 Microsoft Corporation. All Rights Reserved.Urdu Typesetting BoldVersion 6.00UrduTypesetti","md5":"1f8883a41e786677a14066f72deaa43e","sha1":"ef035042a1dfd3d33ceedbd7e8dd7af526050e49","sha256":"f4c9e3ccea34ae0e80f64f596e2cb255e5285ce1372791a4fd1e1ec33d66c5b1","sha512":"18d860d142434848549e2558ffb7df4c1215b4295dc1567eaa802dd648ba5fa1a0c59db2535546ed414501802601963656fb46a4b93fb7773ed60bea905c7df4","ssdeep":"3072:89ILhRSZznkc5Csm6+R1tWDPBghCkpCNM/5VJSi7OrfKNgMUKAPTNTT7wI8aYrPq:VNYZznkcgsm6+R1tWDPBgh7pCNM/5VJY","tlshash":"da048e25d30eaf2ee932feb08c25531138bae831e665d30b69376419f471ed48c9978d","first_seen":"2025-07-27T10:32:18.228842Z","last_seen":"2026-09-11T09:55:41.563994Z","times_seen":27,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.0ff2d36a99b4b4d3b9e58dbdaf37ab1df.png?2.0.1787304794119","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:54.493Z","timestamp":1789120494493,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0ff2d36a99b4b4d3b9e58dbdaf37ab1df.png?2.0.1787304794119 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 11 Sep 2026 09:54:55 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 23782\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA3CFEFFC567C3539D085A4\r\nAccept-Ranges: bytes\r\nETag: \"516157290B6FB65A740976C10A954D2E\"\r\nLast-Modified: Tue, 10 Dec 2024 07:43:34 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6027171461498336641\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=ff2d36a99b4b4d3b9e58dbdaf37ab1df.png\r\nCache-Control: no-cache\r\nContent-MD5: UWFXKQtvtlp0CXbBCpVNLg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":23782,"size_decoded":24346,"mime_type":"image/png","magic":"PNG image data, 308 x 310, 8-bit/color RGBA, non-interlaced","md5":"516157290b6fb65a740976c10a954d2e","sha1":"f5056edc9311873421bef51695fac0a325eb7f5c","sha256":"a9f270f9f8b6f1b50009b88cefc094faa4b0af40f11e4e657a4aff3d760dae35","sha512":"8484d66910669f23ac5a26b8b5add429396fe40fd7c3feacdc9b8071e34043e798074d23b757e39dcf36c69a166536742c5727893df96860435944fc4eb0819b","ssdeep":"384:CHJWfy29WDrfssB+lU2z8GSDVJfVL59eIFnSdQmN7ZE7UiRsZRAJRR+hXKoveQFi:MJWa29YIjllfKZN9ebdQmRSlsXApQ8","tlshash":"f1b2e1bbacdda0b0fc688c2614ec944d69d34e5c837c9a4a11ffc74e382c594d1ba995","first_seen":"2025-03-27T06:51:59.159771Z","last_seen":"2026-09-11T09:55:41.564831Z","times_seen":98,"resource_available":false,"data":null}},"time_used":1321,"timings":{"blocked":-1,"dns":3,"connect":262,"send":0,"wait":268,"receive":0,"ssl":788},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/resource/svg/dark/gou-yuyanno.svg?2.0.1787304794119","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:54.495Z","timestamp":1789120494495,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"GET /resource/svg/dark/gou-yuyanno.svg?2.0.1787304794119 HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:54 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3H4nQ9MrO2MlDrT%2B%2Fn4a4Yi5F4G2uPIagR16kHQY%2BDaDX7WMqqU6o85ebqrbrjvx9cnJlC8kRE4oECVtNgkj6DQ%2FBPrvBdtz022o%2FIFoGZ7eikRwcOZgpSJ%2FJsQ6Iw%3D%3D\"}]}\r\nlast-modified: Fri, 21 Aug 2026 09:32:07 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a881b17-ee\"\r\nage: 3334\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a395cb329a48b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":238,"size_decoded":889,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fc9f76c55946145ecd77d8f82dc47cd8","sha1":"7f1c86989996b8cc3379600c26eebe52e68244ad","sha256":"5e0b88fd6d9492a4df3462ac77aa1ef6f8187a4a8134585e3778ce863f509d20","sha512":"f62ec8f97ea00f4b66d23aef1b97db693033d831c4e48b8664356ee05eb3a551fb2ae46217df11243e8819811631138b2e04c6fe8574202c0fff4f9dd2717288","ssdeep":"","tlshash":"0bd0972e646c80080088ca002ae47c84019df0dc27c202eeb5416446c02208634aac5c","first_seen":"2025-04-25T08:37:00.552061Z","last_seen":"2026-09-11T09:55:41.565684Z","times_seen":94,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/api/helpcenter/list","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:55.158Z","timestamp":1789120495158,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"POST /api/helpcenter/list HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: tw\r\nlang: tw\r\nOrigin: https://safepaa.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:55 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mNqxjc2MWbJ5uvPIqiRfKZ4D0URr9Bk%2BItAVUdGCCFOHQAKVxGazy4sjwioIlGl%2FRlwdIKpkL4oj9j%2Fol4S74dtKawown%2FFMcADBQF8eAhD%2BzGfQmwTJWFgIi%2BeNzw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://safepaa.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb36bafeb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2457,"size_decoded":1465,"mime_type":"application/json","magic":"JSON text data","md5":"c3c62cce9f445b2c7215b991de4bf2a8","sha1":"a85940e448b49bbd53c1b2ccaf319e3f01c192b9","sha256":"829f61175ba77b27f94a1985c5241f51a7f633c17cfa17e13d006ada11090413","sha512":"cd55df004245fdf56f572333984bb93fcef10886e5faa63f4fa08a63ae4b32aba1b1f952a014a796873831e2963900d5acf78a3c1401bc70017665d67b391313","ssdeep":"","tlshash":"af517c266775fdbdd63e84e300aeb548d18f162759e09d2cbccbcf0c86e1539091b296","first_seen":"2026-01-12T06:59:54.801343Z","last_seen":"2026-09-11T09:55:41.566562Z","times_seen":12,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/favicon-v2.ico","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:56.549Z","timestamp":1789120496549,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"GET /favicon-v2.ico HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:56 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9gfe965xiPKM%2Foag1eJf3IbES540UZUx%2FtbKUdjtW%2F6h7PADCiiP32LypWI%2B01kz55e8h4kgVFbo1vFKUyqXMAlTaX%2B57A2b8uLTMztz%2FG5SN2d5%2FUQnYCSXG4hxNw%3D%3D\"}]}\r\nlast-modified: Fri, 21 Aug 2026 09:32:06 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a881b16-175a5\"\r\nage: 461\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a395cb3f6c82b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95653,"size_decoded":91411,"mime_type":"image/x-icon","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 384x384, components 3","md5":"1889637e405cc1b4c0e908fd94a8b049","sha1":"1a2629f01f18fc8a4d27526accae0448ebd3f78d","sha256":"5c4fb1b4c01a3c3ff81ce19fad97004f134997c8ecb2886f2588d18985ba19fd","sha512":"07dd7f0cdc8e3e49588eb2b0f66cfa5eb579cdb015ddd0efda2f3f617f2195e93ff23a56bc87de21485d848b2a6dd18be5ffe36434f3d3c989c78b0f3e2bad80","ssdeep":"1536:hkHRse9SMKc1seIjdhXE2ev+te2f4xOFxYyOD2hZnY/JuPaT+3AKqUVsq8i+vJ:OxsSSSatEV+EoaD2hKJWAKTcRJ","tlshash":"e993f1b5b7e7f785130bea2d1abc2d22575027c16cc49653319fae24eb8db3109a3036","first_seen":"2026-09-11T09:48:23.908315Z","last_seen":"2026-09-11T09:55:41.502563Z","times_seen":7,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepaa.xyz/assets/vendor-lodash-28d24e41.js","fqdn":"safepaa.xyz","domain":"safepaa.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepaa.xyz/","date":"2026-09-11T09:54:53.306Z","timestamp":1789120493306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepaa.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:28:34 GMT","end":"Wed, 09 Dec 2026 09:28:33 GMT"},"fingerprint":{"sha1":"F8:EC:FA:4F:9F:B7:16:B9:54:35:C0:A8:2A:00:55:AE:90:A0:B1:6A","sha256":"D0:BC:78:70:E6:5E:B9:48:B2:52:6E:31:A5:D0:31:D3:8B:46:D3:F7:F7:BA:39:67:A5:6E:6E:41:E0:02:D3:F9"}}},"request":{"raw":"GET /assets/vendor-lodash-28d24e41.js HTTP/1.1\r\nHost: safepaa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a3KFU4m1CkIcmTruM0IqE4SjWd%2FyCAJhmS3q1Vknew5hmtJL%2BtxOqLN%2BHRFzTn1pLG4tAa0va%2BwJSLK7uhzUsbFHZkIvzwyoLj6uhRCyNz9bHrOGRZiDbGbY7m%2Fg1Q%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-17bef\"\r\nexpires: Fri, 11 Sep 2026 14:21:18 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 27215\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cb2b28a6b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97263,"size_decoded":34621,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65340), with no line terminators","md5":"775961b61fe54f3cd7cb34ace73df330","sha1":"374b22f53109e697104f8d19dbdd15ecd5c860fe","sha256":"2143787f24eca88a15ec431ae6aebf29ec70a5c95eac5b4523bdfb5ade10bd3e","sha512":"438129baa041f8d12d425e71d83027a487f22e7e24ca3b3468205d01f1ceefb1ebf98a3c336c47189958b6dfbedf3e76f689f796a68ed51ab8ffdbd183aca233","ssdeep":"1536:H8LyadU0JIMfObIq5oe7HQ8K3sUt3W1DCpxVpJycTqDZbQFFKouA2BX:oauy2e7ItGD8xQ8+BX","tlshash":"92935fc83ad2f05a87a370b5007f088bf13e6ea4a89ca504d1a1f4ed7db954ed537e19","first_seen":"2026-09-11T09:48:23.935659Z","last_seen":"2026-09-11T09:55:41.567393Z","times_seen":7,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepaa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}